last executing test programs: 47.487955687s ago: executing program 1 (id=460): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RGETLOCK(r1, 0x0, 0xfffffdd0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setstatus(r1, 0x4, 0x6800) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x4) 47.102179856s ago: executing program 1 (id=465): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 46.685901495s ago: executing program 1 (id=467): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000140), 0xdd, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000005b00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000080)='./file1\x00', r1, r2) 44.198406685s ago: executing program 1 (id=476): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) unshare(0x2a060400) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, &(0x7f0000000240)={0x1f, 0x40000000000000, 0x0, 0x0, 0x0, 0x4, 0xb35f}, 0x0, 0x0) 43.214110939s ago: executing program 1 (id=479): r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000007c0)={0x1, 0x2, 0x1, 0x0, 0x8}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x80, 0x0, {}, {0x4, 0x1, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x2) ppoll(&(0x7f0000000080)=[{r0, 0x4}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) 42.73976275s ago: executing program 1 (id=486): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 28.283578345s ago: executing program 3 (id=558): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 27.508172844s ago: executing program 32 (id=486): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 27.452730215s ago: executing program 3 (id=563): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [], 0xa, "b727fa1dfc873f6e9e12fc798fa6899f50a9979a5e"}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lc\x00', 0x22, 0x0, 0x7f}, 0x2c) 27.185216001s ago: executing program 3 (id=565): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) unshare(0x22020600) 26.862422699s ago: executing program 3 (id=567): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0xa00040, &(0x7f0000000a40)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0xe467}}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@fat=@errors_continue}, {@shortname_mixed}, {@shortname_win95}, {@fat=@sys_immutable}, {@utf8no}]}, 0x1, 0x373, &(0x7f00000006c0)="$eJzs3U9rXFUUAPDTsfmr6WQhgop4qRvdDEn8Ag3SghhQYkeqC+HVTHTINBPmDZEpot259XMUl+4E8QtkoXt37rJx2UXpk8yfJpOOKSVOHtXfD8I9yT0nc+883uNuHufw1g93drbz2nbWjcq1FJWIqDyIWO5HA5eGY6Ufz8ZJ9+Kd6q0/3vj4088+WN/YuL6Z0o31m++upZSuvPnL19/8ePXX7ouf/HTl57k4WP788K+1Pw9eOXj18NHNr5p5auZpt91NWbrdbnez261G2mrmO7WUPmo1sryRmrt5ozM2v91q7+31Ura7tbS412nkecp2e2mn0Uvddup2ein7MmvuplqtlpYWg6ep39/czNYH8fwZedcuakFMQaeznh3dw3NPzNTvl7IgAKBU5z3/z/6r5/+ZcP6/SCfP//xXHZ3/Z4f37zjnfwAAAAAAAAAAAAAAeB48KIpqURTV0ViMXhIe/l7y8piyJ67/qZ+y18d0nXhxbz6i9f1+fb8+GAfz69vRjFY0YiWq8fDosTAyiG+8v3F9JfUtx9Kd7/r1V3+LqL8wXr8a1VieXL86qE+P6+NonInFk/VrUY2XJ9evTayfjbffOlFfi2r8/kW0oxVb/cfbcf23qym99+HGqfq5fh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/w+1NPJ6DPre79cjFmJ/2L+/dpywPN4ff1D/uL/+SlTj4eT+/CsT+/Nfjtcul7t3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjJe3d3slar0bmoYNTzv/+X2VHwz1WXBun3Tk0txHjy3NP+zzmDyjNVLQw3OWHqUVEU01rq/MVeyvMEMxFxRk4x/ALP/1kvRcQZOXMRMf0tV8r/wp85KONpBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOU6bvpd9koAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoU967u5O1Wo3OFIOy9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA8+TsAAP//S+oM3w==") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='of', 0x8) 26.213504104s ago: executing program 3 (id=570): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000040)={0xc0, 0x0, 0x10000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x11, r2, 0x40000) 25.485301962s ago: executing program 3 (id=571): r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)=[{{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={r1, &(0x7f0000000200)=[{0x80000000}], &(0x7f00000003c0)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000280)={r4, 0x0, &(0x7f0000000080)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f000000a300)={{r3, r6, 0x2, [0x80000001, 0x8]}, {r5, r2, 0x2, [0xc19, 0x5]}, 0x0, [0x7d, 0x8]}) 24.834812787s ago: executing program 33 (id=571): r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)=[{{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={r1, &(0x7f0000000200)=[{0x80000000}], &(0x7f00000003c0)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000280)={r4, 0x0, &(0x7f0000000080)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f000000a300)={{r3, r6, 0x2, [0x80000001, 0x8]}, {r5, r2, 0x2, [0xc19, 0x5]}, 0x0, [0x7d, 0x8]}) 6.554028813s ago: executing program 0 (id=623): syz_emit_ethernet(0x2a, &(0x7f0000002100)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @multicast1}, {0x11, 0x81, 0x0, @multicast1}}}}}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) close(0x3) 5.154986957s ago: executing program 4 (id=627): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000000)={0x3, 0x200, 0x8e, 0x2, 0x0, 0xb19, 0x5, 0xa, 0xa5, 0x649, 0x5, 0x203, 0x1, 0x8}) 4.861505904s ago: executing program 2 (id=628): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0) mkdirat(r0, &(0x7f0000000180)='nullb1\x00', 0x1ff) unlinkat(r0, &(0x7f0000000680)='nullb1\x00', 0x200) 4.717339238s ago: executing program 0 (id=629): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x400, 0x70fd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x11, 0xffff}, {0x5, 0x8}, {0xfff1, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20049010}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0xc, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 4.506454522s ago: executing program 0 (id=630): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0xf, 0x8, 0x7c, 0xfffffffe, 0xb5d, 0x7f, 0x20000006, 0x4a, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x5, 0x0, 0x3, 0x400, 0x0, 0x1, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x0, 0x3, 0xe665, 0x204, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x7fc, 0x400003, 0xe, 0x4, 0x80008071, 0xffffb8f3, 0x7, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x9, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0xa, 0x8, 0x4, 0x0, 0xfffffffc], [0xc0, 0x9, 0x8000012f, 0x8004, 0x5, 0x8, 0x129432e7, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x7, 0xfffffffc, 0x6, 0x2, 0x1, 0x2, 0x2f, 0x1782000, 0x313, 0x77, 0xea4, 0x5fa, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x2, 0xff, 0x3d, 0x1000005, 0x5bea93c3, 0xd, 0x4e0, 0x2, 0x4, 0xf, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x0, 0x4, 0x10009, 0x3, 0x9, 0x9, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c93690, 0x80, 0x3], [0x7, 0xc08, 0x4, 0x5, 0xfffffffd, 0x40, 0x31d, 0x9, 0x5, 0x7fff, 0x9, 0x10001, 0xb, 0x4, 0x5, 0x5, 0x3, 0x1ef, 0x0, 0x8, 0x86, 0x3, 0x1, 0x3e7, 0xb, 0x5, 0x0, 0x2, 0x3, 0x20000008, 0x1000, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfb1, 0x1000, 0xa2, 0x7, 0x2000a9, 0x5, 0x7, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x4, 0x5, 0x1, 0xa, 0x20, 0x2, 0x1c, 0x8867, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x7, 0x3, 0x0, 0x10000, 0x4, 0x37f3, 0xffff, 0xa622, 0x1, 0x80000005, 0x1, 0x2, 0x150, 0x60a7, 0x6, 0x7f, 0xffffffff, 0x80000000, 0x5, 0x4, 0x4c8, 0x1, 0x8ae2, 0x10000, 0x3, 0x8d, 0x100, 0xfc, 0x40000047, 0xb2, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0x8a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.414415755s ago: executing program 2 (id=631): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000200)={0xe, 0x20000, [{0x4, 0x0, 0x200003}, {0x81, 0x0, 0x2c13ce6}, {0x1, 0x0, 0x6}, {0x400}, {0xc7b, 0x0, 0x6}, {0x3, 0x0, 0x400}, {0x0, 0x0, 0xffffffff7fffffff}, {0x5, 0x0, 0x5}, {0xf3, 0x0, 0x9}, {0x3, 0x0, 0xfffffffffffffffb}, {0xffff8778, 0x0, 0x200000007}, {0x3, 0x0, 0x4005}, {0x5, 0x0, 0x8}, {0x1, 0x0, 0x44}, {0x767d, 0x0, 0x2}, {0x468e5329, 0x0, 0xffffffffffffffff}]}) 4.354037546s ago: executing program 0 (id=632): mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) lseek(r0, 0x186a0, 0x0) read(r0, &(0x7f0000000000), 0x10000) 3.834444118s ago: executing program 0 (id=633): r0 = semget$private(0x0, 0x1, 0x3) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x43, 0x1000}], 0x1, 0x0) 3.511763336s ago: executing program 0 (id=634): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x2600}, {r1, 0x2046}], 0x2, 0x0, 0x0, 0x0) 3.146959485s ago: executing program 2 (id=635): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x8, 0x6, "66f51e", 0x28, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @local, {[], {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x80, 0x4, 0x0, 0x4, {[@md5sig={0x13, 0x12, "0681440e908315ac0cb825524e64a502"}]}}}}}}}}, 0x0) 2.687720366s ago: executing program 4 (id=636): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="02030e00d3fc02000000ab5d71b9edd7c9560385dcb188a8", 0x47, 0x800, &(0x7f00000001c0)={0x11, 0x3, r2, 0x1, 0xfd, 0x6, @random="2f793e4a2893"}, 0x14) 2.539039329s ago: executing program 2 (id=637): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) 2.299264885s ago: executing program 4 (id=638): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)=[{}]) 1.919895124s ago: executing program 2 (id=639): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x24}, 0x4, 0x700000000000000}, 0x0) 1.417612267s ago: executing program 2 (id=640): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) 1.290320689s ago: executing program 4 (id=641): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@initdev={0xac, 0x1e, 0x3, 0x0}, 0x4e1f, 0x0, 0x0, 0x3, 0xa}, {0x7, 0x0, 0x40000000007, 0x6811221d, 0x8, 0x7fffffffffffffff, 0x200000200000003, 0xd}, {0x7, 0xfffffffffffffffd, 0x6, 0x7}, 0x401, 0x0, 0x1, 0x0, 0x6}, {{@in=@loopback, 0x0, 0x6c}, 0x2, @in6=@remote, 0x3502, 0x1, 0x0, 0x0, 0x9, 0x3}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @loopback, 0x1ff}, 0x1c) 1.037672925s ago: executing program 4 (id=642): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x800080, &(0x7f0000003b40)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=ad,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00', @ANYRESOCT=0x0, @ANYRESOCT, @ANYBLOB="57763f8b80ccb54515aa467d89bbb893a63f49cae5772efb6bb2d1d03fd1742a12e8978807c6a53aae173e5c08461b1d2594eed5030000002e74086cd91724e5631fa9733e7a1e4017c3d4264edd910e", @ANYBLOB="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"], 0x1, 0x105ea, &(0x7f000000d000)="$eJzs3E9vG0UUAPBx0pS2lBIhDty6EkJKpNqqk7SCW4BUgESqiD8HTuDYjuXW/xQ7iSlCBM6IY78InLhz50twQxyQuBWBvDOGprQipcZJmt9PWr+d8e7bN1aU6O1GDsCpNZ/99mshXArnQwizIYSLIeT7hbTlVmN4KYRwOYQwc99WSPN/TZwNIVwIIVwaJY85C+mtz+/ur98brl9IWa8czYqBSak8wbmvhBDavbi/146x24jxVpqv7Dbz2F7ZTTG+0b6dxt0Y9+qbeYa9yvi4WNlyIx7f7e30R3GrVamOYqO5lc/3OvGC/d3GOE9+wq3Kdj6u1TfH5e7n592Jg2GKd/qDuJN+WfY+zdOHwWAc43Xqw3pcT+92HqudQZrvxvpq9eEo7qbYj9Oh2m3V8jo2/9NHfCK82+zsDLPd+na/2e1k10rlV0vl68XydrdWH9RXipV27fpKttBojQ4rDuqV9mqj22206qVqt72YLTSq1WK5nC2s1TeblU5WLpeWS1eL1xbT3pXsrZsfZq1atjCKbzQ7O4Nmq59tdbezeMZitlRafm0xe7mcvb++kW28d+PG+sYHH699dPP19XfeTAf9o6xsYenq0lKxfLW4VF58zAX/fizXP/oTPZ31P+Dck53OaVc46gIATp68/z8fptn/f/b93V/Wvqr8qP+HU+wk9f/N1JA/qv/v1VI+/f9jOyb97/T6/0Os/8vjuP4zqWD9P8eJ/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NT6ae7bt/Od+Th+Ns0/l6ZeSONCCGEmhPDHQ8yGswdyzqY8c484fu6BGn4ohDzD6BrPpO1CCGE1bfeef3jtZyb6SQAAAMDT6bv9y9/Ebj2+zB91QUxTvGkzc/GTCeUrhBDm5n+eULaZ0cuLE0qW/3yfCcMJZctvYJ2bULJ0U+yLCaU7lNkD4dx9oRDDzDSrAQAApuNgJ+CJOgAAwNPr66MugMk7zPO7Qhg/yhw/C87/8/7vB4LnD4wAAACAE6hw1AUAAAAA/7u8/z/J3/8HAAAA/Lv4/X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8yc793KgNRHEAfrZxAvmjoCjHSGklNygjJeSYI6KANEEJpIU0QA3sbUtY4RW20WK0aNEyGC36PskejzE/nhGXmUEGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4pLtyOf03+/H3yMvFqTmb6jzp7ggAAAA4tC6X0/pg3PQ/tuc/t6e+tv0sIvKIeG7sXsS7TmbR5pRHri8PavgfUSdsP+N9u32IiJ/t9vDl0t8CAAAA3K7VfDFpl/jr3fjaBdGnZtIm//QrUV4WEeX4PlFavt19SxRW/74H8SdRWj2BNUwU1ky5DVKlnaToNMO9JmuavNdyAACAXnRHAv2OQgAAAOjT773j2RXroGdZ7JYyd2vB9T/vnxYER50eAAAA8AZl1y4AAAAAONPoxSvq8b/n/wEAAMBta57/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwCWty+V0NV9Mzs3ZVK/wfdi8uaqqBLcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj+/OOAjAIBmHwj3l3wfsfNizEMrXNTCEfLhYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7YRS442Yk08394Se657VR2ZEmemxJU5cedBn/gbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF725yUFQiAIomDO+N9J3/+wkqBnECECGh5V1KIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzfvfL/4mpcSaZO20sHY8ka1eNravG3oPG0YPx9m8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC527t9FjioOAPib3Z3ND5CspxzExohKRDF3G38h2KQQDgvBSiyXy15Y3agkV5hwhddYCP4HNtqmEQ4EiUX+ghRWpoxNBLkiioXVypsfySR76kS92d3L5wNv3jezL/O+bw6O+86bOwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDS7plwoozb8dDLjqFVnPvx9tZ67G/c10e3BleOxxbjpOG8F00n3qPlWWcBAADAQdcu6/sQws10Zy32rV5W/z9bjok1/9YjeVzW8/fX/WVf1v6xXf3+63fuTNTL50lDCN/2xsPVxlY4165NJpNaA4/91Qe9u2H2LCF/QtPOvmytt7Yf202zu558cf36m90sPPR/JA4A/Denyr4INpJPs5+PNkbjYX+WiQGwuDr//HE5pKz/270G8gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYsd3t8EIZJyGEJzp34+jG7a31vfpbgyvHy3bsvcc/q14zXiINIWyMxsPDDa5lnj1Tc9zFS5c/GIzHwwsPFDz5r/6XQCBYlGCfv0EBAHCgpEWLdf3NdGctnkuWQph8dW/9f7ISh5r1/7XR1ZPVuar1f7+xFc63uvX/yub5j1cuXrr84uj84Nzw3PDD0/2X+6+tvv5K/9WVeD9X8+M+ZwsAAMCi6hatWv+3lqb3/49W4lCz/v/h53d/qc7VVv9PefD9/31OCAAA4CH26Inff032OJ90u+GTwebmhX5+vPPv0/lxBqn+vSPTpw4VrVr/t5dmkBsAAADQuN3t5J79/7OVONTc///u+T++rF6zXTyC2BiNh6fWPxqfbW45c2t6/7+357gmfp24geUCAAAwI0eKVt3/T7P3/1tPxfi3EEIrhPDc0/n44s8A1qr/3+h8fqY6V/X9/5eaXebcaS3n96PO+//Z2OUQOssNJAYAAMCBdLhosf7/Kd1Ze/+bo293vf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/sj/3tgkDYRyHX18SJW6TEdJbfMxAQ4VgBUBCsuQZGICFaKhoLRaBFUCCc01nKJ6n+f+KK+4FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAt3d9+uIjIopIXaZI0+3f+TMiviLt2nbyfc9ifzk1P49cHI6znL8x/y8jooyij3MAAHpXdZtjvalXg7zDvKO847xV2dTLV34aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAGztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WaXRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBYAQAA//8zXFtT") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000}) 0s ago: executing program 4 (id=643): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={r2, 0x10, 0x20, 0x7fffffff, 0x1}, &(0x7f00000000c0)=0x18) kernel console output (not intermixed with test programs): 4][ T4424] ======================================================= [ 91.070790][ T4424] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 91.476353][ T4274] ocfs2: Unmounting device (7,2) on (node local) [ 91.721740][ T4468] loop3: detected capacity change from 0 to 2048 [ 91.730351][ T4467] device hsr0 entered promiscuous mode [ 91.761172][ T4467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42'. [ 91.801569][ T4467] device hsr_slave_0 left promiscuous mode [ 91.830829][ T4468] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.844281][ T4467] device hsr_slave_1 left promiscuous mode [ 91.933035][ T4370] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 91.977190][ T4467] device hsr0 left promiscuous mode [ 92.144608][ T4370] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.175922][ T4370] usb 1-1: config 0 interface 0 has no altsetting 0 [ 92.196172][ T4370] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 92.222612][ T4475] loop3: detected capacity change from 0 to 4096 [ 92.236966][ T4370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.255296][ T4370] usb 1-1: Product: syz [ 92.259530][ T4370] usb 1-1: Manufacturer: syz [ 92.301464][ T4370] usb 1-1: SerialNumber: syz [ 92.316596][ T4370] usb 1-1: config 0 descriptor?? [ 92.367111][ T4370] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 92.382307][ T4482] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.424953][ T4370] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 92.455495][ T4370] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 92.469103][ T4486] loop4: detected capacity change from 0 to 256 [ 92.479628][ T4483] loop1: detected capacity change from 0 to 2048 [ 92.493065][ T4370] usb 1-1: media controller created [ 92.533760][ T4370] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 92.549789][ T4483] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 92.606830][ T26] audit: type=1800 audit(1786463274.467:2): pid=4483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.47" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 92.683229][ T4316] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.708116][ T26] audit: type=1804 audit(1786463274.537:3): pid=4491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.47" name="/newroot/14/file1/file1" dev="loop1" ino=15 res=1 errno=0 [ 92.809419][ T26] audit: type=1800 audit(1786463274.537:4): pid=4491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.47" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 92.874849][ T4370] DVB: Unable to find symbol tda10046_attach() [ 92.893402][ T4316] usb 3-1: Using ep0 maxpacket: 8 [ 92.894862][ T4370] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 92.908804][ T4316] usb 3-1: unable to get BOS descriptor or descriptor too short [ 92.946895][ T4316] usb 3-1: config 117 has an invalid interface number: 163 but max is 0 [ 92.959663][ T4370] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 92.960515][ T4370] dvb_usb_m920x: probe of 1-1:0.0 failed with error -71 [ 92.970505][ T4370] usb 1-1: USB disconnect, device number 3 [ 93.046070][ T4316] usb 3-1: config 117 has no interface number 0 [ 93.060327][ T4316] usb 3-1: config 117 interface 163 has no altsetting 0 [ 93.099053][ T4316] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 93.121935][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.137683][ T4491] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 93.141767][ T4316] usb 3-1: Product: syz [ 93.191794][ T4316] usb 3-1: Manufacturer: syz [ 93.208527][ T4316] usb 3-1: SerialNumber: syz [ 93.298376][ T4497] capability: warning: `syz.3.52' uses 32-bit capabilities (legacy support in use) [ 93.323100][ T4491] EXT4-fs (loop1): Remounting filesystem read-only [ 93.374719][ T4501] mmap: syz.0.54 (4501) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 93.646463][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 94.258774][ T4316] usb 3-1: USB disconnect, device number 2 [ 94.276135][ T4316] f81534a_ctrl 3-1:117.163: failed to enable ports: -19 [ 94.455040][ T4321] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 94.643055][ T4321] usb 1-1: Using ep0 maxpacket: 8 [ 94.654179][ T4321] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 94.676495][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 94.685971][ T4321] usb 1-1: Product: syz [ 94.690180][ T4321] usb 1-1: Manufacturer: syz [ 94.697708][ T4321] usb 1-1: SerialNumber: syz [ 94.726802][ T4321] usb 1-1: config 0 descriptor?? [ 94.751026][ T4321] gspca_main: sq905-2.14.0 probing 2770:9120 [ 94.752815][ T4531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.67'. [ 94.975736][ T4533] loop8: detected capacity change from 0 to 5 [ 95.269893][ T4539] loop1: detected capacity change from 0 to 512 [ 95.329521][ T4539] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 95.376660][ T4541] netlink: 20 bytes leftover after parsing attributes in process `syz.2.72'. [ 95.399383][ T4539] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.71: bg 0: block 104: invalid block bitmap [ 95.444328][ T4539] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 95.459097][ T4539] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.71: invalid indirect mapped block 1 (level 1) [ 95.483408][ T4539] EXT4-fs (loop1): 1 truncate cleaned up [ 95.489156][ T4539] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 95.610941][ T4545] loop3: detected capacity change from 0 to 512 [ 95.693451][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 95.774658][ T4321] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 95.782160][ T4321] sq905: probe of 1-1:0.0 failed with error -71 [ 95.813815][ T4545] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 95.845684][ T4321] usb 1-1: USB disconnect, device number 4 [ 95.883084][ T4545] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.136359][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 97.802909][ T4579] loop1: detected capacity change from 0 to 131072 [ 97.813558][ T4579] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 97.820571][ T4579] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 97.828782][ C1] sched: RT throttling activated [ 97.835747][ T22] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 97.851896][ T4579] F2FS-fs (loop1): invalid crc value [ 97.886634][ T4595] loop3: detected capacity change from 0 to 4096 [ 97.897900][ T4579] F2FS-fs (loop1): Found nat_bits in checkpoint [ 97.949760][ T4579] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 97.958183][ T4579] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 98.064423][ T22] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 98.103056][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.132277][ T22] usb 3-1: Product: syz [ 98.137593][ T22] usb 3-1: Manufacturer: syz [ 98.142246][ T22] usb 3-1: SerialNumber: syz [ 98.171652][ T22] usb 3-1: config 0 descriptor?? [ 98.432282][ T4595] EXT4-fs (loop3): Test dummy encryption mode enabled [ 98.505076][ T4595] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 98.516992][ T4321] usb 3-1: USB disconnect, device number 3 [ 98.958888][ T4595] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 99.029483][ T4603] loop4: detected capacity change from 0 to 40427 [ 99.040094][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 99.061926][ T4603] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 99.076640][ T4603] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 99.200426][ T4603] F2FS-fs (loop4): Found nat_bits in checkpoint [ 99.243186][ T22] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 99.313976][ T4603] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 99.321091][ T4603] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 99.435080][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.463060][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.488006][ T4622] loop2: detected capacity change from 0 to 256 [ 99.488037][ T22] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 99.560880][ T4622] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.579420][ T22] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.613058][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.630315][ T4624] Bluetooth: MGMT ver 1.22 [ 99.640685][ T4622] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d) [ 99.660895][ T22] usb 1-1: config 0 descriptor?? [ 99.727741][ T4282] syz-executor: attempt to access beyond end of device [ 99.727741][ T4282] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 99.756600][ T26] audit: type=1326 audit(1786463281.617:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4621 comm="syz.2.102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44fd79e0d9 code=0x7ffc0000 [ 99.871854][ T26] audit: type=1326 audit(1786463281.657:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4621 comm="syz.2.102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44fd79e0d9 code=0x7ffc0000 [ 99.957962][ T26] audit: type=1326 audit(1786463281.657:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4621 comm="syz.2.102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44fd79e0d9 code=0x7ffc0000 [ 99.991026][ T26] audit: type=1326 audit(1786463281.667:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4621 comm="syz.2.102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44fd79e0d9 code=0x7ffc0000 [ 100.126253][ T22] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 100.143171][ T26] audit: type=1326 audit(1786463281.667:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4621 comm="syz.2.102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f44fd79e0d9 code=0x7ffc0000 [ 100.166900][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.209028][ T22] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 100.228324][ T4633] loop2: detected capacity change from 0 to 2048 [ 100.241173][ T4633] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 100.251436][ T26] audit: type=1326 audit(1786463281.677:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4621 comm="syz.2.102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44fd79e0d9 code=0x7ffc0000 [ 100.313764][ T4633] syz.2.107: attempt to access beyond end of device [ 100.313764][ T4633] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 100.329162][ T4635] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.397900][ T26] audit: type=1326 audit(1786463281.677:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4621 comm="syz.2.102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44fd79e0d9 code=0x7ffc0000 [ 100.505956][ T26] audit: type=1326 audit(1786463281.677:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4621 comm="syz.2.102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f44fd79e0d9 code=0x7ffc0000 [ 100.573966][ T26] audit: type=1326 audit(1786463281.677:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4621 comm="syz.2.102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44fd79e0d9 code=0x7ffc0000 [ 100.700460][ T4639] device-mapper: ioctl: Invalid ioctl structure: uuid xfrm0, name , dev d0000004f8 [ 100.723306][ T26] audit: type=1326 audit(1786463281.677:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4621 comm="syz.2.102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44fd79e0d9 code=0x7ffc0000 [ 101.052642][ T4643] device syzkaller1 entered promiscuous mode [ 101.225142][ T4649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.113'. [ 101.428236][ T4316] kernel read not supported for file /video9 (pid: 4316 comm: kworker/1:4) [ 101.646047][ T4661] loop4: detected capacity change from 0 to 512 [ 101.704827][ T4661] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 101.735419][ T4661] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.778865][ T4641] loop2: detected capacity change from 0 to 32768 [ 101.850042][ T4641] XFS (loop2): Mounting V5 Filesystem [ 101.900467][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 102.030712][ T4641] XFS (loop2): Ending clean mount [ 102.092245][ T4641] XFS (loop2): Quotacheck needed: Please wait. [ 102.202004][ T4641] XFS (loop2): Quotacheck: Done. [ 102.387898][ T4321] usb 1-1: USB disconnect, device number 5 [ 102.727247][ T4274] XFS (loop2): Unmounting Filesystem [ 103.189413][ T4681] loop4: detected capacity change from 0 to 32768 [ 103.472303][ T4681] UFO tlock:0xffffc9000285a1b0 [ 103.577583][ T4691] loop2: detected capacity change from 0 to 256 [ 103.613736][ T4691] exfat: Deprecated parameter 'utf8' [ 103.628389][ T4691] exfat: Deprecated parameter 'utf8' [ 103.656623][ T4691] exfat: Deprecated parameter 'namecase' [ 103.662392][ T4691] exfat: Deprecated parameter 'namecase' [ 103.757407][ T4691] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 103.993285][ T4290] Bluetooth: hci4: command 0x0411 tx timeout [ 104.231626][ T4702] loop2: detected capacity change from 0 to 256 [ 104.552040][ T4709] capability: warning: `syz.0.133' uses deprecated v2 capabilities in a way that may be insecure [ 104.939721][ T4718] device macvlan0 entered promiscuous mode [ 104.966507][ T4718] Zero length message leads to an empty skb [ 105.701903][ T4741] loop3: detected capacity change from 0 to 512 [ 105.755406][ T4741] EXT4-fs: Ignoring removed oldalloc option [ 105.790877][ T4741] EXT4-fs (loop3): Test dummy encryption mode enabled [ 105.842846][ T4744] loop0: detected capacity change from 0 to 1024 [ 105.887443][ T4741] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 106.278450][ T47] hfsplus: b-tree write err: -5, ino 3 [ 106.328577][ T4283] hfsplus: node 4:3 still has 1 user(s)! [ 106.391219][ T4755] input: syz1 as /devices/virtual/input/input6 [ 106.619361][ T4760] loop2: detected capacity change from 0 to 1024 [ 106.830984][ T4342] hfsplus: b-tree write err: -5, ino 25 [ 106.841217][ T4342] hfsplus: b-tree write err: -5, ino 4 [ 106.887393][ T4342] hfsplus: b-tree write err: -5, ino 2 [ 106.918613][ T4342] hfsplus: b-tree write err: -5, ino 17 [ 107.298655][ T4779] loop4: detected capacity change from 0 to 512 [ 107.359642][ T4779] EXT4-fs (loop4): Test dummy encryption mode enabled [ 107.417831][ T4779] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.161: inode has both inline data and extents flags [ 107.458681][ T4779] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.161: couldn't read orphan inode 15 (err -117) [ 107.519262][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 107.564460][ T4779] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 107.643487][ T4785] sctp: [Deprecated]: syz.2.164 (pid 4785) Use of struct sctp_assoc_value in delayed_ack socket option. [ 107.643487][ T4785] Use struct sctp_sack_info instead [ 107.804253][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 108.201347][ T4798] input: syz1 as /devices/virtual/input/input7 [ 108.348102][ T14] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.533056][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 108.540810][ T14] usb 4-1: unable to get BOS descriptor or descriptor too short [ 108.574843][ T14] usb 4-1: config 9 has an invalid interface number: 57 but max is 0 [ 108.601993][ T14] usb 4-1: config 9 has no interface number 0 [ 108.631891][ T14] usb 4-1: config 9 interface 57 has no altsetting 0 [ 108.640062][ T4804] device syzkaller1 entered promiscuous mode [ 108.676866][ T14] usb 4-1: string descriptor 0 read error: -22 [ 108.694273][ T14] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 108.735085][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.754484][ T4689] Set syz1 is full, maxelem 65536 reached [ 109.284518][ T4824] loop4: detected capacity change from 0 to 2048 [ 109.321585][ T4824] loop4: p2 < > p3 < p5 > p4 [ 109.337205][ T4824] loop4: p4 start 458752 is beyond EOD, truncated [ 109.344705][ T4824] loop4: p5 start 458752 is beyond EOD, truncated [ 109.783998][ T14] video4linux radio48: keene_cmd_set failed (-71) [ 109.801237][ T14] radio-keene 4-1:9.57: V4L2 device registered as radio48 [ 109.822728][ T14] usb 4-1: USB disconnect, device number 2 [ 110.012638][ T4841] loop1: detected capacity change from 0 to 256 [ 110.193110][ T4845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.191'. [ 110.628852][ T4831] loop0: detected capacity change from 0 to 32768 [ 110.724586][ T4831] XFS (loop0): Mounting V5 Filesystem [ 110.902316][ T4831] XFS (loop0): Ending clean mount [ 110.944622][ T4831] XFS (loop0): Quotacheck needed: Please wait. [ 111.121802][ T4831] XFS (loop0): Quotacheck: Done. [ 111.152280][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 111.152294][ T26] audit: type=1800 audit(1786528829.003:30): pid=4831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.185" name="file1" dev="loop0" ino=9286 res=0 errno=0 [ 111.275914][ T26] audit: type=1800 audit(1786528829.133:31): pid=4831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.185" name="file1" dev="loop0" ino=9286 res=0 errno=0 [ 111.497043][ T4283] XFS (loop0): Unmounting Filesystem [ 111.765986][ T4882] loop2: detected capacity change from 0 to 16 [ 111.821038][ T4882] erofs: (device loop2): mounted with root inode @ nid 36. [ 111.897665][ T4886] Bluetooth: MGMT ver 1.22 [ 111.908823][ T4885] netlink: 24 bytes leftover after parsing attributes in process `syz.3.206'. [ 112.441256][ T4906] fuse: Invalid user_id [ 112.683067][ T14] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 112.739818][ T4916] loop1: detected capacity change from 0 to 128 [ 112.816947][ T4916] FAT-fs (loop1): error, invalid access to FAT (entry 0x0f1000ff) [ 112.834555][ T4918] loop3: detected capacity change from 0 to 512 [ 112.844235][ T4916] FAT-fs (loop1): Filesystem has been set read-only [ 112.876011][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.900076][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.918747][ T4918] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 112.931092][ T4918] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.993731][ T4924] loop4: detected capacity change from 0 to 1024 [ 113.013311][ T14] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 113.026355][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.059906][ T4924] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 113.093420][ T4924] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.093857][ T14] usb 1-1: config 0 descriptor?? [ 113.157318][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 113.285182][ T4924] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.222: bg 0: block 112: padding at end of block bitmap is not set [ 113.381815][ T4924] EXT4-fs error (device loop4): ext4_free_blocks:6220: comm syz.4.222: Freeing blocks not in datazone - block = 0, count = 16 [ 113.534645][ T4344] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 113.547453][ T4344] EXT4-fs (loop4): This should not happen!! Data will be lost [ 113.547453][ T4344] [ 113.557274][ T4344] EXT4-fs (loop4): Total free blocks count 0 [ 113.563469][ T4344] EXT4-fs (loop4): Free/Dirty block details [ 113.570809][ T4344] EXT4-fs (loop4): free_blocks=16 [ 113.576511][ T4344] EXT4-fs (loop4): dirty_blocks=16 [ 113.582152][ T4344] EXT4-fs (loop4): Block reservation details [ 113.590563][ T4344] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 113.597699][ T14] hid-steam 0003:28DE:1142.0004: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 113.606246][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 113.647419][ T14] hid-steam 0003:28DE:1142.0005: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 113.733900][ T14] hid-steam 0003:28DE:1142.0004: Steam wireless receiver connected [ 113.813018][ T4321] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 113.847479][ T14] usb 1-1: USB disconnect, device number 6 [ 113.862156][ T14] hid-steam 0003:28DE:1142.0004: Steam wireless receiver disconnected [ 113.934079][ T4943] fido_id[4943]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 114.004525][ T4321] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.021140][ T4321] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 114.031698][ T4321] usb 3-1: config 1 has no interface number 0 [ 114.038403][ T4321] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 114.050325][ T4321] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 114.061612][ T4321] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 114.071030][ T4321] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 114.089819][ T4321] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.110490][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.118950][ T4321] usb 3-1: Product: syz [ 114.131627][ T4321] usb 3-1: Manufacturer: syz [ 114.142976][ T4321] usb 3-1: SerialNumber: syz [ 114.169762][ T4937] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 114.260604][ T4944] loop3: detected capacity change from 0 to 32768 [ 114.301749][ T4944] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.228 (4944) [ 114.305910][ T4948] device batadv_slave_0 entered promiscuous mode [ 114.338635][ T4947] device batadv_slave_0 left promiscuous mode [ 114.408327][ T4944] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 114.439152][ T4944] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 114.494012][ T4944] BTRFS info (device loop3): using free space tree [ 114.626413][ T4937] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 114.931937][ T4944] BTRFS info (device loop3): enabling ssd optimizations [ 114.982116][ T4981] loop1: detected capacity change from 0 to 512 [ 115.210282][ T4981] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 115.290976][ T4321] cdc_ncm 3-1:1.1: bind() failure [ 115.317649][ T4321] usb 3-1: USB disconnect, device number 4 [ 115.405417][ T4993] loop4: detected capacity change from 0 to 512 [ 115.482992][ T4280] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 115.505026][ T4993] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 115.522697][ T4993] ext4 filesystem being mounted at /56/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.551012][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 115.666728][ T26] audit: type=1800 audit(1786528833.523:32): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.241" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 115.896675][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 116.317799][ T5021] loop3: detected capacity change from 0 to 512 [ 116.416091][ T5021] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 116.449735][ T5021] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.242: bad orphan inode 15 [ 116.483939][ T5021] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 116.552523][ T5031] loop0: detected capacity change from 0 to 512 [ 116.577431][ T5031] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.693233][ T5034] syz.2.265 uses obsolete (PF_INET,SOCK_PACKET) [ 116.754032][ T5031] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 116.783941][ T5040] loop1: detected capacity change from 0 to 128 [ 116.798052][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 116.825208][ T5031] ext4 filesystem being mounted at /43/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.863219][ T5040] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 116.947048][ T5042] FAT-fs (loop1): error, parent dir link count too low (2) [ 116.985570][ T5039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.254'. [ 116.995792][ T5042] FAT-fs (loop1): Filesystem has been set read-only [ 117.104014][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 117.241706][ T4273] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 117.497975][ T5054] loop8: detected capacity change from 0 to 7 [ 117.535177][ T5054] Dev loop8: unable to read RDB block 7 [ 117.540822][ T5054] loop8: unable to read partition table [ 117.604816][ T5054] loop8: partition table beyond EOD, truncated [ 117.643169][ T5054] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 118.198176][ T5083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.276'. [ 118.311810][ T5086] loop4: detected capacity change from 0 to 8 [ 118.313599][ T5002] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 118.368105][ T5086] SQUASHFS error: Unable to read inode 0x11f [ 118.436926][ T5088] loop1: detected capacity change from 0 to 512 [ 118.464952][ T5088] ext4: Unknown parameter 'appraise_type' [ 118.547363][ T5002] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 118.569163][ T5002] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.603079][ T5002] usb 1-1: Product: syz [ 118.607319][ T5002] usb 1-1: Manufacturer: syz [ 118.629497][ T5002] usb 1-1: SerialNumber: syz [ 118.662888][ T5002] usb 1-1: config 0 descriptor?? [ 118.684759][ T5092] netlink: 104 bytes leftover after parsing attributes in process `syz.2.280'. [ 118.996367][ T5102] ip_tunnel: non-ECT from 0.0.8.0 with TOS=0x2 [ 119.092581][ T5104] loop3: detected capacity change from 0 to 512 [ 119.115144][ T5002] usb 1-1: Firmware version (0.0) predates our first public release. [ 119.167425][ T5002] usb 1-1: Please update to version 0.2 or newer [ 119.211936][ T5002] usb 1-1: Firmware: build [ 119.448867][ T5002] usb 1-1: USB disconnect, device number 7 [ 119.550078][ T5117] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 121.839371][ T5227] loop1: detected capacity change from 0 to 4096 [ 121.842770][ T5235] bridge0: port 3(vlan2) entered blocking state [ 121.884254][ T5235] bridge0: port 3(vlan2) entered disabled state [ 121.908523][ T5235] device vlan2 entered promiscuous mode [ 121.937403][ T5235] device dummy0 entered promiscuous mode [ 122.205479][ T5245] Illegal XDP return value 4291297280 on prog (id 25) dev N/A, expect packet loss! [ 122.358435][ T5249] loop3: detected capacity change from 0 to 2048 [ 122.432480][ T5249] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.502064][ T5254] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 122.582632][ T5256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.323'. [ 122.882996][ T127] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 123.086811][ T127] usb 5-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 123.105934][ T127] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 123.136478][ T127] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 123.168771][ T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.188712][ T127] usb 5-1: Product: syz [ 123.208943][ T127] usb 5-1: Manufacturer: syz [ 123.220181][ T127] usb 5-1: SerialNumber: syz [ 123.246158][ T127] usb 5-1: config 0 descriptor?? [ 123.369917][ T5277] loop3: detected capacity change from 0 to 1024 [ 123.423164][ T5002] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 123.485194][ T5277] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 123.592841][ T5266] loop2: detected capacity change from 0 to 32768 [ 123.615441][ T5002] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.632781][ T26] audit: type=1800 audit(1786528841.493:33): pid=5277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.331" name="file1" dev="overlay" ino=15 res=0 errno=0 [ 123.678132][ T5002] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.727988][ T5002] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 123.755471][ T5002] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.775705][ T5002] usb 2-1: config 0 descriptor?? [ 123.791004][ T5266] XFS (loop2): Mounting V5 Filesystem [ 123.812076][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 123.897574][ T127] mos7840 5-1:0.0: required endpoints missing [ 123.932177][ T127] usb 5-1: USB disconnect, device number 2 [ 123.942355][ T5290] loop3: detected capacity change from 0 to 128 [ 123.965612][ T5290] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 124.039241][ T5273] loop0: detected capacity change from 0 to 32768 [ 124.100346][ T5266] XFS (loop2): Ending clean mount [ 124.197786][ T5002] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 124.224889][ T5002] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 124.278723][ T4274] XFS (loop2): Unmounting Filesystem [ 124.286025][ T5002] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0006/input/input8 [ 124.339690][ T5002] cm6533_jd 0003:0D8C:0022.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 124.473692][ T127] usb 2-1: USB disconnect, device number 2 [ 124.511220][ T5291] fido_id[5291]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 124.749949][ T26] audit: type=1800 audit(1786528842.603:34): pid=5290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.333" name="file2" dev="loop3" ino=95 res=0 errno=0 [ 125.019540][ T5296] netlink: 20 bytes leftover after parsing attributes in process `syz.0.346'. [ 125.217367][ T5002] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 125.403205][ T5002] usb 5-1: Using ep0 maxpacket: 32 [ 125.417681][ T5002] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 125.450652][ T5002] usb 5-1: config 0 has no interface number 0 [ 125.466080][ T26] audit: type=1326 audit(1786528843.323:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5311 comm="syz.3.342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e359e0d9 code=0x7ffc0000 [ 125.495477][ T5002] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 125.518447][ T5002] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.539620][ T26] audit: type=1326 audit(1786528843.373:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5311 comm="syz.3.342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f48e355e90e code=0x7ffc0000 [ 125.566989][ T5002] usb 5-1: Product: syz [ 125.579971][ T5002] usb 5-1: Manufacturer: syz [ 125.592672][ T5002] usb 5-1: SerialNumber: syz [ 125.616594][ T5002] usb 5-1: config 0 descriptor?? [ 125.646922][ T5002] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 125.658149][ T26] audit: type=1326 audit(1786528843.373:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5311 comm="syz.3.342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e359e0d9 code=0x7ffc0000 [ 125.716058][ T26] audit: type=1326 audit(1786528843.373:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5311 comm="syz.3.342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e359e0d9 code=0x7ffc0000 [ 125.740595][ T26] audit: type=1326 audit(1786528843.373:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5311 comm="syz.3.342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f48e359e0d9 code=0x7ffc0000 [ 125.765313][ T26] audit: type=1326 audit(1786528843.373:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5311 comm="syz.3.342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e359e0d9 code=0x7ffc0000 [ 125.852579][ T5002] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 125.895308][ T5002] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 125.909427][ T26] audit: type=1326 audit(1786528843.373:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5311 comm="syz.3.342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e359e0d9 code=0x7ffc0000 [ 126.038716][ T26] audit: type=1326 audit(1786528843.373:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5311 comm="syz.3.342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f48e359e0d9 code=0x7ffc0000 [ 126.342607][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 126.347228][ T27] usb 5-1: USB disconnect, device number 3 [ 126.391791][ T27] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 126.438073][ T27] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 126.457841][ T27] quatech2 5-1:0.51: device disconnected [ 126.472134][ T5336] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 126.533143][ T5002] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 126.750999][ T5002] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 126.774037][ T5345] ima: policy update completed [ 126.779430][ T5002] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.806067][ T5002] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.826873][ T5002] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 126.867435][ T5002] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 126.902225][ T5002] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 126.928434][ T5002] usb 2-1: Manufacturer: syz [ 126.947751][ T5002] usb 2-1: config 0 descriptor?? [ 127.321122][ T5359] loop0: detected capacity change from 0 to 1024 [ 127.412274][ T5002] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 127.430316][ T5002] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 127.446772][ T5002] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 127.739767][ T5002] usb 2-1: USB disconnect, device number 3 [ 127.790421][ T5362] fido_id[5362]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 