last executing test programs: 1m25.763684059s ago: executing program 0 (id=333): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$gfs2(&(0x7f00000124c0), &(0x7f0000012500)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[], 0xff, 0x125c7, &(0x7f0000024b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000100)={0xfffffffffffffffe, 0xfffffffffffffffd, 0x0, 0x7fff}) 1m24.713824537s ago: executing program 0 (id=343): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000080)="630b008646dc3f0adf398151d900", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) 1m22.791384985s ago: executing program 0 (id=354): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210040, &(0x7f00000004c0), 0xfc, 0x59d, &(0x7f00000022c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r1, 0x0, 0x0, 0x1001f0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 1m22.187486762s ago: executing program 0 (id=359): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000540)='./file1\x00', 0xa00010, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/361, @ANYRESHEX=0xee01, @ANYRES16, @ANYRES64=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC], 0xd, 0x643, &(0x7f0000001380)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x47) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) 1m21.725554544s ago: executing program 0 (id=363): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 1m21.168936979s ago: executing program 0 (id=366): mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x6) 1m20.840265094s ago: executing program 32 (id=366): mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x6) 7.287304716s ago: executing program 3 (id=870): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 7.228674039s ago: executing program 2 (id=871): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1c8) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00e50700395032303030"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 6.621590067s ago: executing program 3 (id=875): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000140)='test\x00', 0x42, 0x93) write$P9_RLERRORu(r1, &(0x7f0000001640)=ANY=[@ANYBLOB="0e0000000003000100"], 0xe) 6.3176794s ago: executing program 2 (id=876): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.888176s ago: executing program 3 (id=877): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x0, &(0x7f00000000c0), 0x3, 0x618, &(0x7f0000000300)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x691, 0x0, 0xb6, 0x0, &(0x7f00000007c0)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000940)=@v2={0x2, @aes128, 0x2, '\x00', @b}) 5.201353602s ago: executing program 4 (id=882): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 5.071367957s ago: executing program 5 (id=883): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/vm/compaction_proactiveness\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') read$FUSE(r0, 0x0, 0x0) 4.921683934s ago: executing program 3 (id=884): openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x6000000d}) ppoll(&(0x7f0000000140)=[{r1, 0xc}, {r0, 0x4180}], 0x2, 0x0, 0x0, 0x0) 4.631970678s ago: executing program 5 (id=886): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000240), &(0x7f0000000100)='./file2\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYBLOB="2e2d703e85840c7ae1b446485929ca212e30c622f200f57a5e788ebfbc1998e3012e127f76629f84e03ba28bdb368b6f60e7c57cf8f6ed160acfbbcbbba88879160e532876fcef4fc917d74530f2d7fd029a5311"], 0x1, 0x10609, &(0x7f0000005b00)="$eJzs3D1vW9UfB/Cfk38f/6VUqA8MIK6EkBKptur0QbCgAq0A0VYVhYEJHNu13Nq+UeympgsLDEhMLLwJJngNLLCzwsLGAhJbRZHvPUYEKgGJG0fk85Fuvucen/vzOZaX4xvdAPasY9kvP1fiaByKiMWIOBJRtCvpKFws48mIeCZ1LaSjkvp/79gfEYcj4uikeFmzkl566tf733/xzZWnP/7u028/+OynG/NZMbAbPBcR/bWyfbdfZt4p81bqb2x0i+yf20hZvtC/nc7zMu+2V4sKdxvTcY0iz3bK8fnaneEkb/YazUl2ujeL/rVB+YbDjc60TnHBrcZ6cd5qrxbZHeZFdu6V8xqnvDcclXVaqd77RfkYjaZZ9rfH7XI9a7eLbA5Gqb+sm7fa40lupExvF8281yrmsbrlj3nXu9Id3BlnG+31YTcfZOdr9edr9QvV+nreao/a56qNfuvCuWyp05sMq47ajf7FTp53eu1aM+8vZ0udZrNar2dLl9qr3cYgq9drZ2tnqueXU+t09uq1t7NeK1ua5MvdwZ1RtzfMbubrWXnFcrZSO/vCcvZsPbtx9Xp2/c3Ll69ef+vdS+9ce+nq66+kQX+ZVra0cmZlpVo/U12pL2915acflPbq+kvjyvauZ4/z/QH417ay/1+w/we2yf7f/j/29P7f+sP+n+3y/QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2LN+2Pfla0XjWHn+/9T/WOp6IiJORcTJiDgREQ8eYjH2b6p5PCIqqf2w8fv+NIevKlFUmFxzIB2HI+JiOu4//qg/BQAAAPjv+vzrDz+KWJw0iz8vzntC7KT0o83BWdUrfvL536yqHS+KjWdU7cS05EycjIh9x36cUbVTEbFw5L0ZVftHFjfFwT9EpYyFnZwNAACwMzbvBGa2ewMAAGDX+WTeE2A+ivu16X/x073gA2WkG4KHpmdvzGF2AAAAwCxU5j0BAAAA4JEr9v9///y/xbk9/2/K8/8AAABg68rn/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+xcze3iQNRHMAfsF7YLy1a8dEKp9UeOVDElpBjCki6yY0aIiHqILeUEEGEPZHiiEMkj3GCfj/JzNiCv565PY81AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KaHYr28297cNs3ZH5rJczcAAADAKbtivSwn4+r8R7r+K136ExHziJhFxDQiTvXug/hay5xERC/NT32/eFPDfUSZcPzNMB3fI+JfOp5+t/0vAAAAwOXabhariMFxWn787bogzik9tBnlyisf+XzJlTYpw64zpU1fIrOYRUQxfsyUNo+I/s//mdLeZVAbRq+GXjX0z1kNAABwHvVOIFv3BgAAwIdz1XUBdKNcr03v4qe14GE1pAXBb7UzAAAA4BPqdV0AAAAA0Lqy/7f/HwAAAFy2av8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2rQr1svtZrFqmrM/NJPnbgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgmf15ScEQBoIw2P9TvVPw/rdSGnSrK3dVEPiYIYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJXXcfI+49NYk3w7bfw6Hkn+XTWmrhpz142lF8btc9vzPwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ39eTkBEIjBMBjf2tNi/zV5UX7QszdBmAHhIyHIAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA33f1V/8SQ2KtqzDQxZdyqas4qsWSVWHOQ2HLQ3v52nB88CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALnbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrA/7zYRA2EURq8HEDghgBLILR41kBAhKIGHhGTJNVAADZEQkVo0wrawK3nH8WbeYM9J7hdMMD8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHDWO18cJWlS5iwpD5+X/8dJTlK+xvH+dMrme/U3nG3z+ef3seZFnq7aJG2aJc4BAFhcN+8U53n/6N+uk2lv6t7WvavbvQz9636/DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALBh535aogjjOIA/u7pbduvSIQrKgoSo9Q/iKl6KAgt6A94W3URaS9RDShB2kS5Bl+5dutTNU6feQacuEQV1NyiIIAhjd2fsMTVWiJ2VPh94Zn4Ow8zzzEH4zm8UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2IeN1XA+rXMhhOPdv+u6t1/uTe2237h/bDgdj04+n4+vWb9EIYRwc7ZW7W/jWjrZ2TDY2H/4/LAvfoZ/nre4vHKrUqtVFxQKhWKryOCXFgAAB1YhGfVc/7GwPlE/lhsPYfPp9vx/LqpDi/l/80nf6/hecf4faNsKO1ua/yevr439Lf+XlubmS4vLKxdm5yoz1Znq7YGR0ZH+ofLw4Eip8T6l5K0KAAAAeysmI87/+fGd/f8jUR1azP+vXl6bjO/VJf/vkOb/y729z1rr/2cwSQAAgP/E0VPfvuZ2OZ4rFsPdytLSwkBzu/XzYHObwVT37VAy4vzfNZ71rAAAAIB22FjNbev/T0d1aLH///77lRPxNbtCCD1J///i1J3adPuWk4XdXhntkPb/xy5VbmT99////hEAAADQKXqSEff/C43v//On03PyIYS+M806+TeALeX/nw9G38T3ir//H2rfEjtSvtx8Hmn+X3v3Ynav/N84txxCdzmjyQIAAHDgHU5GPf9/KqxPLPx4fLXo+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+MWOHaM0EEQBAJ1kE20UA4JYWmhjISoIVgELQeIhLERB8AgB8QAKnsXCO4ikTkoPkMIbyEx2JARBBdnV8B5M/idMMn9mmv0LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXxofhY2cF/GjM8mb5XfDt/55jKOZmH57s3YQR8wb1Zb976yX8Xl0+jScOsPGYX01AQAAMH+K3N+HEF7bjycxNrup/9/Kc2LP31+e5Lmfb4XP+//c+8ex9FCcfSzUmazTDiFcXl1f7Fa2w79tM+yn2HvZvp8+w9l5K9/4r1a6n/SGpkjX1uzdro7b6dQbd4PB8UJKF39/FwDAT+3kWCb5+SjGvToLA2ButcoRpvr/oltvTQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABVeA8AAP//w1SYPw==") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0) 4.522702173s ago: executing program 4 (id=887): bpf$ENABLE_STATS(0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4000007, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="b994bc444b9893b04bf30981fd1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 4.410553938s ago: executing program 1 (id=888): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000080000e0000002000000000000000000000000ffffffff0000000000000000000000003a17fc35844154f20a"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 3.545539788s ago: executing program 3 (id=889): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)='\x00', 0x1) 3.307525188s ago: executing program 5 (id=890): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000005800)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x1000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000080)="8b", 0x1}], 0x1}}], 0x1, 0x20000084) sendmmsg$inet6(r0, &(0x7f0000003140)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x1, 0x40) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) 3.227362652s ago: executing program 1 (id=891): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a9c0000000b0a01"], 0x168}, 0x1, 0x0, 0x0, 0x4080}, 0x48c0) 3.155475366s ago: executing program 4 (id=892): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {}, 0x22, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffff9, 0x400000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x100, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x547e2ab0, 0xfffffffe], [0x0, 0x0, 0x8000, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xffffffff, 0x0, 0x3fffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x800, 0x0, 0x19c, 0x8, 0x200, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x2, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xc, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80007, 0x400008, 0x0, 0x0, 0x10000000, 0x0, 0x800, 0x0, 0xfffffffd, 0x20, 0x4, 0x0, 0x200000, 0x0, 0x10, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 3.06308621s ago: executing program 3 (id=893): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 2.858130379s ago: executing program 2 (id=894): openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002580), 0x2, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) 2.83835885s ago: executing program 1 (id=895): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e23, 0xfffffffe, @mcast1, 0x87}}, 0x0, 0x0, 0x3a, 0x0, "276148cd1259e41d8f0ffd4be8b6d180a19ecb3e60c92e9fe908c95534a69b91fe9e2770ba387440609895d7fbb1c08bdfd96493f4fc1810d150cc3f2bbd548044dcec63bc8b2168c59e27175814071e"}, 0xd8) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000ffffffffffff", 0x58}], 0x1) 2.528800674s ago: executing program 4 (id=896): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x1, 0x6, 0x401, 0x0, 0x8}) 2.477483377s ago: executing program 2 (id=897): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x1d, 0x2, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.298659265s ago: executing program 1 (id=898): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210003, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x5, 0xc64, 0x6, 0x9, 0x5, "1a460fe2da304e01"}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x4010, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.208793709s ago: executing program 5 (id=899): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, 0x0, 0x0, 0x48d5}, 0x8050) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e24, @local}}}, 0x84) 1.864415994s ago: executing program 4 (id=900): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.702937182s ago: executing program 1 (id=901): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) 1.576524118s ago: executing program 5 (id=902): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x40000, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x1}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000002c0)={0x60002002}) epoll_wait(r1, &(0x7f0000000300)=[{}], 0x1, 0x5) 1.368553357s ago: executing program 1 (id=903): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x4010, &(0x7f0000000300), 0x1, 0x9768, &(0x7f0000012f40)="$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") mkdir(&(0x7f0000000340)='./file1\x00', 0x100) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000040)={@id={0x2, 0x0, @d}}) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 1.179647356s ago: executing program 5 (id=904): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000100), 0xcd79, 0x141000) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000040)={0x2, 0x0, 0x1, 0x7, 0x4}) 614.839972ms ago: executing program 4 (id=905): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nobh}, {@quota}]}, 0x1, 0x560, &(0x7f0000000440)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) lseek(r0, 0x1, 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x2, 0xb, 0x3, 0xf, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x4e21, 0xfff, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}}, @sadb_sa={0x2, 0x1, 0xfffffffd, 0x0, 0x2, 0x3, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x8, @private2, 0x3}}]}, 0x78}, 0x1, 0x7}, 0x0) 421.884801ms ago: executing program 2 (id=906): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000240)={&(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f0000000100), 0x3, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000340)=[0x346], &(0x7f0000000380)=[r2], &(0x7f00000001c0), 0x0, 0x2}) 0s ago: executing program 2 (id=907): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r1 = epoll_create(0xd751) epoll_pwait(r1, &(0x7f00000000c0)=[{}], 0x1, 0xef19, 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0xa1}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0x1}) kernel console output (not intermixed with test programs): ne, BIOS Google 07/24/2026 [ 125.261937][ T5110] Call Trace: [ 125.265255][ T5110] [ 125.268228][ T5110] dump_stack_lvl+0x188/0x24e [ 125.272963][ T5110] ? show_regs_print_info+0x12/0x12 [ 125.278227][ T5110] ? load_image+0x410/0x410 [ 125.282799][ T5110] ? __lock_acquire+0x7c40/0x7c40 [ 125.287909][ T5110] ? do_futex+0x310/0x320 [ 125.292296][ T5110] should_fail_ex+0x390/0x4c0 [ 125.297039][ T5110] strncpy_from_user+0x32/0x340 [ 125.301986][ T5110] __se_sys_add_key+0xd8/0x410 [ 125.306811][ T5110] ? __x64_sys_add_key+0xc0/0xc0 [ 125.311813][ T5110] ? lockdep_hardirqs_on+0x94/0x140 [ 125.317067][ T5110] ? __x64_sys_add_key+0x1c/0xc0 [ 125.322076][ T5110] do_syscall_64+0x4c/0xa0 [ 125.326549][ T5110] ? clear_bhb_loop+0x60/0xb0 [ 125.331275][ T5110] ? clear_bhb_loop+0x60/0xb0 [ 125.336006][ T5110] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.341963][ T5110] RIP: 0033:0x7f8c0b59e159 [ 125.346417][ T5110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.366085][ T5110] RSP: 002b:00007f8c097f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 125.374555][ T5110] RAX: ffffffffffffffda RBX: 00007f8c0b825fa0 RCX: 00007f8c0b59e159 [ 125.382579][ T5110] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 125.390591][ T5110] RBP: 00007f8c0b63506b R08: 0000000000000000 R09: 0000000000000000 [ 125.398609][ T5110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.406630][ T5110] R13: 00007f8c0b826038 R14: 00007f8c0b825fa0 R15: 00007ffefe316c98 [ 125.414671][ T5110] [ 125.484200][ T4416] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 125.528119][ T5112] loop2: detected capacity change from 0 to 2048 [ 125.564005][ T4284] Bluetooth: hci1: command 0x2016 tx timeout [ 125.572117][ T5112] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.638384][ T3654] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 125.675523][ T4416] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 125.704059][ T4416] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.749835][ T4416] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.804042][ T4416] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 125.836277][ T4416] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 125.885861][ T4416] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 125.906845][ T4416] usb 4-1: Manufacturer: syz [ 125.928330][ T4416] usb 4-1: config 0 descriptor?? [ 125.944652][ T4412] usb 1-1: USB disconnect, device number 6 [ 126.079681][ T5119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.241'. [ 126.093720][ T5119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.241'. [ 126.127436][ T5119] netlink: 20 bytes leftover after parsing attributes in process `syz.1.241'. [ 126.142110][ T5119] netlink: 20 bytes leftover after parsing attributes in process `syz.1.241'. [ 126.534152][ T4284] Bluetooth: hci5: command 0xfc11 tx timeout [ 126.585076][ T48] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 126.976910][ T5117] loop2: detected capacity change from 0 to 131072 [ 126.995815][ T5117] F2FS-fs (loop2): Wrong secs_per_zone / total_sections (512, 24) [ 127.003731][ T5117] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 127.013998][ T4416] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 