128.338437][ T127] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 128.525502][ T127] usb 4-1: config 1 has an invalid descriptor of length 71, skipping remainder of the config [ 128.536189][ T127] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.547593][ T127] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 128.588378][ T5007] smpboot: CPU 1 is now offline [ 128.601928][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 128.652223][ T26] kauditd_printk_skb: 47 callbacks suppressed [ 128.652233][ T26] audit: type=1800 audit(1786528846.513:90): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37740 res=0 errno=0 [ 128.686736][ T127] usb 4-1: SerialNumber: syz [ 128.806001][ T26] audit: type=1800 audit(1786528846.593:91): pid=4396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=125876 res=0 errno=0 [ 128.825510][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.955435][ T127] usb 4-1: 0:2 : does not exist [ 129.012418][ T26] audit: type=1800 audit(1786528846.593:92): pid=4396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=125917 res=0 errno=0 [ 129.126677][ T127] usb 4-1: USB disconnect, device number 3 [ 129.233014][ T26] audit: type=1800 audit(1786528846.593:93): pid=4396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=125883 res=0 errno=0 [ 129.295783][ T4396] udevd[4396]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.386156][ T26] audit: type=1800 audit(1786528846.593:94): pid=4396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=125884 res=0 errno=0 [ 129.567480][ T26] audit: type=1800 audit(1786528846.593:95): pid=4396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=125885 res=0 errno=0 [ 129.743752][ T26] audit: type=1800 audit(1786528846.753:96): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 129.856118][ T26] audit: type=1800 audit(1786528846.823:97): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37419 res=0 errno=0 [ 129.875564][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.942287][ T5413] loop3: detected capacity change from 0 to 64 [ 129.948907][ T5007] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 129.976531][ T26] audit: type=1800 audit(1786528846.843:98): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37526 res=0 errno=0 [ 130.037065][ T5413] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 130.117787][ T26] audit: type=1800 audit(1786528846.943:99): pid=4396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=125905 res=0 errno=0 [ 130.143094][ T5007] usb 5-1: Using ep0 maxpacket: 32 [ 130.167561][ T5007] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 130.217465][ T5007] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.275972][ T5007] usb 5-1: config 0 descriptor?? [ 130.314088][ T5007] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 130.672880][ T5423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.389'. [ 130.802424][ T5425] loop0: detected capacity change from 0 to 512 [ 130.974463][ T5425] FAT-fs (loop0): error, corrupted file size (i_pos 53, 9216) [ 131.042325][ T5425] FAT-fs (loop0): error, corrupted file size (i_pos 53, 8960) [ 131.076735][ T5425] FAT-fs (loop0): error, corrupted file size (i_pos 53, 8960) [ 131.328037][ T5007] gspca_vc032x: reg_w err -71 [ 131.332767][ T5007] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.366126][ T5007] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.381602][ T5007] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.393761][ T5007] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.411933][ T5007] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.446043][ T5007] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.457444][ T5420] loop3: detected capacity change from 0 to 32768 [ 131.473650][ T5007] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.479044][ T5007] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.507433][ T5007] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.527626][ T5007] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.547004][ T5007] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.561315][ T5007] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.581216][ T5007] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.605662][ T5007] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.621209][ T5007] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.641622][ T5007] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.661856][ T5007] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.671957][ T5007] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.693809][ T5007] gspca_vc032x: Unknown sensor... [ 131.698943][ T5007] vc032x: probe of 5-1:0.0 failed with error -22 [ 131.736842][ T5007] usb 5-1: USB disconnect, device number 4 [ 131.777710][ T5420] XFS (loop3): Mounting V5 Filesystem [ 131.883784][ T5420] XFS (loop3): Ending clean mount [ 132.163744][ T5446] netlink: 24 bytes leftover after parsing attributes in process `syz.4.399'. [ 132.198742][ T5447] ip_tables: iptables: counters copy to user failed while replacing table [ 132.223066][ T4280] XFS (loop3): Unmounting Filesystem [ 132.283153][ T5007] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 132.497746][ T5007] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.539371][ T5007] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.583625][ T5007] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.631729][ T5007] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.643903][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.650531][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.681987][ T5007] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.709801][ T5007] usb 1-1: config 0 descriptor?? [ 132.961339][ T5456] loop1: detected capacity change from 0 to 512 [ 133.081275][ T5456] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8806c118, mo2=0002] [ 133.182063][ T5456] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 133.199282][ T5007] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 133.241496][ T5007] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 133.271125][ T5456] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 133.416016][ T5456] EXT4-fs (loop1): 1 truncate cleaned up [ 133.421699][ T5456] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 133.516512][ T5007] usb 1-1: USB disconnect, device number 8 [ 133.592740][ T5463] fido_id[5463]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 133.739460][ T5456] System zones: 1-12 [ 133.794227][ T5456] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 133.855464][ T5438] loop2: detected capacity change from 0 to 40427 [ 133.927072][ T26] kauditd_printk_skb: 52 callbacks suppressed [ 133.927082][ T26] audit: type=1800 audit(1786528851.783:152): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37740 res=0 errno=0 [ 134.026057][ T5438] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 134.053544][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 134.100289][ T5438] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 134.142374][ T5467] loop4: detected capacity change from 0 to 512 [ 134.153296][ T26] audit: type=1800 audit(1786528851.973:153): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 134.239108][ T5467] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 134.332033][ T5438] F2FS-fs (loop2): invalid crc value [ 134.398950][ T26] audit: type=1800 audit(1786528852.083:154): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37419 res=0 errno=0 [ 134.423141][ T5467] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c019, mo2=0002] [ 134.467664][ T5467] System zones: 1-12 [ 134.487381][ T5438] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 134.512329][ T5467] EXT4-fs warning (device loop4): ext4_xattr_inode_get:492: inode #11: comm syz.4.407: ea_inode file size=0 entry size=6 [ 134.581998][ T26] audit: type=1800 audit(1786528852.413:155): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 134.662190][ T5467] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 134.739769][ T5462] loop3: detected capacity change from 0 to 40427 [ 134.749794][ T5467] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.407: iget: bad extra_isize 90 (inode size 256) [ 134.816451][ T5462] F2FS-fs (loop3): invalid crc value [ 134.860247][ T5462] F2FS-fs (loop3): Found nat_bits in checkpoint [ 134.871457][ T26] audit: type=1800 audit(1786528852.733:156): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 134.900242][ T5467] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.407: error while reading EA inode 11 err=-117 [ 134.987576][ T5467] EXT4-fs (loop4): 1 orphan inode deleted [ 135.017867][ T5002] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.026800][ T26] audit: type=1800 audit(1786528852.873:157): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=126616 res=0 errno=0 [ 135.071581][ T5467] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 135.091555][ T5002] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.136979][ T5462] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 135.148061][ T5002] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.182624][ T26] audit: type=1800 audit(1786528852.983:158): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37740 res=0 errno=0 [ 135.235114][ T5002] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.291987][ T5002] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.351054][ T5002] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.401763][ T5002] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.433576][ T5478] f2fs_ckpt-7:3: attempt to access beyond end of device [ 135.433576][ T5478] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 135.456221][ T26] audit: type=1800 audit(1786528853.313:159): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=126825 res=0 errno=0 [ 135.484431][ T5002] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.10 Device [syz0] on syz1 [ 135.572770][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 135.679132][ T26] audit: type=1800 audit(1786528853.533:160): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37740 res=0 errno=0 [ 135.846901][ T26] audit: type=1800 audit(1786528853.703:161): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 135.886775][ T5483] fido_id[5483]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 136.277225][ T5489] device syzkaller1 entered promiscuous mode [ 136.379302][ T5475] loop1: detected capacity change from 0 to 32768 [ 136.454719][ T5475] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 136.532272][ T5475] JBD2: Ignoring recovery information on journal [ 136.785611][ T5475] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 136.806146][ T5497] loop3: detected capacity change from 0 to 128 [ 137.838857][ T5475] syz.1.409 (5475) used greatest stack depth: 19200 bytes left [ 137.907062][ T4273] ocfs2: Unmounting device (7,1) on (node local) [ 138.054111][ T5514] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x1 [ 138.651626][ T5526] loop0: detected capacity change from 0 to 512 [ 138.749478][ T5526] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 138.984035][ T5188] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 139.259192][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 139.259203][ T26] audit: type=1800 audit(1786528857.113:184): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 139.460535][ T5538] overlayfs: failed to set xattr on upper [ 139.471535][ T26] audit: type=1800 audit(1786528857.203:185): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37419 res=0 errno=0 [ 139.503998][ T5538] overlayfs: ...falling back to index=off,metacopy=off. [ 139.532183][ T5538] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 139.554504][ T26] audit: type=1800 audit(1786528857.253:186): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37526 res=0 errno=0 [ 139.577778][ T5543] device batadv_slave_1 entered promiscuous mode [ 139.617787][ T5541] device batadv_slave_1 left promiscuous mode [ 139.642979][ T26] audit: type=1800 audit(1786528857.273:187): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37633 res=0 errno=0 [ 139.776118][ T26] audit: type=1800 audit(1786528857.573:188): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 139.912763][ T26] audit: type=1800 audit(1786528857.743:189): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37633 res=0 errno=0 [ 140.071758][ T26] audit: type=1800 audit(1786528857.843:190): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 140.203628][ T26] audit: type=1800 audit(1786528857.893:191): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37526 res=0 errno=0 [ 140.244526][ T5536] loop4: detected capacity change from 0 to 32768 [ 140.346497][ T26] audit: type=1800 audit(1786528858.023:192): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37633 res=0 errno=0 [ 140.532982][ T26] audit: type=1800 audit(1786528858.323:193): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37633 res=0 errno=0 [ 140.922514][ T5567] block nbd1: shutting down sockets [ 141.176357][ T5570] loop3: detected capacity change from 0 to 128 [ 141.248895][ T5572] loop4: detected capacity change from 0 to 64 [ 142.017588][ T5582] loop5: detected capacity change from 0 to 6 [ 142.068798][ T4396] Dev loop5: unable to read RDB block 6 [ 142.085185][ T5586] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.105236][ T4396] loop5: AHDI p3 [ 142.108928][ T4396] loop5: partition table partially beyond EOD, truncated [ 142.159777][ T5582] Dev loop5: unable to read RDB block 6 [ 142.203290][ T5582] loop5: AHDI p3 [ 142.229910][ T5582] loop5: partition table partially beyond EOD, truncated [ 142.847757][ T5596] loop0: detected capacity change from 0 to 512 [ 142.917905][ T5598] overlayfs: failed to decode file handle (len=0, type=251, flags=0, err=-22) [ 142.957507][ T5596] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.461: bad orphan inode 14 [ 143.013326][ T5596] ext4_test_bit(bit=13, block=18) = 1 [ 143.018762][ T5596] is_bad_inode(inode)=0 [ 143.066669][ T5596] NEXT_ORPHAN(inode)=0 [ 143.082708][ T5596] max_ino=32 [ 143.126550][ T5596] i_nlink=1 [ 143.129756][ T5596] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 143.212765][ T5596] ext4 filesystem being mounted at /90/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.258301][ T5604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.464'. [ 143.496504][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 143.798405][ T5588] loop4: detected capacity change from 0 to 40427 [ 143.899006][ T5588] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 143.952999][ T5588] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 144.028819][ T5588] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 144.102613][ T5612] loop1: detected capacity change from 0 to 8192 [ 144.112564][ T5588] F2FS-fs (loop4): Found nat_bits in checkpoint [ 144.230941][ T5612] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 144.252203][ T5576] loop2: detected capacity change from 0 to 40427 [ 144.316772][ T26] kauditd_printk_skb: 32 callbacks suppressed [ 144.316783][ T26] audit: type=1800 audit(1786528862.173:226): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 144.342484][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.398300][ T5588] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 144.483396][ T5576] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 144.490095][ T5612] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 144.511175][ T5588] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 144.573893][ T26] audit: type=1800 audit(1786528862.273:227): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37633 res=0 errno=0 [ 144.642147][ T5612] REISERFS (device loop1): using ordered data mode [ 144.649782][ T5576] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 144.736985][ T5612] reiserfs: using flush barriers [ 144.820577][ T5576] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12) [ 144.829049][ T26] audit: type=1800 audit(1786528862.303:228): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37526 res=0 errno=0 [ 144.923301][ T5612] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 145.039091][ T26] audit: type=1800 audit(1786528862.473:229): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37740 res=0 errno=0 [ 145.058681][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.107243][ T5633] loop3: detected capacity change from 0 to 256 [ 145.134141][ T5612] REISERFS (device loop1): checking transaction log (loop1) [ 145.301452][ T26] audit: type=1800 audit(1786528862.623:230): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 145.327935][ T5612] REISERFS (device loop1): Using r5 hash to sort names [ 145.468627][ T5612] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 145.538515][ T26] audit: type=1800 audit(1786528862.803:231): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37633 res=0 errno=0 [ 145.557988][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.714633][ T26] audit: type=1804 audit(1786528863.083:232): pid=5633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.472" name=2F6E6577726F6F742F3130322F66696C65312FDCDB5075A9AAA1B469C309 dev="loop3" ino=1048608 res=1 errno=0 [ 145.742964][ T4373] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 145.891890][ T26] audit: type=1800 audit(1786528863.143:233): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 145.955505][ T4373] usb 1-1: Using ep0 maxpacket: 32 [ 145.978622][ T4373] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 146.059487][ T26] audit: type=1800 audit(1786528863.393:234): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37633 res=0 errno=0 [ 146.105207][ T4373] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 146.163202][ T4373] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 146.198092][ T4373] usb 1-1: Product: syz [ 146.211190][ T26] audit: type=1800 audit(1786528863.493:235): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37419 res=0 errno=0 [ 146.235739][ T4373] usb 1-1: Manufacturer: syz [ 146.251153][ T4373] usb 1-1: SerialNumber: syz [ 146.281496][ T4373] usb 1-1: config 0 descriptor?? [ 146.301847][ T5635] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 146.347839][ T4373] hub 1-1:0.0: bad descriptor, ignoring hub [ 146.375077][ T4373] hub: probe of 1-1:0.0 failed with error -5 [ 146.911076][ T14] usb 1-1: USB disconnect, device number 9 [ 147.092994][ T14] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 147.294393][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 147.362335][ T14] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 147.427853][ T14] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 147.493287][ T14] usb 1-1: Product: syz [ 147.519410][ T14] usb 1-1: Manufacturer: syz [ 147.548118][ T14] usb 1-1: SerialNumber: syz [ 147.590290][ T14] usb 1-1: config 0 descriptor?? [ 147.630381][ T5645] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 147.669684][ T14] hub 1-1:0.0: bad descriptor, ignoring hub [ 147.704082][ T14] hub: probe of 1-1:0.0 failed with error -5 [ 148.228265][ T5670] loop3: detected capacity change from 0 to 2048 [ 148.281317][ T5670] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 148.340123][ T5670] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 148.403374][ T5670] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.691773][ T5672] loop0: detected capacity change from 0 to 512 [ 148.728363][ T5672] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.789474][ T5674] loop3: detected capacity change from 0 to 256 [ 148.813961][ T5672] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 148.862596][ T5674] exfat: Deprecated parameter 'utf8' [ 148.872662][ T5672] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.491: corrupted in-inode xattr [ 148.909387][ T5674] exfat: Deprecated parameter 'namecase' [ 148.956536][ T5674] exfat: Deprecated parameter 'namecase' [ 148.984290][ T5672] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.491: couldn't read orphan inode 15 (err -117) [ 149.022566][ T5674] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 149.057582][ T5672] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 149.389402][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 149.436373][ T26] kauditd_printk_skb: 37 callbacks suppressed [ 149.436383][ T26] audit: type=1800 audit(1786528867.293:273): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37740 res=0 errno=0 [ 149.648667][ T26] audit: type=1800 audit(1786528867.403:274): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 149.843874][ T26] audit: type=1800 audit(1786528867.703:275): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37740 res=0 errno=0 [ 150.008981][ T26] audit: type=1800 audit(1786528867.763:276): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 150.055623][ T5688] tipc: Started in network mode [ 150.094055][ T5688] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 150.141844][ T26] audit: type=1800 audit(1786528867.763:277): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37526 res=0 errno=0 [ 150.284821][ T26] audit: type=1800 audit(1786528867.893:278): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37633 res=0 errno=0 [ 150.348660][ T5693] loop3: detected capacity change from 0 to 4096 [ 150.459366][ T5693] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 150.470682][ T26] audit: type=1800 audit(1786528868.173:279): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 150.677030][ T26] audit: type=1800 audit(1786528868.363:280): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=128212 res=0 errno=0 [ 150.858341][ T26] audit: type=1800 audit(1786528868.363:281): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=128226 res=0 errno=0 [ 151.045093][ T26] audit: type=1800 audit(1786528868.423:282): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37526 res=0 errno=0 [ 151.636855][ T5715] tipc: Started in network mode [ 151.686855][ T5715] tipc: Node identity ac1414aa, cluster identity 4711 [ 151.737305][ T5715] tipc: Enabled bearer , priority 10 [ 152.015790][ T5722] loop0: detected capacity change from 0 to 512 [ 152.293081][ T5723] loop2: detected capacity change from 0 to 32768 [ 152.311185][ T5723] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 152.319914][ T5723] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 152.349925][ T5723] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 152.360238][ T5002] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 152.420327][ T5007] usb 1-1: USB disconnect, device number 10 [ 152.435987][ T5002] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 152.458689][ T5722] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 152.520578][ T5722] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.594332][ T5002] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 158ms [ 152.687242][ T5002] gfs2: fsid=syz:syz.0: jid=0: Done [ 152.693837][ T5723] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 152.806450][ T5723] gfs2: fsid=syz:syz.0: found 1 quota changes [ 152.834512][ T14] tipc: Node number set to 2886997162 [ 152.852342][ T5733] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 152.852342][ T5733] inode = 11 2339 [ 152.852342][ T5733] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 413 [ 152.926165][ T5736] loop4: detected capacity change from 0 to 512 [ 152.985895][ T5007] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 152.999776][ T5733] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 153.017020][ T5736] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 153.046015][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 153.072054][ T5733] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5733 [gfs2_quotad] gfs2_quota_sync+0x355/0x780 [ 153.194771][ T5723] syz.2.512: attempt to access beyond end of device [ 153.194771][ T5723] loop2: rw=12288, sector=6755399441055880, nr_sectors = 8 limit=32768 [ 153.253706][ T5007] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 153.284635][ T5733] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 153.316153][ T5007] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.363131][ T5733] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 153.380559][ T5007] usb 4-1: Product: syz [ 153.404905][ T5007] usb 4-1: Manufacturer: syz [ 153.409524][ T5007] usb 4-1: SerialNumber: syz [ 153.453834][ T5738] sctp: [Deprecated]: syz.0.517 (pid 5738) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.453834][ T5738] Use struct sctp_sack_info instead [ 153.484995][ T5007] usb 4-1: config 0 descriptor?? [ 153.524116][ T5007] usb 4-1: selecting invalid altsetting 1 [ 153.529863][ T5007] technisat-usb2: could not set alternate setting to 0 [ 153.563886][ T5738] sctp: [Deprecated]: syz.0.517 (pid 5738) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.563886][ T5738] Use struct sctp_sack_info instead [ 153.697737][ T5007] technisat-usb2: firmware version: 0.0 [ 153.725488][ T5007] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 153.914384][ T5007] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 154.012369][ T5007] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19) [ 154.059137][ T5007] usb 4-1: USB disconnect, device number 4 [ 154.107496][ T4290] block nbd4: Receive control failed (result -107) [ 154.150942][ T4396] block nbd4: shutting down sockets [ 154.299247][ T5746] netlink: 20 bytes leftover after parsing attributes in process `syz.0.522'. [ 154.528953][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 154.528965][ T26] audit: type=1800 audit(1786528872.383:316): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37633 res=0 errno=0 [ 154.621630][ T5750] all (unregistering): Released all slaves [ 154.700732][ T26] audit: type=1800 audit(1786528872.553:317): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37740 res=0 errno=0 [ 154.863704][ T26] audit: type=1800 audit(1786528872.723:318): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 154.984950][ T26] audit: type=1800 audit(1786528872.803:319): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37633 res=0 errno=0 [ 155.273891][ T5762] loop3: detected capacity change from 0 to 32768 [ 155.303858][ T5762] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 155.311282][ T5762] CPU: 0 PID: 5762 Comm: syz.3.529 Not tainted syzkaller #0 [ 155.318567][ T5762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.328627][ T5762] Call Trace: [ 155.331908][ T5762] [ 155.334840][ T5762] dump_stack_lvl+0x188/0x24e [ 155.339534][ T5762] ? show_regs_print_info+0x12/0x12 [ 155.344748][ T5762] ? load_image+0x410/0x410 [ 155.349267][ T5762] sysfs_create_dir_ns+0x26a/0x290 [ 155.354388][ T5762] ? __lock_acquire+0x7c40/0x7c40 [ 155.359419][ T5762] ? sysfs_warn_dup+0xa0/0xa0 [ 155.364208][ T5762] ? kobject_set_name_vargs+0x5d/0x110 [ 155.369671][ T5762] ? do_raw_spin_unlock+0x11d/0x230 [ 155.374874][ T5762] kobject_add_internal+0x617/0xca0 [ 155.380082][ T5762] kobject_init_and_add+0x128/0x190 [ 155.385283][ T5762] ? lockdep_softirqs_off+0x430/0x430 [ 155.390659][ T5762] ? kobject_add+0x230/0x230 [ 155.395256][ T5762] ? __init_swait_queue_head+0xa4/0x140 [ 155.400821][ T5762] gfs2_sys_fs_add+0x24f/0x4b0 [ 155.405594][ T5762] ? gfs2_recover_set+0x240/0x240 [ 155.410620][ T5762] ? snprintf+0xe5/0x140 [ 155.414864][ T5762] ? vscnprintf+0x80/0x80 [ 155.419201][ T5762] gfs2_fill_super+0x12dc/0x2020 [ 155.424159][ T5762] ? gfs2_reconfigure+0xd80/0xd80 [ 155.429205][ T5762] ? sb_set_blocksize+0xa5/0xe0 [ 155.434064][ T5762] get_tree_bdev+0x3e6/0x610 [ 155.438660][ T5762] ? gfs2_reconfigure+0xd80/0xd80 [ 155.443696][ T5762] gfs2_get_tree+0x4d/0x1e0 [ 155.448214][ T5762] vfs_get_tree+0x88/0x270 [ 155.452651][ T5762] do_new_mount+0x247/0xa40 [ 155.457163][ T5762] __se_sys_mount+0x2e3/0x3d0 [ 155.461852][ T5762] ? __x64_sys_mount+0xc0/0xc0 [ 155.466624][ T5762] ? lockdep_hardirqs_on+0x94/0x140 [ 155.471831][ T5762] ? __x64_sys_mount+0x1c/0xc0 [ 155.476602][ T5762] do_syscall_64+0x4c/0xa0 [ 155.481028][ T5762] ? clear_bhb_loop+0x60/0xb0 [ 155.485738][ T5762] ? clear_bhb_loop+0x60/0xb0 [ 155.490420][ T5762] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.496330][ T5762] RIP: 0033:0x7f48e359f34a [ 155.500752][ T5762] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.520360][ T5762] RSP: 002b:00007f48e4512e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 155.528790][ T5762] RAX: ffffffffffffffda RBX: 00007f48e4512ee0 RCX: 00007f48e359f34a [ 155.536776][ T5762] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f48e4512ea0 [ 155.544755][ T5762] RBP: 00002000000124c0 R08: 00007f48e4512ee0 R09: 0000000000000000 [ 155.552754][ T5762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 155.560733][ T5762] R13: 00007f48e4512ea0 R14: 00000000000125c7 R15: 0000200000000180 [ 155.568741][ T5762] [ 155.573091][ T5762] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 155.587040][ T5762] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 155.663569][ T26] audit: type=1800 audit(1786528872.823:320): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37740 res=0 errno=0 [ 155.836275][ T26] audit: type=1800 audit(1786528873.143:321): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37633 res=0 errno=0 [ 155.987704][ T26] audit: type=1800 audit(1786528873.673:322): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37740 res=0 errno=0 [ 156.327816][ T5768] loop0: detected capacity change from 0 to 65536 [ 156.407264][ T5768] XFS (loop0): Mounting V5 Filesystem [ 156.470917][ T5768] XFS (loop0): Ending clean mount [ 156.481459][ T5768] XFS (loop0): Quotacheck needed: Please wait. [ 156.561139][ T26] audit: type=1800 audit(1786528873.773:323): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 156.652669][ T5768] XFS (loop0): Quotacheck: Done. [ 156.756322][ T26] audit: type=1800 audit(1786528874.223:324): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 156.922442][ T26] audit: type=1800 audit(1786528874.303:325): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14653 res=0 errno=0 [ 156.949771][ T4283] XFS (loop0): Unmounting Filesystem [ 158.121731][ T5802] loop0: detected capacity change from 0 to 4096 [ 158.193702][ T5802] EXT4-fs: Ignoring removed mblk_io_submit option [ 158.267725][ T5802] EXT4-fs (loop0): Test dummy encryption mode enabled [ 158.329951][ T5802] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 158.490626][ T5733] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 158.555545][ T5733] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 158.601074][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 158.633946][ T5733] gfs2: fsid=syz:syz.0: File system withdrawn [ 158.640046][ T5733] CPU: 0 PID: 5733 Comm: gfs2_quotad Not tainted syzkaller #0 [ 158.647502][ T5733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.657553][ T5733] Call Trace: [ 158.660830][ T5733] [ 158.663757][ T5733] dump_stack_lvl+0x188/0x24e [ 158.668444][ T5733] ? show_regs_print_info+0x12/0x12 [ 158.673649][ T5733] ? load_image+0x410/0x410 [ 158.678154][ T5733] ? kobject_uevent_env+0x364/0x890 [ 158.683373][ T5733] gfs2_withdraw+0xc69/0x1450 [ 158.688071][ T5733] ? gfs2_lm+0x240/0x240 [ 158.692323][ T5733] ? wake_bit_function+0x200/0x200 [ 158.697447][ T5733] ? gfs2_consist_inode_i+0xf1/0x110 [ 158.702749][ T5733] gfs2_inode_refresh+0xb2d/0x1190 [ 158.707871][ T5733] ? gfs2_inode_metasync+0xf0/0xf0 [ 158.712985][ T5733] ? gfs2_glock_nq+0xcee/0x14d0 [ 158.717856][ T5733] gfs2_instantiate+0x15e/0x210 [ 158.722718][ T5733] gfs2_glock_wait+0x1d0/0x2a0 [ 158.727497][ T5733] do_sync+0x4af/0xbb0 [ 158.731572][ T5733] ? gfs2_quota_sync+0x355/0x780 [ 158.736516][ T5733] ? slot_put+0x1e0/0x1e0 [ 158.740846][ T5733] ? __lock_acquire+0x7c40/0x7c40 [ 158.745880][ T5733] ? do_raw_spin_lock+0x128/0x2f0 [ 158.750917][ T5733] ? gfs2_quota_sync+0x355/0x780 [ 158.755858][ T5733] ? do_raw_spin_unlock+0x11d/0x230 [ 158.761060][ T5733] gfs2_quota_sync+0x355/0x780 [ 158.765835][ T5733] gfs2_quotad+0x421/0x690 [ 158.770261][ T5733] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 158.775371][ T5733] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 158.781268][ T5733] ? wake_bit_function+0x200/0x200 [ 158.786381][ T5733] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 158.792272][ T5733] ? __kthread_parkme+0x71/0x1c0 [ 158.797216][ T5733] ? __kthread_parkme+0x15b/0x1c0 [ 158.802267][ T5733] kthread+0x29d/0x330 [ 158.806336][ T5733] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 158.811449][ T5733] ? kthread_blkcg+0xd0/0xd0 [ 158.816058][ T5733] ret_from_fork+0x1f/0x30 [ 158.820492][ T5733] [ 159.322000][ T5798] loop4: detected capacity change from 0 to 32768 [ 159.412489][ T5798] XFS (loop4): Mounting V5 Filesystem [ 159.529346][ T5798] XFS (loop4): Ending clean mount [ 159.548470][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 159.548480][ T26] audit: type=1800 audit(1786528877.403:344): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37633 res=0 errno=0 [ 159.720797][ T14] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 [ 159.732154][ T26] audit: type=1800 audit(1786528877.513:345): pid=5798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.541" name="file1" dev="loop4" ino=6150 res=0 errno=0 [ 159.801520][ T14] XFS (loop4): Unmount and run xfs_repair [ 159.844352][ T14] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 159.901830][ T26] audit: type=1800 audit(1786528877.673:346): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 159.932674][ T14] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 159.966151][ T14] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 160.007259][ T14] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 160.016446][ T26] audit: type=1800 audit(1786528877.713:347): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37633 res=0 errno=0 [ 160.046313][ T14] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 160.072617][ T14] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 160.102713][ T14] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 160.139675][ T14] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 160.171809][ T14] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 160.208580][ T5798] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74 [ 160.321448][ T5798] XFS (loop4): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x17e5/0x1ed0 (fs/xfs/libxfs/xfs_defer.c:580). Shutting down filesystem. [ 160.367994][ T26] audit: type=1800 audit(1786528878.223:348): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 160.429387][ T5798] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 160.446290][ T4274] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 160.573386][ T4282] XFS (loop4): Unmounting Filesystem [ 160.588501][ T26] audit: type=1800 audit(1786528878.443:349): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 160.695508][ T4274] CPU: 0 PID: 4274 Comm: syz-executor Not tainted syzkaller #0 [ 160.703124][ T4274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 160.713196][ T4274] Call Trace: [ 160.716472][ T4274] [ 160.719402][ T4274] dump_stack_lvl+0x188/0x24e [ 160.724090][ T4274] ? gfs2_assert_warn_i+0xbb/0x2c0 [ 160.729212][ T4274] ? show_regs_print_info+0x12/0x12 [ 160.734428][ T4274] ? load_image+0x410/0x410 [ 160.738940][ T4274] ? do_raw_spin_unlock+0x11d/0x230 [ 160.744139][ T4274] gfs2_assert_warn_i+0x187/0x2c0 [ 160.749175][ T4274] gfs2_quota_cleanup+0x48c/0x670 [ 160.754202][ T4274] gfs2_put_super+0x22f/0x920 [ 160.758894][ T4274] ? gfs2_evict_inode+0x1290/0x1290 [ 160.764093][ T4274] generic_shutdown_super+0x130/0x340 [ 160.769466][ T4274] kill_block_super+0x7c/0xe0 [ 160.774147][ T4274] deactivate_locked_super+0x93/0xf0 [ 160.779431][ T4274] cleanup_mnt+0x471/0x4f0 [ 160.783856][ T4274] task_work_run+0x1d0/0x260 [ 160.788456][ T4274] ? task_work_cancel+0x220/0x220 [ 160.793493][ T4274] ? exit_to_user_mode_loop+0x3b/0x110 [ 160.798969][ T4274] exit_to_user_mode_loop+0xe6/0x110 [ 160.804278][ T4274] exit_to_user_mode_prepare+0xee/0x180 [ 160.809829][ T4274] syscall_exit_to_user_mode+0x16/0x40 [ 160.815290][ T4274] do_syscall_64+0x58/0xa0 [ 160.819712][ T4274] ? clear_bhb_loop+0x60/0xb0 [ 160.824398][ T4274] ? clear_bhb_loop+0x60/0xb0 [ 160.829097][ T4274] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.835119][ T4274] RIP: 0033:0x7f44fd79f317 [ 160.839540][ T4274] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 160.859145][ T4274] RSP: 002b:00007ffd44189868 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 160.867559][ T4274] RAX: 0000000000000000 RBX: 00007f44fd834474 RCX: 00007f44fd79f317 [ 160.875537][ T4274] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd44189920 [ 160.883496][ T4274] RBP: 00007ffd44189920 R08: 00007ffd4418a920 R09: 00000000ffffffff [ 160.891481][ T4274] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd4418a9b0 [ 160.899465][ T4274] R13: 00007f44fd834474 R14: 0000000000025826 R15: 00007ffd4418a9f0 [ 160.907453][ T4274] [ 160.950794][ T5832] loop3: detected capacity change from 0 to 32768 [ 161.031269][ T5832] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 scanned by syz.3.553 (5832) [ 161.102433][ T26] audit: type=1800 audit(1786528878.953:350): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=129131 res=0 errno=0 [ 161.138369][ T5832] BTRFS info (device loop3): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 161.200312][ T5832] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 161.247220][ T5832] BTRFS info (device loop3): using free space tree [ 161.275135][ T5007] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 161.366387][ T5832] BTRFS info (device loop3): enabling ssd optimizations [ 161.487232][ T26] audit: type=1800 audit(1786528879.343:351): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37740 res=0 errno=0 [ 161.508597][ T5007] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 161.551070][ T5007] usb 1-1: config 0 has no interface number 0 [ 161.588753][ T5007] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 161.631070][ T26] audit: type=1800 audit(1786528879.483:352): pid=5854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevadm" name="uevent" dev="sysfs" ino=40415 res=0 errno=0 [ 161.658224][ T5007] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.709177][ T5007] usb 1-1: config 0 descriptor?? [ 161.755408][ T5007] ums-realtek 1-1:0.6: USB Mass Storage device detected [ 161.762469][ T26] audit: type=1800 audit(1786528879.533:353): pid=5854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevadm" name="uevent" dev="sysfs" ino=39345 res=0 errno=0 [ 161.959486][ T14] usb 1-1: USB disconnect, device number 11 [ 161.975109][ T4280] BTRFS info (device loop3): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 163.477702][ T5890] loop3: detected capacity change from 0 to 512 [ 163.547709][ T5890] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 163.846467][ T4275] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 163.855857][ T4286] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 163.864232][ T4275] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 163.871689][ T4275] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 163.879310][ T4286] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 163.886585][ T4275] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 163.991111][ T4280] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 164.055593][ T4280] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 164.602115][ T5893] chnl_net:caif_netlink_parms(): no params data found [ 164.680994][ T5884] loop4: detected capacity change from 0 to 40427 [ 164.789924][ T5884] F2FS-fs (loop4): invalid crc value [ 164.837737][ T5884] F2FS-fs (loop4): Found nat_bits in checkpoint [ 164.872571][ T26] kauditd_printk_skb: 82 callbacks suppressed [ 164.872583][ T26] audit: type=1800 audit(1786528882.723:436): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 164.909464][ T5199] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.153134][ T5884] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 165.281834][ T5199] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.578271][ T4282] syz-executor: attempt to access beyond end of device [ 165.578271][ T4282] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 165.604651][ T5199] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.654876][ T26] audit: type=1800 audit(1786528883.513:437): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 165.825006][ T5199] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.913282][ T4290] Bluetooth: hci5: command 0x0409 tx timeout [ 165.927510][ T26] audit: type=1800 audit(1786528883.783:438): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 165.958549][ T5893] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.050916][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.090276][ T5893] device bridge_slave_0 entered promiscuous mode [ 166.141838][ T5893] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.207376][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.230161][ T26] audit: type=1800 audit(1786528884.083:439): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 166.293858][ T5893] device bridge_slave_1 entered promiscuous mode [ 166.422970][ T26] audit: type=1800 audit(1786528884.263:440): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=132524 res=0 errno=0 [ 166.547498][ T5893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.623257][ T26] audit: type=1800 audit(1786528884.273:441): pid=4396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=132529 res=0 errno=0 [ 166.674697][ T5893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.742713][ T4286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 166.753531][ T4275] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 166.761215][ T4275] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 166.769585][ T4286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 166.776968][ T4275] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 166.784323][ T4286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 166.928637][ T26] audit: type=1800 audit(1786528884.273:442): pid=4396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=132533 res=0 errno=0 [ 166.993914][ T5893] team0: Port device team_slave_0 added [ 167.072066][ T26] audit: type=1800 audit(1786528884.273:443): pid=4396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=132532 res=0 errno=0 [ 167.200451][ T26] audit: type=1800 audit(1786528884.273:444): pid=4396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=132535 res=0 errno=0 [ 167.221408][ T4318] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 167.241079][ T5924] loop2: detected capacity change from 0 to 512 [ 167.326386][ T5893] team0: Port device team_slave_1 added [ 167.359377][ T26] audit: type=1800 audit(1786528884.373:445): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=133000 res=0 errno=0 [ 167.443085][ T4318] usb 1-1: Using ep0 maxpacket: 32 [ 167.467675][ T4318] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 167.483079][ T5924] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 167.541708][ T4318] usb 1-1: config 0 interface 0 has no altsetting 0 [ 167.582099][ T4318] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 167.606931][ T4318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.623858][ T5924] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 1024: comm syz.2.520: invalid block [ 167.668031][ T4318] usb 1-1: config 0 descriptor?? [ 167.821228][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.855899][ T5924] EXT4-fs (loop2): 1 truncate cleaned up [ 167.861684][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.941335][ T5924] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 167.985210][ T5893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.996713][ T4290] Bluetooth: hci5: command 0x041b tx timeout [ 168.147863][ T4318] corsair-psu 0003:1B1C:1C09.000A: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0 [ 168.159822][ T5008] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 168.241385][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.287291][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.373162][ T5008] usb 5-1: unable to get BOS descriptor or descriptor too short [ 168.383406][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 168.403975][ T5008] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 168.445062][ T5893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.464878][ T5008] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 168.516537][ T5008] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.540296][ T5008] usb 5-1: Product: syz [ 168.565103][ T5008] usb 5-1: Manufacturer: syz [ 168.579935][ T5008] usb 5-1: SerialNumber: syz [ 168.727483][ T4318] corsair-psu 0003:1B1C:1C09.000A: unable to initialize device (-71) [ 168.781092][ T4318] corsair-psu: probe of 0003:1B1C:1C09.000A failed with error -71 [ 168.837829][ T4318] usb 1-1: USB disconnect, device number 12 [ 168.859188][ T5008] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 168.873045][ T4290] Bluetooth: hci3: command 0x0409 tx timeout [ 169.070522][ T5008] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 169.098896][ T5945] loop2: detected capacity change from 0 to 256 [ 169.120333][ T5008] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 169.264105][ T5942] fido_id[5942]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 169.309863][ T5945] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 169.366660][ T5893] device hsr_slave_0 entered promiscuous mode [ 169.404697][ T5893] device hsr_slave_1 entered promiscuous mode [ 169.468022][ T5893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.485625][ T5008] usb 5-1: invalid uac2 rates [ 169.503605][ T5008] usb 5-1: invalid uac2 rates [ 169.508868][ T5008] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 169.532982][ T5893] Cannot create hsr debugfs directory [ 169.619330][ T5008] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 169.686264][ T5008] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 169.813994][ T5008] usb 5-1: USB disconnect, device number 5 [ 169.960464][ T5953] loop0: detected capacity change from 0 to 16 [ 170.030294][ T5953] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 170.073163][ T4290] Bluetooth: hci5: command 0x040f tx timeout [ 170.146613][ T26] kauditd_printk_skb: 52 callbacks suppressed [ 170.146624][ T26] audit: type=1804 audit(1786528888.003:498): pid=4394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="udevd" name="/sys/devices/virtual/block/loop2/uevent" dev="sysfs" ino=37526 res=1 errno=0 [ 170.177562][ T4396] udevd[4396]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.321648][ T5918] chnl_net:caif_netlink_parms(): no params data found [ 170.396134][ T26] audit: type=1800 audit(1786528888.043:499): pid=4396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=48607 res=0 errno=0 [ 170.527147][ T26] audit: type=1800 audit(1786528888.073:500): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37526 res=0 errno=0 [ 170.719665][ T26] audit: type=1800 audit(1786528888.333:501): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37740 res=0 errno=0 [ 170.869934][ T26] audit: type=1800 audit(1786528888.443:502): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 170.954608][ T4290] Bluetooth: hci3: command 0x041b tx timeout [ 171.054542][ T26] audit: type=1800 audit(1786528888.693:503): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37740 res=0 errno=0 [ 171.210950][ T26] audit: type=1800 audit(1786528889.033:504): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37740 res=0 errno=0 [ 171.382544][ T5960] netlink: 'syz.2.583': attribute type 4 has an invalid length. [ 171.391269][ T26] audit: type=1800 audit(1786528889.253:505): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 171.559939][ T26] audit: type=1800 audit(1786528889.413:506): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37740 res=0 errno=0 [ 171.768884][ T26] audit: type=1800 audit(1786528889.613:507): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=119346 res=0 errno=0 [ 171.930953][ T5985] loop0: detected capacity change from 0 to 1024 [ 172.153091][ T4290] Bluetooth: hci5: command 0x0419 tx timeout [ 172.266804][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.341747][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.351697][ T5996] loop4: detected capacity change from 0 to 256 [ 172.378831][ T5995] loop2: detected capacity change from 0 to 128 [ 172.415021][ T5918] device bridge_slave_0 entered promiscuous mode [ 172.699585][ T5199] device hsr_slave_0 left promiscuous mode [ 172.754062][ T5199] device hsr_slave_1 left promiscuous mode [ 172.775261][ T5199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.846967][ T5199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.887600][ T5199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.925677][ T5199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.972739][ T5199] device bridge_slave_1 left promiscuous mode [ 173.009727][ T5199] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.037876][ T4290] Bluetooth: hci3: command 0x040f tx timeout [ 173.068160][ T5199] device bridge_slave_0 left promiscuous mode [ 173.079995][ T5199] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.142814][ T5199] device veth1_macvtap left promiscuous mode [ 173.158381][ T5199] device veth0_macvtap left promiscuous mode [ 173.175194][ T5199] device veth1_vlan left promiscuous mode [ 173.186134][ T5199] device veth0_vlan left promiscuous mode [ 173.205115][ T130] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 173.405146][ T130] usb 1-1: Using ep0 maxpacket: 8 [ 173.433738][ T130] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 173.454480][ T130] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 173.472617][ T130] usb 1-1: Product: syz [ 173.481199][ T130] usb 1-1: Manufacturer: syz [ 173.490733][ T130] usb 1-1: SerialNumber: syz [ 173.508320][ T130] usb 1-1: config 0 descriptor?? [ 173.551756][ T130] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 173.628578][ T6007] loop2: detected capacity change from 0 to 256 [ 173.705519][ T6007] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 174.162540][ T130] input: gspca_zc3xx as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 174.367879][ T130] usb 1-1: USB disconnect, device number 13 [ 174.840375][ T6014] loop2: detected capacity change from 0 to 512 [ 174.858018][ T5199] team0 (unregistering): Port device team_slave_1 removed [ 174.901066][ T6014] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 175.036200][ T6014] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.599: bad orphan inode 131083 [ 175.075355][ T5199] team0 (unregistering): Port device team_slave_0 removed [ 175.117917][ T4290] Bluetooth: hci3: command 0x0419 tx timeout [ 175.131395][ T6014] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 175.176123][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 175.176134][ T26] audit: type=1800 audit(1786528893.033:543): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 175.344129][ T26] audit: type=1800 audit(1786528893.093:544): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37526 res=0 errno=0 [ 175.395778][ T5199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.475733][ T26] audit: type=1800 audit(1786528893.183:545): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37740 res=0 errno=0 [ 175.566618][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 175.605160][ T5199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.651121][ T26] audit: type=1800 audit(1786528893.503:546): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37526 res=0 errno=0 [ 175.814885][ T26] audit: type=1800 audit(1786528893.673:547): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 175.911026][ T6025] loop7: detected capacity change from 0 to 16384 [ 175.940168][ T6023] #! ./file0 [ 176.085922][ T26] audit: type=1800 audit(1786528893.943:548): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 176.218701][ T26] audit: type=1800 audit(1786528894.073:549): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37526 res=0 errno=0 [ 176.371078][ T26] audit: type=1800 audit(1786528894.223:550): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 176.539447][ T6030] loop0: detected capacity change from 0 to 4096 [ 176.552702][ T26] audit: type=1800 audit(1786528894.413:551): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=140364 res=0 errno=0 [ 176.604377][ T6031] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 176.648586][ T6030] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 176.681011][ T26] audit: type=1800 audit(1786528894.433:552): pid=4396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=140380 res=0 errno=0 [ 176.881279][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 177.442722][ T5199] bond0 (unregistering): Released all slaves [ 177.605859][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.631548][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.646052][ T5918] device bridge_slave_1 entered promiscuous mode [ 177.734243][ T130] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 177.934618][ T130] usb 1-1: Using ep0 maxpacket: 16 [ 177.958275][ T5918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.988168][ T130] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 178.022816][ T130] usb 1-1: config 0 has no interface number 0 [ 178.038183][ T5918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.067099][ T130] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 178.090241][ T5893] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 178.141627][ T130] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 178.183031][ T130] usb 1-1: config 0 interface 41 has no altsetting 0 [ 178.230187][ T130] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 178.247276][ T5893] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 178.269862][ T130] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.296167][ T130] usb 1-1: Product: syz [ 178.308180][ T130] usb 1-1: Manufacturer: syz [ 178.320922][ T130] usb 1-1: SerialNumber: syz [ 178.374996][ T130] usb 1-1: config 0 descriptor?? [ 178.392455][ T5893] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 178.408178][ T6042] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 178.444274][ T6042] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 178.458361][ T5918] team0: Port device team_slave_0 added [ 178.478801][ T5893] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 178.503165][ T14] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 178.524929][ T5918] team0: Port device team_slave_1 added [ 178.644740][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.685909][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.738978][ T6042] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 178.748633][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.783270][ T6042] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 178.793334][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.838576][ T14] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 178.872460][ T5918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.918599][ T14] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 178.977723][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.018012][ T14] usb 5-1: config 0 descriptor?? [ 179.073527][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.080581][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.194471][ T5918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.385612][ T5918] device hsr_slave_0 entered promiscuous mode [ 179.432730][ T5918] device hsr_slave_1 entered promiscuous mode [ 179.467669][ T14] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 179.504614][ T14] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 179.570758][ T5918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.614083][ T5918] Cannot create hsr debugfs directory [ 179.623633][ T5893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.633137][ T130] CoreChips: probe of 1-1:0.41 failed with error -71 [ 179.693923][ T130] usb 1-1: USB disconnect, device number 14 [ 179.784836][ T14] usb 5-1: USB disconnect, device number 6 [ 179.872777][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.906124][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.922142][ T6065] fido_id[6065]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 180.016598][ T5190] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.081242][ T5893] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.113156][ T4373] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 180.180085][ T5190] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.221968][ T26] kauditd_printk_skb: 41 callbacks suppressed [ 180.221979][ T26] audit: type=1800 audit(1786528898.073:594): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 180.273583][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.298322][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.326410][ T5188] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.333560][ T5188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.346389][ T4373] usb 3-1: Using ep0 maxpacket: 16 [ 180.378530][ T4373] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.435342][ T26] audit: type=1800 audit(1786528898.293:595): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37740 res=0 errno=0 [ 180.489324][ T4373] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid maxpacket 1792, setting to 1024 [ 180.576602][ T4373] usb 3-1: config 0 interface 0 has no altsetting 0 [ 180.594386][ T26] audit: type=1800 audit(1786528898.323:596): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=143627 res=0 errno=0 [ 180.627073][ T6078] loop4: detected capacity change from 0 to 512 [ 180.634518][ T4373] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 180.658165][ T4373] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.678474][ T6078] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 180.697250][ T26] audit: type=1800 audit(1786528898.323:597): pid=4396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=143631 res=0 errno=0 [ 180.733643][ T4373] usb 3-1: config 0 descriptor?? [ 180.748834][ T6078] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 180.769504][ T6069] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 180.848919][ T6078] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 180.858906][ T26] audit: type=1800 audit(1786528898.333:598): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=143710 res=0 errno=0 [ 180.890264][ T5190] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.959412][ T6078] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 180.978027][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.996820][ T26] audit: type=1800 audit(1786528898.333:599): pid=4396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=143714 res=0 errno=0 [ 181.024796][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.041445][ T6078] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 181.076964][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.088215][ T6078] EXT4-fs (loop4): orphan cleanup on readonly fs [ 181.100549][ T5188] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.107784][ T5188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.123620][ T26] audit: type=1800 audit(1786528898.403:600): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 181.146474][ T6078] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.618: bg 0: block 34: padding at end of block bitmap is not set [ 181.173667][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 181.181911][ T26] audit: type=1800 audit(1786528898.583:601): pid=4266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=143900 res=0 errno=0 [ 181.214786][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.227414][ T6078] Quota error (device loop4): write_blk: dquota write failed [ 181.276663][ T6078] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 181.302800][ T5190] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.318817][ T6078] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.618: Failed to acquire dquot type 1 [ 181.348168][ T6078] EXT4-fs (loop4): 1 truncate cleaned up [ 181.354220][ T4318] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 181.375063][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.387066][ T4373] mcp2221 0003:04D8:00DD.000C: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 181.408784][ T6078] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 181.420711][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.431442][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.481386][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.560443][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.597114][ T4318] usb 1-1: Using ep0 maxpacket: 16 [ 181.612826][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.635031][ T4318] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 181.652809][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.661696][ T4318] usb 1-1: config 0 has no interface number 0 [ 181.672806][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 181.681734][ T4318] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 181.691272][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.734054][ T5893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.756236][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.773046][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.831657][ T4318] usb 1-1: Product: syz [ 181.856523][ T4318] usb 1-1: Manufacturer: syz [ 181.861135][ T4318] usb 1-1: SerialNumber: syz [ 181.928839][ T4318] usb 1-1: config 0 descriptor?? [ 181.949179][ T6087] loop4: detected capacity change from 0 to 512 [ 181.978942][ T4318] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 182.094578][ T6087] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 182.167221][ T6087] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.305634][ T5918] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 182.367828][ T6087] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.621: corrupted inode contents [ 182.428396][ T5918] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 182.498076][ T5918] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 182.525386][ T6087] EXT4-fs (loop4): Remounting filesystem read-only [ 182.574842][ T5918] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 182.588863][ T6087] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #2: comm syz.4.621: mark_inode_dirty error [ 182.673582][ T130] usb 3-1: reset high-speed USB device number 5 using dummy_hcd [ 182.729258][ T6087] EXT4-fs (loop4): Remounting filesystem read-only [ 182.770458][ T6087] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.621: corrupted inode contents [ 182.852844][ T6087] EXT4-fs (loop4): Remounting filesystem read-only [ 182.907188][ T6096] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.621: corrupted inode contents [ 183.011134][ T4318] gspca_spca1528: reg_w err -71 [ 183.030498][ T6096] EXT4-fs (loop4): Remounting filesystem read-only [ 183.039190][ T4318] spca1528: probe of 1-1:0.1 failed with error -71 [ 183.064172][ T6096] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #2: comm syz.4.621: mark_inode_dirty error [ 183.088927][ T4318] usb 1-1: USB disconnect, device number 15 [ 183.161683][ T5893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.179784][ T6096] EXT4-fs (loop4): Remounting filesystem read-only [ 183.212589][ T6096] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.621: corrupted inode contents [ 183.240006][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.279336][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.307431][ T6096] EXT4-fs (loop4): Remounting filesystem read-only [ 183.357207][ T6096] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.621: mark_inode_dirty error [ 183.497452][ T6096] EXT4-fs (loop4): Remounting filesystem read-only [ 183.523820][ T6096] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.621: corrupted inode contents [ 183.556189][ T5008] usb 3-1: USB disconnect, device number 5 [ 183.646907][ T6096] EXT4-fs (loop4): Remounting filesystem read-only [ 183.744859][ T6096] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #2: comm syz.4.621: mark_inode_dirty error [ 183.847233][ T6096] EXT4-fs (loop4): Remounting filesystem read-only [ 183.878002][ T5918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.955518][ T6087] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.621: corrupted inode contents [ 183.998414][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.029218][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.183512][ T5918] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.193210][ T4318] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 184.398063][ T4318] usb 1-1: config 0 has no interfaces? [ 184.417039][ T4318] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.466726][ T4318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.489958][ T6120] loop4: detected capacity change from 0 to 512 [ 184.516476][ T4318] usb 1-1: config 0 descriptor?? [ 184.588680][ T6120] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.625: inode #1: comm syz.4.625: iget: illegal inode # [ 184.632440][ T6120] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.625: error while reading EA inode 1 err=-117 [ 184.653346][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.682383][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.704084][ T6120] EXT4-fs (loop4): 1 orphan inode deleted [ 184.717700][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.724837][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.739023][ T6120] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 184.911636][ T4318] usb 1-1: USB disconnect, device number 16 [ 184.971784][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.020447][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.051186][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 185.070893][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.127134][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.134288][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.213950][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.250636][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.267830][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.290068][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.307478][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.328603][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.373971][ T26] kauditd_printk_skb: 63 callbacks suppressed [ 185.373982][ T26] audit: type=1800 audit(1786528903.233:665): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37526 res=0 errno=0 [ 185.424942][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.461958][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.500700][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.513275][ T4321] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 185.522349][ T26] audit: type=1800 audit(1786528903.373:666): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 185.709248][ T26] audit: type=1800 audit(1786528903.563:667): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 185.770097][ T4321] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 185.801411][ T4321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.827369][ T4321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.846063][ T4321] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 185.877887][ T5918] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.889421][ T4321] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 185.905892][ T26] audit: type=1800 audit(1786528903.763:668): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37526 res=0 errno=0 [ 185.970387][ T4321] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 185.979841][ T5918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.016109][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 186.028063][ T4321] usb 5-1: Manufacturer: syz [ 186.034223][ T26] audit: type=1800 audit(1786528903.823:669): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 186.067646][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.086794][ T4321] usb 5-1: config 0 descriptor?? [ 186.119377][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.134488][ T26] audit: type=1800 audit(1786528903.943:670): pid=4396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=146240 res=0 errno=0 [ 186.173763][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.272440][ T5893] device veth0_vlan entered promiscuous mode [ 186.310509][ T26] audit: type=1800 audit(1786528903.943:671): pid=4396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=146281 res=0 errno=0 [ 186.373590][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 186.439365][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 186.500049][ T26] audit: type=1800 audit(1786528903.943:672): pid=4396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=146247 res=0 errno=0 [ 186.521771][ T4321] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 186.569425][ T4321] appleir 0003:05AC:8243.000D: No inputs registered, leaving [ 186.620698][ T4321] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 186.662628][ T26] audit: type=1800 audit(1786528903.943:673): pid=4396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=146248 res=0 errno=0 [ 186.834479][ T26] audit: type=1800 audit(1786528903.943:674): pid=4396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=146269 res=0 errno=0 [ 186.886611][ T4321] usb 5-1: USB disconnect, device number 7 [ 187.077616][ T5893] device veth1_vlan entered promiscuous mode [ 187.128220][ T6148] fido_id[6148]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 187.158939][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 187.187068][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 187.229012][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 187.366226][ T5190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.435650][ T5190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.513642][ T5190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.578513][ T5190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.652374][ T5190] device bridge_slave_1 left promiscuous mode [ 187.693052][ T5190] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.770221][ T5190] device bridge_slave_0 left promiscuous mode [ 187.813178][ T5190] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.989300][ T5190] device veth1_macvtap left promiscuous mode [ 188.020889][ T5190] device veth0_macvtap left promiscuous mode [ 188.048713][ T5190] device veth1_vlan left promiscuous mode [ 188.099008][ T5190] device veth0_vlan left promiscuous mode [ 189.884615][ T6186] loop4: detected capacity change from 0 to 131072 [ 189.899408][ T6186] F2FS-fs (loop4): invalid crc value [ 189.927829][ T6186] F2FS-fs (loop4): Found nat_bits in checkpoint [ 189.958270][ T6186] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 189.970751][ T6186] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 190.234493][ T5733] INFO: trying to register non-static key. [ 190.240344][ T5733] The code is fine but needs lockdep annotation, or maybe [ 190.247452][ T5733] you didn't initialize this object before use? [ 190.253686][ T5733] turning off the locking correctness validator. [ 190.260010][ T5733] CPU: 0 PID: 5733 Comm: gfs2_quotad Not tainted syzkaller #0 [ 190.267469][ T5733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 190.277542][ T5733] Call Trace: [ 190.280833][ T5733] [ 190.283793][ T5733] dump_stack_lvl+0x188/0x24e [ 190.288491][ T5733] ? show_regs_print_info+0x12/0x12 [ 190.293695][ T5733] ? load_image+0x410/0x410 [ 190.298203][ T5733] ? _find_next_bit+0x11e/0x130 [ 190.303063][ T5733] ? __is_module_percpu_address+0x279/0x3b0 [ 190.308959][ T5733] ? is_kernel_percpu_address+0x18f/0x1b0 [ 190.314689][ T5733] assign_lock_key+0x201/0x230 [ 190.319469][ T5733] ? SOFTIRQ_verbose+0x10/0x10 [ 190.324238][ T5733] ? mark_lock+0x94/0x320 [ 190.328601][ T5733] ? __lock_acquire+0x1465/0x7c40 [ 190.333639][ T5733] register_lock_class+0x21d/0x870 [ 190.338766][ T5733] ? is_dynamic_key+0x260/0x260 [ 190.343634][ T5733] __lock_acquire+0x172/0x7c40 [ 190.348448][ T5733] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 190.354438][ T5733] ? lock_chain_count+0x20/0x20 [ 190.359296][ T5733] ? __free_object+0x218/0xa60 [ 190.364061][ T5733] ? lockdep_hardirqs_on+0x94/0x140 [ 190.369261][ T5733] ? verify_lock_unused+0x140/0x140 [ 190.374471][ T5733] ? alloc_object+0x640/0x640 [ 190.379147][ T5733] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 190.385140][ T5733] ? __lock_acquire+0x7c40/0x7c40 [ 190.390186][ T5733] ? lock_chain_count+0x20/0x20 [ 190.395069][ T5733] lock_acquire+0x1bb/0x4a0 [ 190.399584][ T5733] ? finish_wait+0xbb/0x1c0 [ 190.404111][ T5733] ? timer_delete_sync+0x20/0x20 [ 190.409056][ T5733] ? read_lock_is_recursive+0x10/0x10 [ 190.414440][ T5733] _raw_spin_lock_irqsave+0xb0/0x100 [ 190.419736][ T5733] ? finish_wait+0xbb/0x1c0 [ 190.424252][ T5733] ? _raw_spin_lock+0x40/0x40 [ 190.428934][ T5733] ? update_process_times+0x1b0/0x1b0 [ 190.434310][ T5733] finish_wait+0xbb/0x1c0 [ 190.438647][ T5733] gfs2_quotad+0x501/0x690 [ 190.443069][ T5733] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 190.448180][ T5733] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 190.454087][ T5733] ? wake_bit_function+0x200/0x200 [ 190.459206][ T5733] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 190.465101][ T5733] ? __kthread_parkme+0x71/0x1c0 [ 190.470058][ T5733] ? __kthread_parkme+0x15b/0x1c0 [ 190.475094][ T5733] kthread+0x29d/0x330 [ 190.479258][ T5733] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 190.484371][ T5733] ? kthread_blkcg+0xd0/0xd0 [ 190.488964][ T5733] ret_from_fork+0x1f/0x30 [ 190.493390][ T5733] [ 190.496412][ T5733] list_del corruption. prev->next should be ffffc90003f37e58, but was 0000000000000000. (prev=ffff888076584bd8) [ 190.508625][ T5733] ------------[ cut here ]------------ [ 190.514075][ T5733] kernel BUG at lib/list_debug.c:61! [ 190.519373][ T5733] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 190.525441][ T5733] CPU: 0 PID: 5733 Comm: gfs2_quotad Not tainted syzkaller #0 [ 190.532918][ T5733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 190.542992][ T5733] RIP: 0010:__list_del_entry_valid+0x10a/0x120 [ 190.549165][ T5733] Code: e8 bb cd 0a 06 0f 0b 48 c7 c7 20 62 df 8a 48 89 de e8 aa cd 0a 06 0f 0b 48 c7 c7 80 62 df 8a 48 89 de 4c 89 f9 e8 96 cd 0a 06 <0f> 0b 48 c7 c7 00 63 df 8a 48 89 de 4c 89 f1 e8 82 cd 0a 06 0f 0b [ 190.568779][ T5733] RSP: 0018:ffffc90003f37d30 EFLAGS: 00010046 [ 190.574851][ T5733] RAX: 000000000000006d RBX: ffffc90003f37e58 RCX: f6aeb992ecc6b800 [ 190.582844][ T5733] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 190.590815][ T5733] RBP: ffff888076584b98 R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 190.598793][ T5733] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: dffffc0000000000 [ 190.606778][ T5733] R13: 0000000000000a02 R14: ffff888076584bd8 R15: ffff888076584bd8 [ 190.614765][ T5733] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 190.623694][ T5733] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 190.630277][ T5733] CR2: 00007fc00af9d000 CR3: 000000005c003000 CR4: 00000000003506f0 [ 190.638260][ T5733] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 190.646236][ T5733] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 190.654207][ T5733] Call Trace: [ 190.657487][ T5733] [ 190.660431][ T5733] finish_wait+0xc6/0x1c0 [ 190.664769][ T5733] gfs2_quotad+0x501/0x690 [ 190.669194][ T5733] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 190.674304][ T5733] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 190.680219][ T5733] ? wake_bit_function+0x200/0x200 [ 190.685336][ T5733] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 190.691236][ T5733] ? __kthread_parkme+0x71/0x1c0 [ 190.696187][ T5733] ? __kthread_parkme+0x15b/0x1c0 [ 190.701230][ T5733] kthread+0x29d/0x330 [ 190.705309][ T5733] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 190.710435][ T5733] ? kthread_blkcg+0xd0/0xd0 [ 190.715028][ T5733] ret_from_fork+0x1f/0x30 [ 190.719479][ T5733] [ 190.722510][ T5733] Modules linked in: [ 190.726417][ T5733] ---[ end trace 0000000000000000 ]--- [ 190.731870][ T5733] RIP: 0010:__list_del_entry_valid+0x10a/0x120 [ 190.738041][ T5733] Code: e8 bb cd 0a 06 0f 0b 48 c7 c7 20 62 df 8a 48 89 de e8 aa cd 0a 06 0f 0b 48 c7 c7 80 62 df 8a 48 89 de 4c 89 f9 e8 96 cd 0a 06 <0f> 0b 48 c7 c7 00 63 df 8a 48 89 de 4c 89 f1 e8 82 cd 0a 06 0f 0b [ 190.757649][ T5733] RSP: 0018:ffffc90003f37d30 EFLAGS: 00010046 [ 190.763731][ T5733] RAX: 000000000000006d RBX: ffffc90003f37e58 RCX: f6aeb992ecc6b800 [ 190.771705][ T5733] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 190.779679][ T5733] RBP: ffff888076584b98 R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 190.787673][ T5733] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: dffffc0000000000 [ 190.795649][ T5733] R13: 0000000000000a02 R14: ffff888076584bd8 R15: ffff888076584bd8 [ 190.803622][ T5733] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 190.812550][ T5733] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 190.819138][ T5733] CR2: 00007fc00af9d000 CR3: 000000005c003000 CR4: 00000000003506f0 [ 190.827112][ T5733] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 190.835082][ T5733] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 190.843065][ T5733] Kernel panic - not syncing: Fatal exception [ 190.849178][ T5733] Kernel Offset: disabled [ 190.853506][ T5733] Rebooting in 86400 seconds..