127.023032][ T4416] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 127.037712][ T5117] F2FS-fs (loop2): Test dummy encryption mode enabled [ 127.053508][ T4416] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 127.116439][ T5117] F2FS-fs (loop2): invalid crc value [ 127.145028][ T5117] F2FS-fs (loop2): Found nat_bits in checkpoint [ 127.184230][ T5117] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 127.217937][ T4412] usb 4-1: USB disconnect, device number 6 [ 127.257688][ T5117] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 127.268270][ T5117] F2FS-fs (loop2): Start checkpoint disabled! [ 127.301235][ T5138] FAULT_INJECTION: forcing a failure. [ 127.301235][ T5138] name fail_futex, interval 1, probability 0, space 0, times 1 [ 127.314804][ T5138] CPU: 1 PID: 5138 Comm: syz.1.247 Not tainted syzkaller #0 [ 127.322154][ T5138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.332276][ T5138] Call Trace: [ 127.335610][ T5138] [ 127.338598][ T5138] dump_stack_lvl+0x188/0x24e [ 127.343337][ T5138] ? show_regs_print_info+0x12/0x12 [ 127.348598][ T5138] ? load_image+0x410/0x410 [ 127.353179][ T5138] should_fail_ex+0x390/0x4c0 [ 127.357936][ T5138] futex_lock_pi_atomic+0x148/0xcb0 [ 127.363188][ T5138] ? pi_state_update_owner+0x340/0x340 [ 127.368707][ T5138] ? futex_setup_timer+0xc0/0xc0 [ 127.373757][ T5138] futex_lock_pi+0x227/0x9e0 [ 127.378417][ T5138] ? fixup_pi_state_owner+0x5e0/0x5e0 [ 127.383885][ T5138] ? __lock_acquire+0x7c40/0x7c40 [ 127.389061][ T5138] ? file_end_write+0x156/0x250 [ 127.393973][ T5138] ? vfs_write+0x777/0x9a0 [ 127.398470][ T5138] do_futex+0x1c1/0x320 [ 127.402695][ T5138] ? __ia32_sys_get_robust_list+0x100/0x100 [ 127.408664][ T5138] __se_sys_futex+0x381/0x410 [ 127.413442][ T5138] ? __x64_sys_futex+0xf0/0xf0 [ 127.418362][ T5138] ? __x64_sys_futex+0x1d/0xf0 [ 127.423179][ T5138] do_syscall_64+0x4c/0xa0 [ 127.427673][ T5138] ? clear_bhb_loop+0x60/0xb0 [ 127.432384][ T5138] ? clear_bhb_loop+0x60/0xb0 [ 127.437096][ T5138] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.443033][ T5138] RIP: 0033:0x7fa3b219e159 [ 127.447478][ T5138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.467202][ T5138] RSP: 002b:00007fa3b30c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 127.475651][ T5138] RAX: ffffffffffffffda RBX: 00007fa3b2425fa0 RCX: 00007fa3b219e159 [ 127.483653][ T5138] RDX: 00000000fffffffe RSI: 000000000000000d RDI: 0000200000000000 [ 127.491649][ T5138] RBP: 00007fa3b223506b R08: 0000000000000000 R09: 00000000ffffffff [ 127.499649][ T5138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.507651][ T5138] R13: 00007fa3b2426038 R14: 00007fa3b2425fa0 R15: 00007ffd329ad3a8 [ 127.516274][ T5138] [ 127.528382][ T5117] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 127.536005][ T5117] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 127.678873][ T5133] fido_id[5133]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 127.781131][ T5144] capability: warning: `syz.1.250' uses deprecated v2 capabilities in a way that may be insecure [ 127.807239][ T5140] loop0: detected capacity change from 0 to 4096 [ 128.201090][ T5151] device veth1_to_bond entered promiscuous mode [ 128.237272][ T5151] device veth1_to_bond left promiscuous mode [ 128.382369][ T5157] sctp: [Deprecated]: syz.0.255 (pid 5157) Use of int in max_burst socket option. [ 128.382369][ T5157] Use struct sctp_assoc_value instead [ 128.554069][ T4412] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 128.735072][ T5004] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 128.778038][ T4412] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.810730][ T4412] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.834031][ T4412] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 128.843161][ T4412] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.906777][ T4412] usb 3-1: config 0 descriptor?? [ 128.940693][ T5004] usb 2-1: Using ep0 maxpacket: 32 [ 128.952702][ T5004] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 128.994630][ T5004] usb 2-1: config 0 has no interface number 0 [ 129.010942][ T5004] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 129.035549][ T5004] usb 2-1: config 0 interface 85 has no altsetting 0 [ 129.055695][ T5172] loop3: detected capacity change from 0 to 1024 [ 129.076245][ T5172] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 129.091270][ T5004] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 129.131423][ T5004] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.198297][ T5004] usb 2-1: Product: syz [ 129.210151][ T5004] usb 2-1: Manufacturer: syz [ 129.239678][ T5004] usb 2-1: SerialNumber: syz [ 129.255192][ T5004] usb 2-1: config 0 descriptor?? [ 129.323777][ T4412] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 129.382446][ T4412] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0006/input/input9 [ 129.570650][ T4412] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 129.601424][ T4412] usb 3-1: USB disconnect, device number 3 [ 129.706066][ T4416] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 129.824384][ T5182] fido_id[5182]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 129.907449][ T5004] appletouch 2-1:0.85: Geyser mode initialized. [ 129.921135][ T4416] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.929729][ T5004] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input8 [ 129.962634][ T4416] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.981483][ T4416] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 129.990770][ T4416] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.041800][ T4416] usb 4-1: config 0 descriptor?? [ 130.161895][ T4320] usb 2-1: USB disconnect, device number 6 [ 130.192732][ T4946] udevd[4946]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 130.205390][ T4320] appletouch 2-1:0.85: input: appletouch disconnected [ 130.244194][ T4946] udevd[4946]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 130.380428][ T5180] loop4: detected capacity change from 0 to 32768 [ 130.420206][ T5180] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.266 (5180) [ 130.452162][ T5180] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 130.475330][ T5180] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 130.492357][ T4416] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 130.498809][ T5180] BTRFS info (device loop4): setting nodatacow, compression disabled [ 130.529595][ T4416] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 130.551845][ T5180] BTRFS info (device loop4): setting datasum, datacow enabled [ 130.559418][ T4416] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 130.559481][ T4416] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 130.559506][ T4416] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 130.603988][ T5180] BTRFS info (device loop4): force clearing of disk cache [ 130.621067][ T4416] playstation 0003:054C:0DF2.0007: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 130.642864][ T5180] BTRFS info (device loop4): turning on sync discard [ 130.670397][ T5180] BTRFS info (device loop4): enabling ssd optimizations [ 130.692025][ T5180] BTRFS info (device loop4): using spread ssd allocation scheme [ 130.713927][ T5180] BTRFS info (device loop4): not using ssd optimizations [ 130.736936][ T5180] BTRFS info (device loop4): not using spread ssd allocation scheme [ 130.759173][ T5180] BTRFS info (device loop4): using free space tree [ 130.951125][ T4416] playstation 0003:054C:0DF2.0007: Failed to retrieve feature with reportID 32: -32 [ 130.992567][ T4416] playstation 0003:054C:0DF2.0007: Failed to retrieve DualSense firmware info: -32 [ 131.044838][ T4416] playstation 0003:054C:0DF2.0007: Failed to get firmware info from DualSense [ 131.075184][ T4416] playstation 0003:054C:0DF2.0007: Failed to create dualsense. [ 131.130427][ T4416] playstation: probe of 0003:054C:0DF2.0007 failed with error -32 [ 131.142043][ T4416] usb 4-1: USB disconnect, device number 7 [ 131.183427][ T5180] BTRFS info (device loop4): rebuilding free space tree [ 131.363034][ T5222] loop0: detected capacity change from 0 to 256 [ 131.432469][ T5220] fido_id[5220]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 131.492535][ T5180] BTRFS info (device loop4): scrub: started on devid 1 [ 131.552537][ T5180] BTRFS info (device loop4): left=0, need=98304, flags=2 [ 131.634714][ T5180] BTRFS info (device loop4): space_info SYSTEM (sub-group id 0) has 0 free, is not full [ 131.645539][ T5180] BTRFS info (device loop4): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 131.659279][ T5180] BTRFS info (device loop4): global_block_rsv: size 1441792 reserved 1441792 [ 131.668731][ T5180] BTRFS info (device loop4): trans_block_rsv: size 0 reserved 0 [ 131.676468][ T5180] BTRFS info (device loop4): chunk_block_rsv: size 0 reserved 0 [ 131.684210][ T5180] BTRFS info (device loop4): delayed_block_rsv: size 98304 reserved 98304 [ 131.692765][ T5180] BTRFS info (device loop4): delayed_refs_rsv: size 786432 reserved 217088 [ 131.847197][ T5229] loop2: detected capacity change from 0 to 1024 [ 131.902916][ T5234] sctp: [Deprecated]: syz.1.283 (pid 5234) Use of int in max_burst socket option. [ 131.902916][ T5234] Use struct sctp_assoc_value instead [ 132.061552][ T5180] BTRFS info (device loop4): unable to make block group 5242880 ro [ 132.093660][ T5180] BTRFS info (device loop4): space_info DATA+METADATA (sub-group id 0) has 1454080 free, is not full [ 132.105331][ T5180] BTRFS info (device loop4): space_info total=3276800, used=53248, pinned=0, reserved=24576, may_use=1744896, readonly=0 zone_unusable=0 [ 132.119545][ T5180] BTRFS info (device loop4): global_block_rsv: size 1441792 reserved 1437696 [ 132.129059][ T5180] BTRFS info (device loop4): trans_block_rsv: size 0 reserved 0 [ 132.137285][ T5180] BTRFS info (device loop4): chunk_block_rsv: size 0 reserved 0 [ 132.145257][ T5180] BTRFS info (device loop4): delayed_block_rsv: size 98304 reserved 98304 [ 132.153829][ T5180] BTRFS info (device loop4): delayed_refs_rsv: size 1835008 reserved 208896 [ 132.330608][ T5180] BTRFS info (device loop4): unable to make block group 6881280 ro [ 132.344050][ T5180] BTRFS info (device loop4): space_info DATA+METADATA (sub-group id 0) has 1454080 free, is full [ 132.355041][ T5180] BTRFS info (device loop4): space_info total=3276800, used=53248, pinned=0, reserved=24576, may_use=1744896, readonly=0 zone_unusable=0 [ 132.369572][ T5180] BTRFS info (device loop4): global_block_rsv: size 1441792 reserved 1437696 [ 132.378538][ T5180] BTRFS info (device loop4): trans_block_rsv: size 0 reserved 0 [ 132.386302][ T5180] BTRFS info (device loop4): chunk_block_rsv: size 0 reserved 0 [ 132.394031][ T5180] BTRFS info (device loop4): delayed_block_rsv: size 98304 reserved 98304 [ 132.402597][ T5180] BTRFS info (device loop4): delayed_refs_rsv: size 1835008 reserved 208896 [ 132.561481][ T5180] BTRFS info (device loop4): scrub: finished on devid 1 with status: 0 [ 132.742057][ T4502] kernel read not supported for file /video9 (pid: 4502 comm: kworker/0:16) [ 132.777585][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.784621][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.821885][ T4272] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 133.073840][ T5256] loop3: detected capacity change from 0 to 2048 [ 133.247838][ T5256] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 133.350800][ T27] audit: type=1800 audit(1790222954.852:7): pid=5256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.294" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 133.452573][ T5263] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 133.546289][ T27] audit: type=1800 audit(1790222955.052:8): pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.280" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 133.574292][ T5263] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 133.607869][ T5263] EXT4-fs (loop3): This should not happen!! Data will be lost [ 133.607869][ T5263] [ 133.634041][ T5263] EXT4-fs (loop3): Total free blocks count 0 [ 133.640285][ T5263] EXT4-fs (loop3): Free/Dirty block details [ 133.670745][ T5263] EXT4-fs (loop3): free_blocks=2415919504 [ 133.689573][ T5263] EXT4-fs (loop3): dirty_blocks=64 [ 133.700368][ T5263] EXT4-fs (loop3): Block reservation details [ 133.730531][ T5263] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 133.782074][ T5263] EXT4-fs error (device loop3) in ext4_setattr:5695: error 28 [ 133.909074][ T5252] loop0: detected capacity change from 0 to 32768 [ 133.955805][ T5252] [ 133.955805][ T5252] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 133.955805][ T5252] [ 133.989113][ T5273] Zero length message leads to an empty skb [ 134.032908][ T5252] ERROR: (device loop0): diWrite: ixpxd invalid [ 134.032908][ T5252] [ 134.048628][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 134.103417][ T5252] ERROR: (device loop0): remounting filesystem as read-only [ 134.175707][ T5252] ERROR: (device loop0): txCommit: [ 134.175707][ T5252] [ 134.198538][ T5252] ERROR: (device loop0): remounting filesystem as read-only [ 134.434364][ T5284] tipc: Started in network mode [ 134.439797][ T5284] tipc: Node identity 7f000001, cluster identity 4711 [ 134.500102][ T5284] tipc: Enabled bearer , priority 10 [ 134.892945][ T5293] netlink: 'syz.0.303': attribute type 11 has an invalid length. [ 135.064234][ T4498] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 135.142127][ T5279] loop3: detected capacity change from 0 to 32768 [ 135.265798][ T4498] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.293927][ T4498] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 135.357661][ T4498] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.498383][ T4498] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 135.593243][ T4498] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 135.619035][ T4414] tipc: Node number set to 2130706433 [ 135.812071][ T4498] usb 3-1: Product: syz [ 135.872792][ T4498] usb 3-1: Manufacturer: syz [ 135.915810][ T5279] XFS (loop3): Mounting V5 Filesystem [ 135.954716][ T5288] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 135.991419][ T4498] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 136.050208][ T4498] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 136.125215][ T5279] XFS (loop3): Ending clean mount [ 136.181185][ T5364] loop1: detected capacity change from 0 to 512 [ 136.225206][ T4498] usb 3-1: USB disconnect, device number 4 [ 136.275833][ T4498] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 136.301387][ T5364] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.331337][ T4498] garmin_gps 3-1:1.0: device disconnected [ 136.343535][ T5364] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 136.443324][ T5364] EXT4-fs (loop1): 1 truncate cleaned up [ 136.449827][ T5367] loop0: detected capacity change from 0 to 16 [ 136.458935][ T5367] erofs: (device loop0): mounted with root inode @ nid 36. [ 136.494890][ T5364] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 136.570537][ T5369] netlink: 'syz.0.311': attribute type 10 has an invalid length. [ 136.597677][ T5369] device syz_tun entered promiscuous mode [ 136.612679][ T5369] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 136.622701][ T4283] XFS (loop3): Unmounting Filesystem [ 136.716130][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 136.833556][ T5371] loop0: detected capacity change from 0 to 2048 [ 136.902307][ T5371] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 136.953622][ T5371] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.228566][ T5378] loop1: detected capacity change from 0 to 1024 [ 137.435846][ T5381] FAULT_INJECTION: forcing a failure. [ 137.435846][ T5381] name failslab, interval 1, probability 0, space 0, times 0 [ 137.477603][ T5381] CPU: 0 PID: 5381 Comm: syz.3.312 Not tainted syzkaller #0 [ 137.484989][ T5381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 137.495093][ T5381] Call Trace: [ 137.498427][ T5381] [ 137.501397][ T5381] dump_stack_lvl+0x188/0x24e [ 137.506134][ T5381] ? show_regs_print_info+0x12/0x12 [ 137.511380][ T5381] ? load_image+0x410/0x410 [ 137.515938][ T5381] ? __might_sleep+0xd0/0xd0 [ 137.520571][ T5381] ? __lock_acquire+0x7c40/0x7c40 [ 137.525675][ T5381] should_fail_ex+0x390/0x4c0 [ 137.530415][ T5381] should_failslab+0x5/0x20 [ 137.534965][ T5381] slab_pre_alloc_hook+0x59/0x300 [ 137.540042][ T5381] ? kvmalloc_node+0x6c/0x180 [ 137.544764][ T5381] __kmem_cache_alloc_node+0x4f/0x270 [ 137.550171][ T5381] ? kvmalloc_node+0x6c/0x180 [ 137.554889][ T5381] __kmalloc_node+0xa2/0x240 [ 137.559520][ T5381] kvmalloc_node+0x6c/0x180 [ 137.564063][ T5381] alloc_fdtable+0x169/0x2c0 [ 137.568705][ T5381] dup_fd+0x743/0xa20 [ 137.572727][ T5381] ? _raw_spin_unlock+0x24/0x40 [ 137.577613][ T5381] ? copy_fs_struct+0x1bf/0x270 [ 137.582491][ T5381] ksys_unshare+0x458/0x8e0 [ 137.587031][ T5381] ? sighand_ctor+0x40/0x40 [ 137.591564][ T5381] ? lock_chain_count+0x20/0x20 [ 137.596455][ T5381] ? syscall_enter_from_user_mode+0x21/0x80 [ 137.602387][ T5381] __x64_sys_unshare+0x34/0x40 [ 137.607202][ T5381] do_syscall_64+0x4c/0xa0 [ 137.611644][ T5381] ? clear_bhb_loop+0x60/0xb0 [ 137.616346][ T5381] ? clear_bhb_loop+0x60/0xb0 [ 137.621050][ T5381] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 137.626979][ T5381] RIP: 0033:0x7f665919e159 [ 137.631423][ T5381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.651057][ T5381] RSP: 002b:00007f665a158028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 137.659510][ T5381] RAX: ffffffffffffffda RBX: 00007f6659425fa0 RCX: 00007f665919e159 [ 137.667506][ T5381] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 137.675500][ T5381] RBP: 00007f665923506b R08: 0000000000000000 R09: 0000000000000000 [ 137.683513][ T5381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.691508][ T5381] R13: 00007f6659426038 R14: 00007f6659425fa0 R15: 00007ffd7ff3b238 [ 137.699543][ T5381] [ 137.876346][ T5386] device-mapper: ioctl: populate_table: no targets specified [ 137.905567][ T5391] loop1: detected capacity change from 0 to 2048 [ 137.979209][ T5391] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.323773][ T5399] loop0: detected capacity change from 0 to 128 [ 138.427993][ T5399] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 138.515173][ T5408] netlink: 24 bytes leftover after parsing attributes in process `syz.4.329'. [ 138.545425][ T5399] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 138.615034][ T5410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.328'. [ 138.746938][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 138.998772][ T5423] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 139.285043][ T5418] loop0: detected capacity change from 0 to 32768 [ 139.295898][ T5418] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 139.304324][ T5418] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 139.317878][ T5418] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 139.330050][ T5004] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 139.336992][ T5004] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 139.372936][ T5004] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 35ms [ 139.393704][ T5004] gfs2: fsid=syz:syz.0: jid=0: Done [ 139.400956][ T5418] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 139.554981][ T5418] gfs2: fsid=syz:syz.0: found 1 quota changes [ 139.611120][ T5435] loop3: detected capacity change from 0 to 2048 [ 139.694088][ T4413] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 139.705338][ T5435] netlink: 165 bytes leftover after parsing attributes in process `syz.3.340'. [ 139.801824][ T4273] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 139.801824][ T4273] inode = 11 2339 [ 139.801824][ T4273] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 413 [ 139.824936][ T4273] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 139.834883][ T4273] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4273 [syz-executor] gfs2_quota_sync+0x355/0x780 [ 139.848835][ T4273] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000001 s:0 p:0 [ 139.874872][ T4273] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 139.896159][ T4413] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 139.921583][ T4413] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 139.942403][ T4273] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 139.970251][ T4413] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 139.992733][ T4273] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 140.006685][ T4413] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 140.028242][ T4273] gfs2: fsid=syz:syz.0: File system withdrawn [ 140.044695][ T4273] CPU: 1 PID: 4273 Comm: syz-executor Not tainted syzkaller #0 [ 140.052329][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.062435][ T4273] Call Trace: [ 140.065767][ T4273] [ 140.068754][ T4273] dump_stack_lvl+0x188/0x24e [ 140.073486][ T4273] ? show_regs_print_info+0x12/0x12 [ 140.078728][ T4273] ? load_image+0x410/0x410 [ 140.083290][ T4273] ? kobject_uevent_env+0x364/0x890 [ 140.088554][ T4273] gfs2_withdraw+0xc69/0x1450 [ 140.093296][ T4273] ? gfs2_lm+0x240/0x240 [ 140.097811][ T4273] ? gfs2_consist_inode_i+0xf1/0x110 [ 140.103151][ T4273] gfs2_inode_refresh+0xb2d/0x1190 [ 140.108319][ T4273] ? gfs2_inode_metasync+0xf0/0xf0 [ 140.113484][ T4273] ? gfs2_glock_nq+0xcee/0x14d0 [ 140.118390][ T4273] gfs2_instantiate+0x15e/0x210 [ 140.123282][ T4273] gfs2_glock_wait+0x1d0/0x2a0 [ 140.128083][ T4273] do_sync+0x4af/0xbb0 [ 140.132189][ T4273] ? gfs2_quota_sync+0x355/0x780 [ 140.137158][ T4273] ? slot_put+0x1e0/0x1e0 [ 140.141515][ T4273] ? __lock_acquire+0x7c40/0x7c40 [ 140.146661][ T4273] ? do_raw_spin_lock+0x128/0x2f0 [ 140.151727][ T4273] ? gfs2_quota_sync+0x355/0x780 [ 140.156698][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 140.161932][ T4273] gfs2_quota_sync+0x355/0x780 [ 140.166744][ T4273] gfs2_sync_fs+0x48/0xb0 [ 140.171125][ T4273] sync_filesystem+0xe6/0x220 [ 140.175823][ T4273] generic_shutdown_super+0x6b/0x340 [ 140.181167][ T4273] kill_block_super+0x7c/0xe0 [ 140.185883][ T4273] deactivate_locked_super+0x93/0xf0 [ 140.191195][ T4273] cleanup_mnt+0x471/0x4f0 [ 140.195661][ T4273] task_work_run+0x1d0/0x260 [ 140.200287][ T4273] ? task_work_cancel+0x220/0x220 [ 140.205349][ T4273] ? exit_to_user_mode_loop+0x3b/0x110 [ 140.210859][ T4273] exit_to_user_mode_loop+0xe6/0x110 [ 140.216198][ T4273] exit_to_user_mode_prepare+0xee/0x180 [ 140.221777][ T4273] syscall_exit_to_user_mode+0x16/0x40 [ 140.227265][ T4273] do_syscall_64+0x58/0xa0 [ 140.231712][ T4273] ? clear_bhb_loop+0x60/0xb0 [ 140.236413][ T4273] ? clear_bhb_loop+0x60/0xb0 [ 140.241126][ T4273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 140.247056][ T4273] RIP: 0033:0x7f080339f397 [ 140.251492][ T4273] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 140.271126][ T4273] RSP: 002b:00007ffd6d977de8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 140.279578][ T4273] RAX: 0000000000000000 RBX: 00007f08034344bb RCX: 00007f080339f397 [ 140.287581][ T4273] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd6d977ea0 [ 140.295586][ T4273] RBP: 00007ffd6d977ea0 R08: 00007ffd6d978ea0 R09: 00000000ffffffff [ 140.303595][ T4273] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd6d978f30 [ 140.311587][ T4273] R13: 00007f08034344bb R14: 000000000002217d R15: 00007ffd6d978f70 [ 140.319598][ T4273] [ 140.347823][ T4413] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 140.381683][ T4413] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.402423][ T4413] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.419485][ T4413] usb 5-1: Product: syz [ 140.438997][ T4413] usb 5-1: Manufacturer: syz [ 140.443682][ T4413] usb 5-1: SerialNumber: syz [ 140.475665][ T5433] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 140.518571][ T5447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.346'. [ 140.554114][ T5447] device hsr_slave_0 left promiscuous mode [ 140.566390][ T5447] device hsr_slave_1 left promiscuous mode [ 140.674880][ T4273] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 140.699860][ T4273] CPU: 0 PID: 4273 Comm: syz-executor Not tainted syzkaller #0 [ 140.707509][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.717624][ T4273] Call Trace: [ 140.720955][ T4273] [ 140.723937][ T4273] dump_stack_lvl+0x188/0x24e [ 140.728677][ T4273] ? gfs2_assert_warn_i+0xbb/0x2c0 [ 140.733861][ T4273] ? show_regs_print_info+0x12/0x12 [ 140.739121][ T4273] ? load_image+0x410/0x410 [ 140.743683][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 140.748944][ T4273] gfs2_assert_warn_i+0x187/0x2c0 [ 140.754059][ T4273] gfs2_quota_cleanup+0x48c/0x670 [ 140.759158][ T4273] gfs2_put_super+0x22f/0x920 [ 140.763897][ T4273] ? gfs2_evict_inode+0x1290/0x1290 [ 140.769176][ T4273] generic_shutdown_super+0x130/0x340 [ 140.774608][ T4273] kill_block_super+0x7c/0xe0 [ 140.779341][ T4273] deactivate_locked_super+0x93/0xf0 [ 140.784690][ T4273] cleanup_mnt+0x471/0x4f0 [ 140.789198][ T4273] task_work_run+0x1d0/0x260 [ 140.792031][ T5433] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 140.793855][ T4273] ? task_work_cancel+0x220/0x220 [ 140.806110][ T4273] ? exit_to_user_mode_loop+0x3b/0x110 [ 140.811638][ T4273] exit_to_user_mode_loop+0xe6/0x110 [ 140.816991][ T4273] exit_to_user_mode_prepare+0xee/0x180 [ 140.822608][ T4273] syscall_exit_to_user_mode+0x16/0x40 [ 140.828135][ T4273] do_syscall_64+0x58/0xa0 [ 140.832601][ T4273] ? clear_bhb_loop+0x60/0xb0 [ 140.837412][ T4273] ? clear_bhb_loop+0x60/0xb0 [ 140.842149][ T4273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 140.848111][ T4273] RIP: 0033:0x7f080339f397 [ 140.852610][ T4273] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 140.872269][ T4273] RSP: 002b:00007ffd6d977de8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 140.880747][ T4273] RAX: 0000000000000000 RBX: 00007f08034344bb RCX: 00007f080339f397 [ 140.888861][ T4273] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd6d977ea0 [ 140.896893][ T4273] RBP: 00007ffd6d977ea0 R08: 00007ffd6d978ea0 R09: 00000000ffffffff [ 140.904915][ T4273] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd6d978f30 [ 140.912933][ T4273] R13: 00007f08034344bb R14: 000000000002217d R15: 00007ffd6d978f70 [ 140.920972][ T4273] [ 141.477819][ T5433] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 141.541213][ T5459] device veth0 entered promiscuous mode [ 141.559042][ T5457] device veth0 left promiscuous mode [ 141.706278][ T5464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.353'. [ 141.718066][ T4413] cdc_ncm 5-1:1.0: bind() failure [ 141.737994][ T4413] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 141.744628][ T5464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 141.754306][ T4413] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 141.774037][ T4413] usbtest: probe of 5-1:1.1 failed with error -71 [ 141.804242][ T5004] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 141.829459][ T4413] usb 5-1: USB disconnect, device number 5 [ 141.885917][ T5466] loop0: detected capacity change from 0 to 1024 [ 141.974949][ T5466] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 142.014004][ T5004] usb 2-1: Using ep0 maxpacket: 32 [ 142.021402][ T5004] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 142.032764][ T5004] usb 2-1: config 0 interface 0 has no altsetting 0 [ 142.039530][ T5004] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 142.048905][ T5004] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.062833][ T5004] usb 2-1: config 0 descriptor?? [ 142.234137][ T4414] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 142.309230][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 142.436221][ T4414] usb 4-1: unable to get BOS descriptor or descriptor too short [ 142.463125][ T4414] usb 4-1: not running at top speed; connect to a high speed hub [ 142.482859][ T4414] usb 4-1: config 5 has an invalid interface number: 29 but max is 0 [ 142.498801][ T5479] loop0: detected capacity change from 0 to 1024 [ 142.516353][ T4414] usb 4-1: config 5 has no interface number 0 [ 142.526503][ T4414] usb 4-1: config 5 interface 29 has no altsetting 0 [ 142.546242][ T4414] usb 4-1: New USB device found, idVendor=04e2, idProduct=1410, bcdDevice=78.22 [ 142.592641][ T4414] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.615509][ T5483] input: syz0 as /devices/virtual/input/input10 [ 142.622725][ T5483] input: failed to attach handler leds to device input10, error: -6 [ 142.642717][ T4414] usb 4-1: Product: syz [ 142.647932][ T4414] usb 4-1: Manufacturer: syz [ 142.652638][ T4414] usb 4-1: SerialNumber: syz [ 142.810388][ T4273] hfsplus: xattr search failed [ 142.838569][ T5004] corsair-cpro 0003:1B1C:0C10.0008: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 142.906623][ T4414] usb 4-1: USB disconnect, device number 8 [ 143.048517][ T5004] corsair-cpro: probe of 0003:1B1C:0C10.0008 failed with error -71 [ 143.146796][ T4273] bond0: (slave syz_tun): Releasing backup interface [ 143.285916][ T4414] usb 2-1: USB disconnect, device number 7 [ 143.344126][ T130] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 143.357703][ T33] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.474948][ T33] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.548284][ T130] usb 5-1: config index 0 descriptor too short (expected 1287, got 81) [ 143.566350][ T130] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 143.589874][ T130] usb 5-1: config 2 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 143.605410][ T33] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.622507][ T130] usb 5-1: config 2 interface 0 has no altsetting 0 [ 143.664767][ T130] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 143.683791][ T130] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.705613][ T130] usb 5-1: Product: syz [ 143.709873][ T130] usb 5-1: Manufacturer: syz [ 143.741744][ T130] usb 5-1: SerialNumber: syz [ 143.763765][ T33] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.793025][ T130] usb-storage 5-1:2.0: USB Mass Storage device detected [ 143.882061][ T130] usb-storage 5-1:2.0: Quirks match for vid 174c pid 55aa: 400000 [ 144.033525][ T130] usb 5-1: USB disconnect, device number 6 [ 144.190327][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 144.201516][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 144.211058][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 144.219816][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 144.231031][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 144.240414][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 144.364062][ T3654] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 144.534444][ T3654] usb 4-1: device descriptor read/64, error -71 [ 144.804121][ T3654] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 144.994647][ T3654] usb 4-1: device descriptor read/64, error -71 [ 145.059234][ T5514] loop4: detected capacity change from 0 to 32768 [ 145.074677][ T5514] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.371 (5514) [ 145.095938][ T5514] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 145.106273][ T5514] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 145.115114][ T5514] BTRFS info (device loop4): setting nodatacow, compression disabled [ 145.123321][ T5514] BTRFS info (device loop4): force clearing of disk cache [ 145.124669][ T3654] usb usb4-port1: attempt power cycle [ 145.130523][ T5514] BTRFS info (device loop4): enabling ssd optimizations [ 145.143004][ T5514] BTRFS info (device loop4): using spread ssd allocation scheme [ 145.150841][ T5514] BTRFS info (device loop4): turning on sync discard [ 145.157640][ T5514] BTRFS info (device loop4): turning off barriers [ 145.165238][ T5514] BTRFS info (device loop4): not using ssd optimizations [ 145.172329][ T5514] BTRFS info (device loop4): not using spread ssd allocation scheme [ 145.180454][ T5514] BTRFS info (device loop4): using free space tree [ 145.223376][ T5514] BTRFS info (device loop4): rebuilding free space tree [ 145.385488][ T5514] BTRFS info (device loop4): scrub: started on devid 1 [ 145.398955][ T5514] BTRFS info (device loop4): scrub: finished on devid 1 with status: 0 [ 145.581010][ T4272] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 145.603947][ T3654] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 145.655852][ T3654] usb 4-1: device descriptor read/8, error -71 [ 145.924209][ T3654] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 145.964849][ T3654] usb 4-1: device descriptor read/8, error -71 [ 146.091169][ T3654] usb usb4-port1: unable to enumerate USB device [ 146.294257][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 146.782289][ T5548] loop1: detected capacity change from 0 to 131072 [ 146.789856][ T5548] XFS: ikeep mount option is deprecated. [ 146.925657][ T5548] XFS (loop1): Mounting V5 Filesystem [ 146.946040][ T5499] chnl_net:caif_netlink_parms(): no params data found [ 147.088636][ T5548] XFS (loop1): Starting recovery (logdev: internal) [ 147.132565][ T5548] XFS (loop1): Ending recovery (logdev: internal) [ 147.165465][ T5568] loop3: detected capacity change from 0 to 512 [ 147.205748][ T5568] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 147.239209][ T5568] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 147.281062][ T5568] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 147.399007][ T5568] EXT4-fs (loop3): 1 truncate cleaned up [ 147.444513][ T5568] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 147.506805][ T5568] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.378: inode #4294967040: comm syz.3.378: iget: illegal inode # [ 147.558461][ T5568] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.378: error while reading EA inode 4294967040 err=-117 [ 147.597243][ T5568] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 147.617382][ T4275] XFS (loop1): Unmounting Filesystem [ 147.743818][ T5499] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.772915][ T5499] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.795800][ T5499] device bridge_slave_0 entered promiscuous mode [ 147.813821][ T5499] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.822808][ T5499] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.841854][ T5499] device bridge_slave_1 entered promiscuous mode [ 147.852305][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 148.212400][ T5598] loop3: detected capacity change from 0 to 2048 [ 148.364584][ T5499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.374023][ T4284] Bluetooth: hci1: command 0x041b tx timeout [ 148.862472][ T5499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.040192][ T5499] team0: Port device team_slave_0 added [ 149.381571][ T5499] team0: Port device team_slave_1 added [ 149.526372][ T5499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.602401][ T5499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.733714][ T5499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.795609][ T33] device hsr_slave_0 left promiscuous mode [ 149.855744][ T33] device hsr_slave_1 left promiscuous mode [ 149.889088][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.920836][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.961353][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.004060][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.023496][ T33] device bridge_slave_1 left promiscuous mode [ 150.032752][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.071123][ T33] device bridge_slave_0 left promiscuous mode [ 150.094722][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.170668][ T33] device veth1_macvtap left promiscuous mode [ 150.177916][ T33] device veth0_macvtap left promiscuous mode [ 150.185642][ T33] device veth1_vlan left promiscuous mode [ 150.202080][ T33] device veth0_vlan left promiscuous mode [ 150.453960][ T4284] Bluetooth: hci1: command 0x040f tx timeout [ 151.012462][ T33] team0 (unregistering): Port device team_slave_1 removed [ 151.069253][ T33] team0 (unregistering): Port device team_slave_0 removed [ 151.126291][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.518154][ T5647] loop4: detected capacity change from 0 to 32768 [ 151.609922][ T5647] XFS (loop4): Mounting V5 Filesystem [ 151.692726][ T5647] XFS (loop4): Ending clean mount [ 151.749589][ T33] bond0 (unregistering): Released all slaves [ 151.803341][ T4272] XFS (loop4): Unmounting Filesystem [ 151.928669][ T5499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.935978][ T5499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.969815][ T5499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.247994][ T5499] device hsr_slave_0 entered promiscuous mode [ 152.284550][ T5499] device hsr_slave_1 entered promiscuous mode [ 152.320193][ T5499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.364359][ T5499] Cannot create hsr debugfs directory [ 152.507865][ T5662] netlink: 20 bytes leftover after parsing attributes in process `syz.3.404'. [ 152.534140][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 153.092162][ T5499] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 153.143179][ T5499] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 153.200158][ T5499] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 153.253191][ T5499] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 153.646459][ T5499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.726665][ T5348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.748097][ T5348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.775249][ T5499] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.811266][ T5348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.883163][ T5348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.933551][ T5348] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.940825][ T5348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.988017][ T5348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.030113][ T5348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.049635][ T5348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.081679][ T5348] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.088955][ T5348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.147743][ T5348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.184829][ T5348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.205019][ T5348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.240333][ T5348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.279610][ T5348] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.300750][ T5348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.330133][ T5348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.351439][ T5685] loop1: detected capacity change from 0 to 32768 [ 154.355519][ T5348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.393736][ T5348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.421328][ T5499] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.446986][ T5685] XFS (loop1): Mounting V5 Filesystem [ 154.448012][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.494064][ T4414] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 154.512693][ T5348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.533463][ T5348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.635655][ T5685] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 154.684107][ T4414] usb 5-1: Using ep0 maxpacket: 8 [ 154.692477][ T4414] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 154.724225][ T4414] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.736015][ T5685] XFS (loop1): Starting recovery (logdev: internal) [ 154.764747][ T4414] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 154.822065][ T4414] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 154.847142][ T4414] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.890012][ T4414] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 154.932938][ T4414] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.971150][ T5685] XFS (loop1): Ending recovery (logdev: internal) [ 155.171846][ T4414] usb 5-1: GET_CAPABILITIES returned 0 [ 155.178843][ T4414] usbtmc 5-1:16.0: can't read capabilities [ 155.317938][ T4275] XFS (loop1): Unmounting Filesystem [ 155.340856][ T5340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.349605][ T5340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.447657][ T5499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.464426][ T3654] usb 5-1: USB disconnect, device number 7 [ 156.031806][ T5751] FAULT_INJECTION: forcing a failure. [ 156.031806][ T5751] name failslab, interval 1, probability 0, space 0, times 0 [ 156.045270][ T5751] CPU: 1 PID: 5751 Comm: syz.1.421 Not tainted syzkaller #0 [ 156.052621][ T5751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.062738][ T5751] Call Trace: [ 156.066064][ T5751] [ 156.069039][ T5751] dump_stack_lvl+0x188/0x24e [ 156.073776][ T5751] ? show_regs_print_info+0x12/0x12 [ 156.079028][ T5751] ? load_image+0x410/0x410 [ 156.083599][ T5751] ? mark_lock+0x94/0x320 [ 156.088045][ T5751] ? __lock_acquire+0x1465/0x7c40 [ 156.093144][ T5751] should_fail_ex+0x390/0x4c0 [ 156.097901][ T5751] should_failslab+0x5/0x20 [ 156.102459][ T5751] slab_pre_alloc_hook+0x59/0x300 [ 156.107545][ T5751] ? verify_lock_unused+0x140/0x140 [ 156.112802][ T5751] kmem_cache_alloc+0x56/0x2f0 [ 156.117603][ T5751] ? radix_tree_node_alloc+0x7e/0x3a0 [ 156.123018][ T5751] radix_tree_node_alloc+0x7e/0x3a0 [ 156.128287][ T5751] idr_get_free+0x28b/0xa10 [ 156.132873][ T5751] idr_alloc_cyclic+0x286/0x610 [ 156.137759][ T5751] ? idr_alloc+0x2e0/0x2e0 [ 156.142207][ T5751] ? do_raw_spin_lock+0x128/0x2f0 [ 156.147260][ T5751] ? __radix_tree_preload+0x82/0x880 [ 156.152616][ T5751] ? bpf_map_alloc_id+0x21/0xd0 [ 156.157505][ T5751] bpf_map_alloc_id+0x40/0xd0 [ 156.162234][ T5751] map_create+0xac9/0xff0 [ 156.166595][ T5751] ? security_bpf+0x7a/0xa0 [ 156.171140][ T5751] __sys_bpf+0x38b/0x780 [ 156.175433][ T5751] ? bpf_link_show_fdinfo+0x380/0x380 [ 156.180855][ T5751] ? lock_chain_count+0x20/0x20 [ 156.185771][ T5751] __x64_sys_bpf+0x78/0x90 [ 156.190224][ T5751] do_syscall_64+0x4c/0xa0 [ 156.194673][ T5751] ? clear_bhb_loop+0x60/0xb0 [ 156.199391][ T5751] ? clear_bhb_loop+0x60/0xb0 [ 156.204101][ T5751] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.210038][ T5751] RIP: 0033:0x7fa3b219e159 [ 156.214490][ T5751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.234215][ T5751] RSP: 002b:00007fa3b30c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 156.242662][ T5751] RAX: ffffffffffffffda RBX: 00007fa3b2425fa0 RCX: 00007fa3b219e159 [ 156.250665][ T5751] RDX: 0000000000000048 RSI: 00002000000009c0 RDI: 0000000000000000 [ 156.258668][ T5751] RBP: 00007fa3b223506b R08: 0000000000000000 R09: 0000000000000000 [ 156.266666][ T5751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.274668][ T5751] R13: 00007fa3b2426038 R14: 00007fa3b2425fa0 R15: 00007ffd329ad3a8 [ 156.282702][ T5751] [ 156.569809][ T5757] loop4: detected capacity change from 0 to 1024 [ 156.691284][ T5757] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 157.053733][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 157.065408][ T5771] netlink: 'syz.1.429': attribute type 22 has an invalid length. [ 157.134111][ T5771] netlink: 16 bytes leftover after parsing attributes in process `syz.1.429'. [ 157.161238][ T5772] netlink: 'syz.1.429': attribute type 22 has an invalid length. [ 157.194194][ T5772] netlink: 16 bytes leftover after parsing attributes in process `syz.1.429'. [ 157.265331][ T5340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.286208][ T5340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.384884][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.404919][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.453625][ T5776] loop4: detected capacity change from 0 to 1024 [ 157.458258][ T5499] device veth0_vlan entered promiscuous mode [ 157.479012][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.505765][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.559580][ T5499] device veth1_vlan entered promiscuous mode [ 157.662563][ T5340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 157.679338][ T5340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 157.735220][ T5340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.756070][ T5340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.817814][ T5499] device veth0_macvtap entered promiscuous mode [ 157.839839][ T5499] device veth1_macvtap entered promiscuous mode [ 157.931515][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.965319][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.004056][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.024176][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.044204][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.065150][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.107322][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.133902][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.195870][ T5499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.213487][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 158.232394][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 158.247802][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.285052][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.302740][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.323680][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.364341][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.395293][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.433896][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.453977][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.468204][ T5801] loop1: detected capacity change from 0 to 256 [ 158.503576][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.530867][ T5801] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x241b98d9, utbl_chksum : 0xe619d30d) [ 158.550616][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.622423][ T5499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.637277][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.652232][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.720035][ T5499] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.745902][ T5499] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.775993][ T5499] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.807535][ T5499] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.112523][ T5326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.146773][ T5326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.190980][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 159.352084][ T5817] loop4: detected capacity change from 0 to 4096 [ 159.376377][ T5342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.426943][ T5342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.456512][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 159.786332][ T5825] process 'syz.5.367' launched './file0' with NULL argv: empty string added [ 159.834973][ T5825] Invalid argument reading file caps for ./file0 [ 160.046383][ T5828] loop3: detected capacity change from 0 to 512 [ 160.223350][ T5835] tipc: Enabled bearer , priority 10 [ 160.588350][ T5840] loop4: detected capacity change from 0 to 4096 [ 161.184089][ T3654] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 161.202822][ T4272] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 161.215635][ T4272] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 161.374035][ T3654] usb 6-1: Using ep0 maxpacket: 32 [ 161.387629][ T3654] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 161.442435][ T3654] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 161.504213][ T3654] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 161.512475][ T3654] usb 6-1: Product: syz [ 161.538175][ T3654] usb 6-1: Manufacturer: syz [ 161.542859][ T3654] usb 6-1: SerialNumber: syz [ 161.581442][ T3654] usb 6-1: config 0 descriptor?? [ 161.613339][ T5858] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 161.641579][ T3654] hub 6-1:0.0: bad descriptor, ignoring hub [ 161.656302][ T3654] hub: probe of 6-1:0.0 failed with error -5 [ 161.669210][ T5879] netlink: 27 bytes leftover after parsing attributes in process `syz.3.461'. [ 161.674380][ T5558] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 161.879219][ T5558] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.921286][ T5558] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.974982][ T5558] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 162.034177][ T5558] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.043397][ T5558] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.107104][ T5558] usb 5-1: config 0 descriptor?? [ 162.527122][ T5558] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 162.725870][ T5558] plantronics 0003:047F:FFFF.0009: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 162.774922][ T5558] usb 5-1: USB disconnect, device number 8 [ 163.479721][ T5891] syz.2.464 (5891) used greatest stack depth: 18176 bytes left [ 163.836784][ T5978] netlink: 198388 bytes leftover after parsing attributes in process `syz.1.467'. [ 164.594976][ T5952] fido_id[5952]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 164.724992][ T5989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.469'. [ 164.758264][ T5991] loop1: detected capacity change from 0 to 1024 [ 164.803435][ T5991] EXT4-fs: Ignoring removed nomblk_io_submit option [ 164.931445][ T5991] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 164.975053][ T5991] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.120724][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 165.341148][ T6007] loop1: detected capacity change from 0 to 128 [ 165.494062][ T6007] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 165.554502][ T6007] hpfs: filesystem error: improperly stopped [ 165.560598][ T6007] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 165.604370][ T6007] hpfs: You really don't want any checks? You are crazy... [ 165.612924][ T6007] hpfs: hpfs_map_sector(): read error [ 165.645051][ T6007] hpfs: code page support is disabled [ 165.664160][ T6007] hpfs: hpfs_map_4sectors(): unaligned read [ 165.670644][ T6007] hpfs: hpfs_map_4sectors(): unaligned read [ 165.682376][ T6009] loop3: detected capacity change from 0 to 8192 [ 165.713943][ T6007] hpfs: filesystem error: unable to find root dir [ 166.151075][ T6020] netlink: 'syz.2.479': attribute type 3 has an invalid length. [ 166.211864][ T6020] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.479'. [ 166.303450][ T6023] netlink: 'syz.2.479': attribute type 3 has an invalid length. [ 166.383728][ T6023] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.479'. [ 166.645259][ T4498] usb 6-1: USB disconnect, device number 2 [ 166.988535][ T6040] loop3: detected capacity change from 0 to 2048 [ 167.020089][ T6021] loop1: detected capacity change from 0 to 32768 [ 167.034607][ T6041] loop5: detected capacity change from 0 to 2048 [ 167.042326][ T6041] EXT4-fs: Ignoring removed mblk_io_submit option [ 167.052592][ T6021] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop1 scanned by syz.1.478 (6021) [ 167.120968][ T6021] BTRFS info (device loop1): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 167.134487][ T6040] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 167.153044][ T6021] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 167.163504][ T6021] BTRFS info (device loop1): using free space tree [ 167.221749][ T6041] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 167.496387][ T5499] EXT4-fs (loop5): unmounting filesystem. [ 167.695287][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 167.810681][ T6021] BTRFS info (device loop1): enabling ssd optimizations [ 168.150707][ T4275] BTRFS info (device loop1): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 168.193436][ T6086] netlink: 64 bytes leftover after parsing attributes in process `syz.3.491'. [ 168.247818][ T6064] loop4: detected capacity change from 0 to 32768 [ 168.586654][ T6064] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 168.626912][ T6099] loop5: detected capacity change from 0 to 8 [ 168.645977][ T6099] SQUASHFS error: zlib decompression failed, data probably corrupt [ 168.663963][ T6099] SQUASHFS error: Failed to read block 0x9b: -5 [ 168.664221][ T6064] XFS (loop4): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 168.670277][ T6099] SQUASHFS error: Unable to read metadata cache entry [99] [ 168.726352][ T6099] SQUASHFS error: Unable to read inode 0x127 [ 168.763710][ T6102] netlink: 104 bytes leftover after parsing attributes in process `syz.1.492'. [ 168.798823][ T6103] netlink: 24 bytes leftover after parsing attributes in process `syz.2.494'. [ 168.873978][ T6103] bond0: ARP target 1.4.0.0 is already present [ 168.880240][ T6103] bond0: option arp_ip_target: invalid value (1025) [ 168.908617][ T4401] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 169.150821][ T4272] XFS (loop4): Unmounting Filesystem [ 169.733116][ T6123] loop5: detected capacity change from 0 to 128 [ 169.771041][ T6123] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 169.873987][ T5559] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 170.010024][ T6128] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 170.085473][ T5966] bond0: (slave bond_slave_0): interface is now down [ 170.093031][ T5966] bond0: (slave bond_slave_1): interface is now down [ 170.102418][ T5559] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 170.127575][ T5559] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 170.166652][ T5966] bond0: now running without any active interface! [ 170.176284][ T6133] FAULT_INJECTION: forcing a failure. [ 170.176284][ T6133] name failslab, interval 1, probability 0, space 0, times 0 [ 170.185154][ T5559] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 170.214145][ T6133] CPU: 1 PID: 6133 Comm: syz.4.498 Not tainted syzkaller #0 [ 170.221530][ T6133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.231727][ T6133] Call Trace: [ 170.235055][ T6133] [ 170.238023][ T6133] dump_stack_lvl+0x188/0x24e [ 170.242766][ T6133] ? show_regs_print_info+0x12/0x12 [ 170.248029][ T6133] ? load_image+0x410/0x410 [ 170.252604][ T6133] ? __lock_acquire+0x7c40/0x7c40 [ 170.257691][ T6133] should_fail_ex+0x390/0x4c0 [ 170.262436][ T6133] should_failslab+0x5/0x20 [ 170.266999][ T6133] slab_pre_alloc_hook+0x59/0x300 [ 170.272088][ T6133] ? ceph_alloc_options+0x4a/0x1c0 [ 170.277262][ T6133] __kmem_cache_alloc_node+0x4f/0x270 [ 170.282694][ T6133] ? ceph_alloc_options+0x4a/0x1c0 [ 170.287909][ T6133] kmalloc_trace+0x26/0xe0 [ 170.292356][ T6133] ceph_alloc_options+0x4a/0x1c0 [ 170.297335][ T6133] ceph_init_fs_context+0x64/0x4a0 [ 170.302473][ T6133] ? destroy_caches+0x80/0x80 [ 170.307178][ T6133] alloc_fs_context+0x628/0x7d0 [ 170.312072][ T6133] __se_sys_fsopen+0xa0/0x2c0 [ 170.316782][ T6133] do_syscall_64+0x4c/0xa0 [ 170.321234][ T6133] ? clear_bhb_loop+0x60/0xb0 [ 170.325939][ T6133] ? clear_bhb_loop+0x60/0xb0 [ 170.330650][ T6133] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.336580][ T6133] RIP: 0033:0x7f903719e159 [ 170.341023][ T6133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.360670][ T6133] RSP: 002b:00007f903813f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 170.369211][ T6133] RAX: ffffffffffffffda RBX: 00007f9037425fa0 RCX: 00007f903719e159 [ 170.377214][ T6133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 170.385211][ T6133] RBP: 00007f903723506b R08: 0000000000000000 R09: 0000000000000000 [ 170.393218][ T6133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.401215][ T6133] R13: 00007f9037426038 R14: 00007f9037425fa0 R15: 00007ffdadd98518 [ 170.409223][ T6133] [ 170.451637][ T5559] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.036165][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 171.133999][ T5558] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 171.264057][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 171.274456][ T7] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 171.291454][ T7] usb 3-1: config 1 has no interface number 0 [ 171.318834][ T7] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 171.329457][ T5558] usb 2-1: config 1 has an invalid interface number: 62 but max is 0 [ 171.348874][ T5558] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.353977][ T7] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 171.396256][ T7] usb 3-1: config 1 interface 105 has no altsetting 0 [ 171.400555][ T5558] usb 2-1: config 1 has no interface number 0 [ 171.419620][ T5558] usb 2-1: config 1 interface 62 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 171.454524][ T7] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 171.463680][ T7] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 171.502374][ T5558] usb 2-1: config 1 interface 62 has no altsetting 0 [ 171.504467][ T7] usb 3-1: Product: syz [ 171.513760][ T7] usb 3-1: Manufacturer: syz [ 171.528952][ T7] usb 3-1: SerialNumber: syz [ 171.534162][ T5558] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 171.549731][ T5559] gud 4-1:1.0: USB-1: Failed to add properties (ret=-71) [ 171.559928][ T6141] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 171.568847][ T4501] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 171.577417][ T5559] gud 4-1:1.0: Failed to get connectors (error=-71) [ 171.586172][ T5558] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 171.604204][ T6141] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 171.611606][ T5559] gud: probe of 4-1:1.0 failed with error -71 [ 171.618155][ T5558] usb 2-1: SerialNumber: syz [ 171.638128][ T4501] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 171.717133][ T5559] usb 4-1: USB disconnect, device number 13 [ 171.880800][ T5558] usb 2-1: USB disconnect, device number 8 [ 172.127052][ T6141] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 172.144162][ T6141] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 172.665930][ T6163] Bluetooth: MGMT ver 1.22 [ 172.679436][ T27] audit: type=1800 audit(1790222994.182:9): pid=6123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.502" name="file1" dev="loop5" ino=94 res=0 errno=0 [ 172.698810][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.801977][ T7] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 172.836785][ T7] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 172.986805][ T7] aqc111 3-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, e2:da:27:c1:7f:3d [ 173.040297][ T7] usb 3-1: USB disconnect, device number 5 [ 173.064978][ T7] aqc111 3-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 173.230188][ T7] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 173.253825][ T7] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 173.274804][ T5559] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 173.314273][ T7] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 173.456117][ T5559] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 173.484764][ T5559] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.533963][ T5559] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.572493][ T5559] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 173.612633][ T5559] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 173.639166][ T5559] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 173.658785][ T5559] usb 2-1: Manufacturer: syz [ 173.675448][ T5559] usb 2-1: config 0 descriptor?? [ 173.714738][ T6186] FAULT_INJECTION: forcing a failure. [ 173.714738][ T6186] name failslab, interval 1, probability 0, space 0, times 0 [ 173.750130][ T6186] CPU: 1 PID: 6186 Comm: syz.2.522 Not tainted syzkaller #0 [ 173.757608][ T6186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.767719][ T6186] Call Trace: [ 173.771038][ T6186] [ 173.774012][ T6186] dump_stack_lvl+0x188/0x24e [ 173.778778][ T6186] ? show_regs_print_info+0x12/0x12 [ 173.784025][ T6186] ? load_image+0x410/0x410 [ 173.788593][ T6186] ? __lock_acquire+0x7c40/0x7c40 [ 173.793686][ T6186] should_fail_ex+0x390/0x4c0 [ 173.798433][ T6186] should_failslab+0x5/0x20 [ 173.802988][ T6186] slab_pre_alloc_hook+0x59/0x300 [ 173.808062][ T6186] ? __might_fault+0xa6/0x120 [ 173.812890][ T6186] kmem_cache_alloc+0x56/0x2f0 [ 173.817696][ T6186] ? ioctx_alloc+0x104/0x7b0 [ 173.822377][ T6186] ioctx_alloc+0x104/0x7b0 [ 173.826852][ T6186] ? __might_fault+0xc2/0x120 [ 173.831579][ T6186] ? __might_fault+0xa6/0x120 [ 173.836309][ T6186] __se_sys_io_setup+0x7b/0x190 [ 173.841222][ T6186] do_syscall_64+0x4c/0xa0 [ 173.845697][ T6186] ? clear_bhb_loop+0x60/0xb0 [ 173.850427][ T6186] ? clear_bhb_loop+0x60/0xb0 [ 173.855158][ T6186] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.861118][ T6186] RIP: 0033:0x7f8c0b59e159 [ 173.865626][ T6186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.885286][ T6186] RSP: 002b:00007f8c097f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 173.893810][ T6186] RAX: ffffffffffffffda RBX: 00007f8c0b825fa0 RCX: 00007f8c0b59e159 [ 173.901838][ T6186] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 173.909862][ T6186] RBP: 00007f8c0b63506b R08: 0000000000000000 R09: 0000000000000000 [ 173.917890][ T6186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.925918][ T6186] R13: 00007f8c0b826038 R14: 00007f8c0b825fa0 R15: 00007ffefe316c98 [ 173.933953][ T6186] [ 174.023983][ T5558] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 174.166245][ T5559] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 174.184546][ T5559] appleir 0003:05AC:8243.000B: No inputs registered, leaving [ 174.208081][ T5559] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 174.219521][ T5558] usb 5-1: Using ep0 maxpacket: 32 [ 174.227176][ T5558] usb 5-1: config 0 has no interfaces? [ 174.253978][ T5558] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 174.280340][ T5558] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.321067][ T5558] usb 5-1: config 0 descriptor?? [ 174.446310][ T4501] usb 2-1: USB disconnect, device number 9 [ 174.463636][ T6193] fido_id[6193]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 174.551349][ T6181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.586992][ T6181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.619883][ T5558] usb 5-1: USB disconnect, device number 9 [ 174.750844][ T6201] loop5: detected capacity change from 0 to 7 [ 174.778642][ T6201] Dev loop5: unable to read RDB block 7 [ 174.787982][ T6201] loop5: unable to read partition table [ 174.797097][ T6201] loop5: partition table beyond EOD, truncated [ 174.803601][ T6201] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 175.203976][ T5558] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 175.409418][ T5558] usb 5-1: Using ep0 maxpacket: 16 [ 175.421351][ T5558] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice= 0.00 [ 175.442362][ T6218] loop1: detected capacity change from 0 to 512 [ 175.444705][ T5558] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.457982][ T5558] usb 5-1: Product: syz [ 175.462316][ T5558] usb 5-1: Manufacturer: syz [ 175.467558][ T5558] usb 5-1: SerialNumber: syz [ 175.539488][ T6218] EXT4-fs (loop1): orphan cleanup on readonly fs [ 175.630412][ T6218] EXT4-fs (loop1): 1 orphan inode deleted [ 175.674013][ T6218] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 175.760348][ T5558] usb 5-1: USB disconnect, device number 10 [ 175.860990][ T6218] EXT4-fs (loop1): shut down requested (2) [ 175.940555][ T6218] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 175.947808][ T6218] ext4 filesystem being remounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.977747][ T4549] udevd[4549]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.113280][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 177.177125][ T6261] loop4: detected capacity change from 0 to 512 [ 177.254670][ T6261] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 177.342906][ T6261] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 177.431538][ T6261] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.552: bg 0: block 248: padding at end of block bitmap is not set [ 177.544833][ T6261] Quota error (device loop4): write_blk: dquota write failed [ 177.553543][ T6261] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 177.564159][ T6261] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.552: Failed to acquire dquot type 1 [ 177.586070][ T6261] EXT4-fs (loop4): 1 truncate cleaned up [ 177.591951][ T6261] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 177.623313][ T6275] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 177.654588][ T7] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 177.681686][ T27] audit: type=1800 audit(1790222999.182:10): pid=6277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.557" name="scan_secs" dev="configfs" ino=39953 res=0 errno=0 [ 177.769929][ T5558] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 177.818830][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 177.937821][ T4501] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 177.969906][ T5558] usb 2-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 177.998240][ T5558] usb 2-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 178.036936][ T5558] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 178.057480][ T5558] usb 2-1: Product: syz [ 178.071984][ T5558] usb 2-1: Manufacturer: syz [ 178.110728][ T5558] hub 2-1:1.0: bad descriptor, ignoring hub [ 178.131920][ T5558] hub: probe of 2-1:1.0 failed with error -5 [ 178.170457][ T5558] usb_debug 2-1:1.0: debug converter detected [ 178.194457][ T5558] usb 2-1: debug converter now attached to ttyUSB0 [ 178.494457][ T5559] usb 2-1: USB disconnect, device number 10 [ 178.515750][ T5559] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 178.557007][ T5559] usb_debug 2-1:1.0: device disconnected [ 178.699047][ T6300] loop4: detected capacity change from 0 to 128 [ 178.771424][ T6300] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 178.804072][ T6300] hpfs: filesystem error: improperly stopped [ 178.811456][ T6300] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 178.828221][ T6300] hpfs: You really don't want any checks? You are crazy... [ 178.843812][ T6300] hpfs: hpfs_map_sector(): read error [ 178.859660][ T6300] hpfs: code page support is disabled [ 178.875198][ T6300] hpfs: hpfs_map_4sectors(): unaligned read [ 178.881261][ T6300] hpfs: hpfs_map_4sectors(): unaligned read [ 178.904033][ T6300] hpfs: filesystem error: unable to find root dir [ 179.014003][ T4501] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 179.209647][ T4501] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.241487][ T4501] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.272293][ T4501] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 179.301603][ T4501] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.361835][ T4501] usb 6-1: config 0 descriptor?? [ 179.703673][ T6324] overlayfs: conflicting lowerdir path [ 179.741454][ T5559] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 179.749517][ T6328] loop1: detected capacity change from 0 to 128 [ 179.754638][ T5558] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 179.769246][ T6328] EXT4-fs (loop1): Test dummy encryption mode enabled [ 179.781314][ T4501] arvo 0003:1E7D:30D4.000D: item fetching failed at offset 5/7 [ 179.790067][ T6329] overlayfs: cleanup of 'bus/work' failed (-13) [ 179.790240][ T5559] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 179.798391][ T4501] arvo 0003:1E7D:30D4.000D: parse failed [ 179.813269][ T6329] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 179.824001][ T4501] arvo: probe of 0003:1E7D:30D4.000D failed with error -22 [ 179.834767][ T6328] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 179.857248][ T6328] ext4 filesystem being mounted at /124/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 179.964195][ T5558] usb 4-1: Using ep0 maxpacket: 8 [ 179.971641][ T5558] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 179.998960][ T4501] usb 6-1: USB disconnect, device number 3 [ 180.045848][ T5558] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.102428][ T5558] pvrusb2: Hardware description: Terratec Grabster AV400 [ 180.120467][ T5558] pvrusb2: ********** [ 180.130594][ T5558] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 180.159559][ T5558] pvrusb2: Important functionality might not be entirely working. [ 180.173408][ T5558] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 180.194617][ T5558] pvrusb2: ********** [ 180.302199][ T2312] pvrusb2: Invalid write control endpoint [ 180.492822][ T2312] pvrusb2: Invalid write control endpoint [ 180.532705][ T2312] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 180.569263][ T2312] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 180.596788][ T2312] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 180.630703][ T2312] pvrusb2: Device being rendered inoperable [ 180.655186][ T6319] pvrusb2: Attempted to execute control transfer when device not ok [ 180.689807][ T2312] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 180.703510][ T7] usb 4-1: USB disconnect, device number 14 [ 180.720181][ T2312] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 180.745030][ T6346] 9pnet: p9_errstr2errno: server reported unknown error 0xffffffffffffffff [ 180.787806][ T2312] pvrusb2: Attached sub-driver cx25840 [ 180.810875][ T2312] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 180.836310][ T2312] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 181.096588][ T6328] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 181.191084][ T6328] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 181.429392][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 181.693988][ T4501] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 181.894059][ T4501] usb 6-1: Using ep0 maxpacket: 32 [ 181.902886][ T4501] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.947856][ T4501] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.979030][ T4501] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 182.025529][ T4501] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.073249][ T4501] usb 6-1: config 0 descriptor?? [ 182.097845][ T4501] hub 6-1:0.0: USB hub found [ 182.303130][ T4501] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 182.686665][ T5558] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 182.709451][ T4501] hid-generic 0003:046D:C31C.000E: unknown main item tag 0x0 [ 182.789105][ T4501] hid-generic 0003:046D:C31C.000E: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 182.919714][ T6397] loop1: detected capacity change from 0 to 512 [ 183.029581][ T6397] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 183.054156][ T6397] System zones: 0-2, 18-18, 34-35 [ 183.141446][ T6397] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 183.252695][ T6397] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.294449][ T7] usb 6-1: USB disconnect, device number 4 [ 183.411613][ T6408] fido_id[6408]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 183.432174][ T5558] usb 2-1: unable to get BOS descriptor or descriptor too short [ 183.470662][ T5558] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 183.495493][ T5558] usb 2-1: can't read configurations, error -71 [ 183.577002][ T6419] Set syz1 is full, maxelem 2 reached [ 183.908992][ T27] audit: type=1800 audit(1790223005.412:11): pid=6428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.604" name="size" dev="configfs" ino=40263 res=0 errno=0 [ 183.964283][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 184.057621][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 184.313744][ T6444] loop5: detected capacity change from 0 to 2048 [ 184.384103][ T4497] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 184.584024][ T4497] usb 4-1: Using ep0 maxpacket: 16 [ 184.591973][ T4497] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.651829][ T4497] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.695584][ T4497] usb 4-1: config 0 interface 0 has no altsetting 0 [ 184.720542][ T4497] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 184.754407][ T4497] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.814883][ T4497] usb 4-1: config 0 descriptor?? [ 185.094925][ T6464] loop5: detected capacity change from 0 to 512 [ 185.171452][ T6465] loop4: detected capacity change from 0 to 2048 [ 185.201359][ T6464] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 185.214469][ T6464] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.232850][ T4497] mcp2221 0003:04D8:00DD.000F: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 185.330560][ T6465] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 185.451931][ T27] audit: type=1800 audit(1790223006.952:12): pid=6465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.616" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 185.504318][ T4497] usb 4-1: USB disconnect, device number 15 [ 185.574525][ T5499] EXT4-fs (loop5): unmounting filesystem. [ 185.843165][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 186.111486][ T6490] netlink: 'syz.5.625': attribute type 4 has an invalid length. [ 186.179122][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.5.625'. [ 186.473403][ T6504] loop1: detected capacity change from 0 to 128 [ 186.676964][ T6504] syz.1.630: attempt to access beyond end of device [ 186.676964][ T6504] loop1: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 186.769113][ T4497] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 186.975435][ T4497] usb 3-1: config index 0 descriptor too short (expected 64906, got 45) [ 186.996456][ T4497] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 187.016896][ T4497] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.043952][ T4497] usb 3-1: Product: syz [ 187.059772][ T4497] usb 3-1: Manufacturer: syz [ 187.083630][ T4497] usb 3-1: SerialNumber: syz [ 187.401642][ T4497] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 187.481868][ T4497] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 187.530748][ T4497] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 187.558099][ T4497] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 187.611039][ T4497] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 187.675243][ T4497] lan78xx: probe of 3-1:1.0 failed with error -71 [ 187.745390][ T4497] usb 3-1: USB disconnect, device number 6 [ 187.932733][ T6537] loop5: detected capacity change from 0 to 512 [ 187.963359][ T6537] ext4: Unknown parameter 'obj_user' [ 188.146707][ T6542] Invalid ELF header len 8 [ 188.334159][ T4501] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 188.574460][ T4501] usb 6-1: not running at top speed; connect to a high speed hub [ 188.598228][ T4501] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 188.633894][ T4501] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.681610][ T4501] usb 6-1: Product: syz [ 188.697174][ T4501] usb 6-1: Manufacturer: syz [ 188.711161][ T4501] usb 6-1: SerialNumber: syz [ 188.732200][ T4501] keyspan 6-1:1.0: Keyspan 4 port adapter converter detected [ 188.743785][ T6530] loop3: detected capacity change from 0 to 40427 [ 188.809020][ T6557] loop4: detected capacity change from 0 to 24 [ 188.816141][ T4501] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 188.838449][ T6530] F2FS-fs (loop3): invalid crc value [ 188.854872][ T4501] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 188.895925][ T6557] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 188.914820][ T4501] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 188.933242][ T6530] F2FS-fs (loop3): Found nat_bits in checkpoint [ 188.943293][ C0] usb 6-1: malformed indat packet [ 188.948885][ C0] usb 6-1: malformed indat packet [ 188.954739][ C0] usb 6-1: malformed indat packet [ 188.984981][ T4501] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 189.090578][ T6557] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 189.179396][ T6530] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 189.270315][ T6530] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 189.629822][ T4283] syz-executor: attempt to access beyond end of device [ 189.629822][ T4283] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 190.241541][ T6587] FAULT_INJECTION: forcing a failure. [ 190.241541][ T6587] name failslab, interval 1, probability 0, space 0, times 0 [ 190.326464][ T6587] CPU: 1 PID: 6587 Comm: syz.4.656 Not tainted syzkaller #0 [ 190.333853][ T6587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 190.343956][ T6587] Call Trace: [ 190.347281][ T6587] [ 190.350259][ T6587] dump_stack_lvl+0x188/0x24e [ 190.354994][ T6587] ? show_regs_print_info+0x12/0x12 [ 190.360250][ T6587] ? load_image+0x410/0x410 [ 190.364849][ T6587] ? __might_sleep+0xd0/0xd0 [ 190.369493][ T6587] ? __lock_acquire+0x7c40/0x7c40 [ 190.374581][ T6587] should_fail_ex+0x390/0x4c0 [ 190.379328][ T6587] should_failslab+0x5/0x20 [ 190.383911][ T6587] slab_pre_alloc_hook+0x59/0x300 [ 190.388992][ T6587] kmem_cache_alloc+0x56/0x2f0 [ 190.393802][ T6587] ? new_userfaultfd+0x83/0x310 [ 190.398704][ T6587] new_userfaultfd+0x83/0x310 [ 190.403452][ T6587] ? __x64_sys_userfaultfd+0x5c/0x90 [ 190.408797][ T6587] __x64_sys_userfaultfd+0x7d/0x90 [ 190.413952][ T6587] do_syscall_64+0x4c/0xa0 [ 190.418414][ T6587] ? clear_bhb_loop+0x60/0xb0 [ 190.423136][ T6587] ? clear_bhb_loop+0x60/0xb0 [ 190.427864][ T6587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.433819][ T6587] RIP: 0033:0x7f903719e159 [ 190.438283][ T6587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.458045][ T6587] RSP: 002b:00007f903813f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 190.466601][ T6587] RAX: ffffffffffffffda RBX: 00007f9037425fa0 RCX: 00007f903719e159 [ 190.474622][ T6587] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 190.482642][ T6587] RBP: 00007f903723506b R08: 0000000000000000 R09: 0000000000000000 [ 190.490663][ T6587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.498679][ T6587] R13: 00007f9037426038 R14: 00007f9037425fa0 R15: 00007ffdadd98518 [ 190.506722][ T6587] [ 190.588086][ T5558] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 190.781871][ T5558] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.812583][ T5558] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 190.853449][ T5558] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 190.899077][ T5558] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 190.952105][ T5558] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 190.996354][ T5558] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.037490][ T6583] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 191.054919][ T6583] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 191.058041][ T6093] usb 6-1: USB disconnect, device number 5 [ 191.077554][ T5558] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 191.125823][ T6093] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 191.126646][ T5558] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 191.165553][ T6093] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 191.205936][ T5558] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 191.211038][ T6093] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 191.241179][ T5558] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB4 [ 191.261388][ T6093] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 191.297221][ T5558] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 191.311929][ T6093] keyspan 6-1:1.0: device disconnected [ 191.324114][ T5558] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 191.342876][ T5558] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB5 [ 191.406298][ T5558] usb 2-1: USB disconnect, device number 13 [ 191.447735][ T5558] keyspan_2 ttyUSB4: Keyspan 2 port adapter converter now disconnected from ttyUSB4 [ 191.490479][ T5558] keyspan_2 ttyUSB5: Keyspan 2 port adapter converter now disconnected from ttyUSB5 [ 191.519541][ T5558] keyspan 2-1:1.0: device disconnected [ 192.083663][ T6619] loop3: detected capacity change from 0 to 2048 [ 192.180306][ T6626] loop1: detected capacity change from 0 to 1024 [ 192.252586][ T6619] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 192.743634][ T5966] hfsplus: b-tree write err: -5, ino 3 [ 192.762700][ T6641] loop5: detected capacity change from 0 to 2048 [ 192.811363][ T6641] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 192.888666][ T6641] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.045205][ T27] audit: type=1800 audit(1790223014.552:13): pid=6636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.664" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 193.289959][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 193.444173][ T6659] block nbd2: Device being setup by another task [ 194.057815][ T4284] block nbd2: Receive control failed (result -32) [ 194.088332][ T6654] block nbd2: shutting down sockets [ 194.206898][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.213317][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.408865][ T6680] sctp: [Deprecated]: syz.4.680 (pid 6680) Use of int in maxseg socket option. [ 194.408865][ T6680] Use struct sctp_assoc_value instead [ 194.579297][ T6690] loop3: detected capacity change from 0 to 1024 [ 194.666206][ T6690] EXT4-fs: Ignoring removed bh option [ 194.751022][ T6698] binder: 6695:6698 ioctl 4018620d 0 returned -22 [ 194.863314][ T6690] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 195.013307][ T6706] netlink: 104 bytes leftover after parsing attributes in process `syz.4.686'. [ 195.079820][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 195.124060][ T4497] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 195.325995][ T4497] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 195.345006][ T4497] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.403036][ T4497] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 195.424227][ T4497] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.614411][ T6725] sctp: [Deprecated]: syz.4.692 (pid 6725) Use of int in max_burst socket option deprecated. [ 195.614411][ T6725] Use struct sctp_assoc_value instead [ 195.679166][ T4497] usb 6-1: usb_control_msg returned -32 [ 195.685444][ T4497] usbtmc 6-1:16.0: can't read capabilities [ 196.083385][ T6739] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 196.097065][ T4501] usb 6-1: USB disconnect, device number 6 [ 196.283266][ T6744] gadgetfs: bound to dummy_udc driver [ 196.551218][ T6751] loop1: detected capacity change from 0 to 16 [ 196.593620][ T6751] erofs: (device loop1): mounted with root inode @ nid 36. [ 196.755838][ T6751] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 197.089245][ T6760] loop1: detected capacity change from 0 to 736 [ 197.173082][ T6741] loop4: detected capacity change from 0 to 32768 [ 197.848174][ T27] audit: type=1326 audit(1790223019.352:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6776 comm="syz.1.709" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b219e159 code=0x7ffc0000 [ 197.939571][ T27] audit: type=1326 audit(1790223019.352:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6776 comm="syz.1.709" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b219e159 code=0x7ffc0000 [ 198.034273][ T5559] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 198.052361][ T27] audit: type=1326 audit(1790223019.352:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6776 comm="syz.1.709" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b219e159 code=0x7ffc0000 [ 198.141940][ T27] audit: type=1326 audit(1790223019.352:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6776 comm="syz.1.709" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b219e159 code=0x7ffc0000 [ 198.227098][ T5559] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.248685][ T27] audit: type=1326 audit(1790223019.382:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6776 comm="syz.1.709" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa3b219e159 code=0x7ffc0000 [ 198.277413][ T5559] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.304528][ T5559] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 198.331342][ T27] audit: type=1326 audit(1790223019.382:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6776 comm="syz.1.709" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b219e159 code=0x7ffc0000 [ 198.363432][ T5559] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.432036][ T5559] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 198.451531][ T27] audit: type=1326 audit(1790223019.382:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6776 comm="syz.1.709" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b219e159 code=0x7ffc0000 [ 198.480585][ T5559] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.498331][ T5559] usb 3-1: Product: syz [ 198.513125][ T5559] usb 3-1: Manufacturer: syz [ 198.519427][ T5559] usb 3-1: SerialNumber: syz [ 198.540584][ T27] audit: type=1326 audit(1790223019.382:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6776 comm="syz.1.709" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b219e159 code=0x7ffc0000 [ 198.592260][ T5559] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 198.603742][ T5559] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 198.630278][ T5559] usbserial_generic 3-1:1.0: generic converter detected [ 198.637559][ T27] audit: type=1326 audit(1790223019.382:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6776 comm="syz.1.709" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b219e159 code=0x7ffc0000 [ 198.688724][ T5559] usb 3-1: generic converter now attached to ttyUSB0 [ 198.753985][ T27] audit: type=1326 audit(1790223019.392:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6776 comm="syz.1.709" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa3b219e159 code=0x7ffc0000 [ 198.809834][ T5559] usb 3-1: USB disconnect, device number 7 [ 198.831490][ T5559] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 198.860429][ T5559] usbserial_generic 3-1:1.0: device disconnected [ 198.876035][ T27] audit: type=1326 audit(1790223019.392:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6776 comm="syz.1.709" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b219e159 code=0x7ffc0000 [ 198.984089][ T27] audit: type=1326 audit(1790223019.392:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6776 comm="syz.1.709" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b219e159 code=0x7ffc0000 [ 199.076730][ T27] audit: type=1326 audit(1790223019.392:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6776 comm="syz.1.709" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa3b219e159 code=0x7ffc0000 [ 199.126049][ T6807] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 199.183997][ T4872] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 199.377052][ T4872] usb 2-1: unable to get BOS descriptor or descriptor too short [ 199.413515][ T4872] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.466563][ T4872] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 199.521406][ T4872] usb 2-1: config 1 interface 2 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 199.576453][ T4872] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 199.613944][ T4872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.650475][ T4872] usb 2-1: Product: syz [ 199.672021][ T4872] usb 2-1: Manufacturer: syz [ 199.695565][ T4872] usb 2-1: SerialNumber: syz [ 199.855526][ T6818] block nbd3: shutting down sockets [ 199.928589][ T4872] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 200.027120][ T6820] FAULT_INJECTION: forcing a failure. [ 200.027120][ T6820] name failslab, interval 1, probability 0, space 0, times 0 [ 200.073094][ T6820] CPU: 0 PID: 6820 Comm: syz.4.723 Not tainted syzkaller #0 [ 200.080475][ T6820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 200.090582][ T6820] Call Trace: [ 200.093900][ T6820] [ 200.096873][ T6820] dump_stack_lvl+0x188/0x24e [ 200.101613][ T6820] ? show_regs_print_info+0x12/0x12 [ 200.106873][ T6820] ? load_image+0x410/0x410 [ 200.111529][ T6820] ? __might_sleep+0xd0/0xd0 [ 200.116174][ T6820] ? __lock_acquire+0x7c40/0x7c40 [ 200.121263][ T6820] should_fail_ex+0x390/0x4c0 [ 200.126014][ T6820] should_failslab+0x5/0x20 [ 200.130566][ T6820] slab_pre_alloc_hook+0x59/0x300 [ 200.135653][ T6820] kmem_cache_alloc+0x56/0x2f0 [ 200.140469][ T6820] ? prepare_creds+0x3c/0x610 [ 200.145208][ T6820] prepare_creds+0x3c/0x610 [ 200.149771][ T6820] keyctl_set_reqkey_keyring+0x78/0x1b0 [ 200.155388][ T6820] __se_sys_keyctl+0x162/0x870 [ 200.160216][ T6820] ? __x64_sys_keyctl+0xc0/0xc0 [ 200.165119][ T6820] ? do_futex+0x310/0x320 [ 200.169506][ T6820] ? __ia32_sys_get_robust_list+0x100/0x100 [ 200.175547][ T6820] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 200.181588][ T6820] ? lock_chain_count+0x20/0x20 [ 200.186502][ T6820] ? lockdep_hardirqs_on+0x94/0x140 [ 200.191762][ T6820] ? __x64_sys_keyctl+0x1c/0xc0 [ 200.196676][ T6820] do_syscall_64+0x4c/0xa0 [ 200.201147][ T6820] ? clear_bhb_loop+0x60/0xb0 [ 200.205872][ T6820] ? clear_bhb_loop+0x60/0xb0 [ 200.210606][ T6820] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.216560][ T6820] RIP: 0033:0x7f903719e159 [ 200.221023][ T6820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.240809][ T6820] RSP: 002b:00007f903813f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 200.249290][ T6820] RAX: ffffffffffffffda RBX: 00007f9037425fa0 RCX: 00007f903719e159 [ 200.257313][ T6820] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000e [ 200.265334][ T6820] RBP: 00007f903723506b R08: 0000000000000000 R09: 0000000000000000 [ 200.273612][ T6820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.281637][ T6820] R13: 00007f9037426038 R14: 00007f9037425fa0 R15: 00007ffdadd98518 [ 200.289671][ T6820] [ 200.302454][ T4872] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 200.316295][ T4872] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 200.335478][ T4872] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 200.704141][ T4872] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 200.781230][ T4872] usb 2-1: USB disconnect, device number 14 [ 201.031765][ T6836] FAULT_INJECTION: forcing a failure. [ 201.031765][ T6836] name failslab, interval 1, probability 0, space 0, times 0 [ 201.063652][ T4274] udevd[4274]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.099992][ T6836] CPU: 0 PID: 6836 Comm: syz.5.730 Not tainted syzkaller #0 [ 201.107389][ T6836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.117506][ T6836] Call Trace: [ 201.120831][ T6836] [ 201.123806][ T6836] dump_stack_lvl+0x188/0x24e [ 201.128548][ T6836] ? show_regs_print_info+0x12/0x12 [ 201.133817][ T6836] ? load_image+0x410/0x410 [ 201.138400][ T6836] ? __might_sleep+0xd0/0xd0 [ 201.143051][ T6836] ? __lock_acquire+0x7c40/0x7c40 [ 201.148151][ T6836] should_fail_ex+0x390/0x4c0 [ 201.152904][ T6836] should_failslab+0x5/0x20 [ 201.157467][ T6836] slab_pre_alloc_hook+0x59/0x300 [ 201.162564][ T6836] kmem_cache_alloc_lru+0x49/0x2e0 [ 201.167745][ T6836] ? __d_alloc+0x2e/0x6e0 [ 201.172146][ T6836] __d_alloc+0x2e/0x6e0 [ 201.176358][ T6836] ? d_alloc_pseudo+0xe/0x70 [ 201.181016][ T6836] d_alloc_pseudo+0x19/0x70 [ 201.185580][ T6836] alloc_file_pseudo+0xe0/0x200 [ 201.190485][ T6836] ? alloc_empty_file_noaccount+0x80/0x80 [ 201.196332][ T6836] ? alloc_fd+0x590/0x640 [ 201.200729][ T6836] sock_alloc_file+0xb3/0x240 [ 201.205455][ T6836] __sys_socket+0x12d/0x190 [ 201.210000][ T6836] __x64_sys_socket+0x76/0x80 [ 201.214719][ T6836] do_syscall_64+0x4c/0xa0 [ 201.219187][ T6836] ? clear_bhb_loop+0x60/0xb0 [ 201.223897][ T6836] ? clear_bhb_loop+0x60/0xb0 [ 201.228608][ T6836] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.234540][ T6836] RIP: 0033:0x7f4c84b9e159 [ 201.238985][ T6836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.258629][ T6836] RSP: 002b:00007f4c85ac8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 201.267076][ T6836] RAX: ffffffffffffffda RBX: 00007f4c84e25fa0 RCX: 00007f4c84b9e159 [ 201.275100][ T6836] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000002c [ 201.283107][ T6836] RBP: 00007f4c84c3506b R08: 0000000000000000 R09: 0000000000000000 [ 201.291117][ T6836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.299119][ T6836] R13: 00007f4c84e26038 R14: 00007f4c84e25fa0 R15: 00007ffe058a4ac8 [ 201.307153][ T6836] [ 202.047117][ T6861] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.742'. [ 202.374779][ T6872] loop1: detected capacity change from 0 to 1024 [ 202.696168][ T6879] ptp ptp0: only physical clock in use now [ 202.773411][ T6879] ptp ptp0: new virtual clock ptp1 [ 202.803043][ T6879] ptp ptp0: guarantee physical clock free running [ 202.989085][ T6891] loop3: detected capacity change from 0 to 64 [ 203.301868][ T6902] netem: change failed [ 203.668447][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 203.668464][ T27] audit: type=1326 audit(1790223025.172:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.2.763" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0b59e159 code=0x7ffc0000 [ 203.698431][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.735304][ T27] audit: type=1326 audit(1790223025.222:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.2.763" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0b59e159 code=0x7ffc0000 [ 203.768204][ T27] audit: type=1326 audit(1790223025.222:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.2.763" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0b59e159 code=0x7ffc0000 [ 203.793038][ T27] audit: type=1326 audit(1790223025.222:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.2.763" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8c0b59e159 code=0x7ffc0000 [ 203.817769][ T27] audit: type=1326 audit(1790223025.222:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.2.763" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0b59e159 code=0x7ffc0000 [ 203.842736][ T27] audit: type=1326 audit(1790223025.222:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.2.763" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0b59e159 code=0x7ffc0000 [ 203.900818][ T27] audit: type=1326 audit(1790223025.222:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.2.763" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0b59e159 code=0x7ffc0000 [ 203.945076][ T27] audit: type=1326 audit(1790223025.222:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.2.763" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0b59e159 code=0x7ffc0000 [ 203.977104][ T27] audit: type=1326 audit(1790223025.222:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.2.763" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8c0b59e159 code=0x7ffc0000 [ 204.028282][ T27] audit: type=1326 audit(1790223025.222:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.2.763" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0b59e159 code=0x7ffc0000 [ 204.354130][ T6093] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 204.469700][ T5954] bond0: (slave bond_slave_0): link status definitely up [ 204.494984][ T5954] bond0: active interface up! [ 204.538589][ T6924] loop4: detected capacity change from 0 to 128 [ 204.554027][ T6093] usb 6-1: Using ep0 maxpacket: 8 [ 204.567673][ T6093] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 204.591041][ T6093] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 204.614688][ T6093] usb 6-1: Product: syz [ 204.618951][ T6093] usb 6-1: Manufacturer: syz [ 204.645752][ T6924] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 204.654121][ T6093] usb 6-1: SerialNumber: syz [ 204.693311][ T6924] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.705585][ T6093] usb 6-1: config 0 descriptor?? [ 204.722947][ T9] bond0: (slave bond_slave_0): interface is now down [ 204.736085][ T9] bond0: now running without any active interface! [ 204.743809][ T6093] gspca_main: sq905-2.14.0 probing 2770:9120 [ 205.266245][ T4872] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 205.288276][ T6926] loop1: detected capacity change from 0 to 32768 [ 205.465823][ T4872] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.484023][ T4872] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 205.516172][ T4872] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 205.557578][ T4872] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 205.589040][ T4872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.609197][ T4872] usb 5-1: Product: syz [ 205.613483][ T4872] usb 5-1: Manufacturer: syz [ 205.624024][ T4872] usb 5-1: SerialNumber: syz [ 205.722196][ T6093] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 205.737312][ T6093] sq905: probe of 6-1:0.0 failed with error -71 [ 205.762858][ T6093] usb 6-1: USB disconnect, device number 7 [ 205.830946][ T6934] loop1: detected capacity change from 0 to 1024 [ 206.239235][ T6940] loop1: detected capacity change from 0 to 2048 [ 206.339837][ T6940] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 206.534066][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 206.534389][ T4284] Bluetooth: hci0: command 0x0406 tx timeout [ 206.540497][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 206.656674][ T4872] cdc_ncm 5-1:1.0: bind() failure [ 206.671018][ T4872] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 206.686619][ T4872] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 206.702336][ T4872] usbtest: probe of 5-1:1.1 failed with error -71 [ 206.748763][ T4872] usb 5-1: USB disconnect, device number 11 [ 206.836835][ T6955] loop5: detected capacity change from 0 to 1024 [ 206.872921][ T6955] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 206.944632][ T6955] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 207.074729][ T6959] ptp ptp0: delete virtual clock ptp1 [ 207.164732][ T6959] ptp ptp0: only physical clock in use now [ 207.184970][ T6960] ptp ptp0: new virtual clock ptp1 [ 207.190176][ T6960] ptp ptp0: guarantee physical clock free running [ 207.215183][ T5499] EXT4-fs (loop5): unmounting filesystem. [ 207.647040][ T6974] binder: 6973:6974 ioctl c00c6211 0 returned -14 [ 207.912057][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 208.024388][ T5558] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 208.079201][ T5558] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 208.138966][ T6989] input: syz0 as /devices/virtual/input/input11 [ 208.780096][ T7003] loop4: detected capacity change from 0 to 8192 [ 208.810968][ T7009] loop1: detected capacity change from 0 to 1024 [ 208.881962][ T7003] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 208.918437][ T7003] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 208.994477][ T7003] REISERFS (device loop4): using ordered data mode [ 209.015856][ T7003] reiserfs: using flush barriers [ 209.036435][ T7003] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 209.054709][ T7003] REISERFS (device loop4): checking transaction log (loop4) [ 209.084330][ T5559] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 209.111112][ T5963] hfsplus: found bad thread record in catalog [ 209.314100][ T6093] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 209.412332][ T7003] REISERFS (device loop4): Using tea hash to sort names [ 209.446085][ T7003] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 209.514163][ T6093] usb 4-1: Using ep0 maxpacket: 16 [ 209.521769][ T6093] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 209.550319][ T6093] usb 4-1: config 0 has no interface number 0 [ 209.573953][ T6093] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.609109][ T6093] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.617674][ T9] bond0: (slave bond_slave_1): link status definitely up [ 209.648105][ T9] bond0: active interface up! [ 209.688301][ T6093] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 209.728711][ T6093] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.794829][ T6093] usb 4-1: config 0 descriptor?? [ 209.875280][ T5954] bond0: (slave bond_slave_1): interface is now down [ 209.914301][ T5954] bond0: now running without any active interface! [ 210.204293][ T48] Bluetooth: hci0: command 0x0c3a tx timeout [ 210.212335][ T4284] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 210.242146][ T6093] hid (null): nested delimiters [ 210.247341][ T4497] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 210.260493][ T6093] hid (null): report_id 24797 is invalid [ 210.456248][ T6093] usb 4-1: USB disconnect, device number 16 [ 210.465701][ T4497] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.496517][ T4497] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 210.550914][ T4497] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 210.592726][ T4497] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.606312][ T4497] usb 6-1: Product: syz [ 210.610588][ T4497] usb 6-1: Manufacturer: syz [ 210.616443][ T4497] usb 6-1: SerialNumber: syz [ 210.662591][ T4497] cdc_mbim 6-1:1.0: skipping garbage [ 210.863085][ T7028] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 210.953528][ T7046] netlink: 'syz.2.822': attribute type 8 has an invalid length. [ 211.532908][ T7028] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 211.541307][ T4497] cdc_mbim 6-1:1.0: setting tx_max = 16384 [ 211.563058][ T4497] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 211.658813][ T4497] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, a2:5d:c7:a3:68:0e [ 211.828951][ T4497] usb 6-1: USB disconnect, device number 8 [ 211.848333][ T4497] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 212.237003][ T7] smpboot: CPU 1 is now offline [ 212.995334][ T5950] ACPI: \_SB_.CP01: Eject incomplete - status 0xf [ 214.960225][ T7120] loop5: detected capacity change from 0 to 256 [ 215.724071][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 216.213575][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 216.213587][ T27] audit: type=1800 audit(1790223037.712:43): pid=7143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.859" name="attr_qid_max" dev="configfs" ino=43159 res=0 errno=0 [ 216.981783][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'. [ 217.154107][ T7] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 217.374051][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 217.396221][ T7168] loop5: detected capacity change from 0 to 1024 [ 217.414545][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 217.511819][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 217.592814][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 217.670117][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 217.745185][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 217.798895][ T7] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 217.853692][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.930151][ T7] usb 5-1: config 0 descriptor?? [ 217.969781][ T5336] hfsplus: found bad thread record in catalog [ 218.004942][ T7180] loop1: detected capacity change from 0 to 4096 [ 218.041872][ T4293] Bluetooth: hci5: urb ffff88805f90f100 submission failed (90) [ 218.118568][ T7180] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 218.142766][ T7185] jffs2: notice: (7185) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 218.219264][ T7] usb 5-1: USB disconnect, device number 12 [ 218.267175][ T7180] NILFS (loop1): mounting unchecked fs [ 218.272707][ T7180] NILFS (loop1): recovery required for readonly filesystem [ 218.401751][ T7180] NILFS (loop1): write access will be enabled during recovery [ 218.537758][ T4946] udevd[4946]: incorrect nilfs2 checksum on /dev/loop1 [ 218.552139][ T7180] NILFS (loop1): recovery complete [ 218.783925][ T4498] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 218.800580][ T7196] loop3: detected capacity change from 0 to 1024 [ 218.944947][ T7196] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 219.023884][ T4498] usb 3-1: Using ep0 maxpacket: 32 [ 219.053174][ T4498] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 219.109895][ T7196] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 219.142319][ T4498] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.168065][ T7196] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 219.207534][ T4498] usb 3-1: Product: syz [ 219.211753][ T4498] usb 3-1: Manufacturer: syz [ 219.334049][ T4498] usb 3-1: SerialNumber: syz [ 219.384487][ T4498] usb 3-1: config 0 descriptor?? [ 219.539665][ T7210] input: syz0 as /devices/virtual/input/input12 [ 219.575821][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 219.592032][ T7210] input: failed to attach handler leds to device input12, error: -6 [ 219.861890][ T4498] airspy 3-1:0.0: Board ID: 00 [ 219.887387][ T4498] airspy 3-1:0.0: Firmware version: [ 220.683375][ T7219] loop5: detected capacity change from 0 to 131072 [ 220.752750][ T7219] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 220.761443][ T7219] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 220.774145][ T7219] F2FS-fs (loop5): invalid crc value [ 220.803085][ T7219] F2FS-fs (loop5): Found nat_bits in checkpoint [ 220.879468][ T7219] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 220.886697][ T7219] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 220.906496][ T4498] airspy 3-1:0.0: usb_control_msg() failed -71 request 12 [ 220.959629][ T4498] airspy 3-1:0.0: Registered as swradio24 [ 221.007131][ T4498] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 221.033959][ T7228] netlink: 104 bytes leftover after parsing attributes in process `syz.1.888'. [ 221.096929][ T4498] usb 3-1: USB disconnect, device number 8 [ 221.594015][ T7235] input: syz0 as /devices/virtual/input/input13 [ 223.754030][ T6093] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 223.974061][ T6093] usb 6-1: Using ep0 maxpacket: 32 [ 224.005270][ T6093] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 224.023606][ T7266] loop4: detected capacity change from 0 to 512 [ 224.087327][ T6093] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.115830][ T7266] EXT4-fs: Ignoring removed nobh option [ 224.188767][ T6093] usb 6-1: config 0 descriptor?? [ 224.254807][ T7266] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 224.286052][ T6093] as10x_usb: device has been detected [ 224.291784][ T6093] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 224.334937][ T7266] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.456475][ T6093] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 224.476835][ T7264] ------------[ cut here ]------------ [ 224.482375][ T7264] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 224.542404][ T7264] WARNING: CPU: 0 PID: 7264 at kernel/locking/mutex.c:582 __mutex_lock+0xa1c/0xae0 [ 224.557850][ T7264] Modules linked in: [ 224.561755][ T7264] CPU: 0 PID: 7264 Comm: syz.5.904 Not tainted syzkaller #0 [ 224.569104][ T7264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.579249][ T7264] RIP: 0010:__mutex_lock+0xa1c/0xae0 [ 224.584594][ T7264] Code: 04 20 84 c0 0f 85 b3 00 00 00 83 3d 65 5b e5 03 00 0f 85 f5 f6 ff ff 48 c7 c7 20 03 8c 8a 48 c7 c6 c0 03 8c 8a e8 e4 2b 12 f7 <0f> 0b e9 db f6 ff ff 0f 0b e9 89 f9 ff ff 48 c7 c1 40 61 c1 96 80 [ 224.604350][ T7264] RSP: 0018:ffffc90004f6fac0 EFLAGS: 00010246 [ 224.610442][ T7264] RAX: eac5b0965ec0c600 RBX: ffff88807bdc6ce0 RCX: 0000000000080000 [ 224.618450][ T7264] RDX: ffffc90003e29000 RSI: 0000000000001dc9 RDI: 0000000000001dca [ 224.626461][ T7264] RBP: ffffc90004f6fc20 R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 224.634463][ T7264] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: dffffc0000000000 [ 224.642459][ T7264] R13: 0000000000000000 R14: ffff88807bdc6000 R15: 0000000000000000 [ 224.650464][ T7264] FS: 00007f4c85ac86c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 224.659425][ T7264] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 224.666049][ T7264] CR2: 00007f4a01943000 CR3: 0000000057983000 CR4: 00000000003506f0 [ 224.674059][ T7264] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 224.682041][ T7264] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 224.690049][ T7264] Call Trace: [ 224.693340][ T7264] [ 224.696299][ T7264] ? trace_contention_end+0x5f/0x170 [ 224.701606][ T7264] ? __mutex_lock+0x1ab/0xae0 [ 224.706333][ T7264] ? as102_dvb_dmx_start_feed+0x6c/0x280 [ 224.711994][ T7264] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 224.717671][ T7264] ? mutex_lock_nested+0x10/0x10 [ 224.722633][ T7264] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 224.728666][ T7264] ? dmx_ts_feed_start_filtering+0x4e/0x210 [ 224.734599][ T7264] ? mutex_unlock+0x10/0x10 [ 224.739128][ T7264] ? mutex_lock_nested+0x10/0x10 [ 224.744098][ T7264] ? _raw_spin_lock_irq+0xb7/0xf0 [ 224.749141][ T7264] ? _raw_spin_unlock_irq+0x1f/0x40 [ 224.754405][ T7264] as102_dvb_dmx_start_feed+0x6c/0x280 [ 224.759895][ T7264] dmx_ts_feed_start_filtering+0x11c/0x210 [ 224.765751][ T7264] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 224.771669][ T7264] dvb_dmxdev_filter_start+0x422/0x1060 [ 224.777256][ T7264] dvb_demux_do_ioctl+0x47e/0x530 [ 224.782388][ T7264] dvb_usercopy+0x191/0x2b0 [ 224.786933][ T7264] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 224.792507][ T7264] ? dvb_generic_ioctl+0xb0/0xb0 [ 224.797520][ T7264] ? dvb_demux_poll+0x210/0x210 [ 224.802416][ T7264] dvb_demux_ioctl+0x25/0x30 [ 224.807092][ T7264] __se_sys_ioctl+0xfa/0x170 [ 224.811717][ T7264] do_syscall_64+0x4c/0xa0 [ 224.816209][ T7264] ? clear_bhb_loop+0x60/0xb0 [ 224.820913][ T7264] ? clear_bhb_loop+0x60/0xb0 [ 224.825658][ T7264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.831577][ T7264] RIP: 0033:0x7f4c84b9e159 [ 224.836033][ T7264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.855643][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.861670][ T7264] RSP: 002b:00007f4c85ac8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.870119][ T7264] RAX: ffffffffffffffda RBX: 00007f4c84e25fa0 RCX: 00007f4c84b9e159 [ 224.878130][ T7264] RDX: 0000200000000040 RSI: 0000000040146f2c RDI: 0000000000000004 [ 224.886135][ T7264] RBP: 00007f4c84c3506b R08: 0000000000000000 R09: 0000000000000000 [ 224.894207][ T7264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.902201][ T7264] R13: 00007f4c84e26038 R14: 00007f4c84e25fa0 R15: 00007ffe058a4ac8 [ 224.910259][ T7264] [ 224.913299][ T7264] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 224.920840][ T7264] CPU: 0 PID: 7264 Comm: syz.5.904 Not tainted syzkaller #0 [ 224.928559][ T7264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.938631][ T7264] Call Trace: [ 224.941918][ T7264] [ 224.944858][ T7264] dump_stack_lvl+0x188/0x24e [ 224.949549][ T7264] ? memcpy+0x3c/0x60 [ 224.953550][ T7264] ? show_regs_print_info+0x12/0x12 [ 224.958754][ T7264] ? load_image+0x410/0x410 [ 224.963287][ T7264] panic+0x2d3/0x710 [ 224.967213][ T7264] ? bpf_jit_dump+0xd0/0xd0 [ 224.971743][ T7264] __warn+0x2f8/0x4f0 [ 224.975740][ T7264] ? __mutex_lock+0xa1c/0xae0 [ 224.980431][ T7264] ? __mutex_lock+0xa1c/0xae0 [ 224.985118][ T7264] report_bug+0x2ba/0x4f0 [ 224.989462][ T7264] ? __mutex_lock+0xa1c/0xae0 [ 224.994147][ T7264] handle_bug+0x3a/0x70 [ 224.998311][ T7264] exc_invalid_op+0x16/0x40 [ 225.002832][ T7264] asm_exc_invalid_op+0x16/0x20 [ 225.007689][ T7264] RIP: 0010:__mutex_lock+0xa1c/0xae0 [ 225.012983][ T7264] Code: 04 20 84 c0 0f 85 b3 00 00 00 83 3d 65 5b e5 03 00 0f 85 f5 f6 ff ff 48 c7 c7 20 03 8c 8a 48 c7 c6 c0 03 8c 8a e8 e4 2b 12 f7 <0f> 0b e9 db f6 ff ff 0f 0b e9 89 f9 ff ff 48 c7 c1 40 61 c1 96 80 [ 225.032703][ T7264] RSP: 0018:ffffc90004f6fac0 EFLAGS: 00010246 [ 225.038791][ T7264] RAX: eac5b0965ec0c600 RBX: ffff88807bdc6ce0 RCX: 0000000000080000 [ 225.046772][ T7264] RDX: ffffc90003e29000 RSI: 0000000000001dc9 RDI: 0000000000001dca [ 225.054758][ T7264] RBP: ffffc90004f6fc20 R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 225.062733][ T7264] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: dffffc0000000000 [ 225.070714][ T7264] R13: 0000000000000000 R14: ffff88807bdc6000 R15: 0000000000000000 [ 225.078698][ T7264] ? trace_contention_end+0x5f/0x170 [ 225.084000][ T7264] ? __mutex_lock+0x1ab/0xae0 [ 225.088688][ T7264] ? as102_dvb_dmx_start_feed+0x6c/0x280 [ 225.094342][ T7264] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 225.099984][ T7264] ? mutex_lock_nested+0x10/0x10 [ 225.104933][ T7264] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 225.110939][ T7264] ? dmx_ts_feed_start_filtering+0x4e/0x210 [ 225.116847][ T7264] ? mutex_unlock+0x10/0x10 [ 225.121358][ T7264] ? mutex_lock_nested+0x10/0x10 [ 225.126318][ T7264] ? _raw_spin_lock_irq+0xb7/0xf0 [ 225.131354][ T7264] ? _raw_spin_unlock_irq+0x1f/0x40 [ 225.136575][ T7264] as102_dvb_dmx_start_feed+0x6c/0x280 [ 225.142057][ T7264] dmx_ts_feed_start_filtering+0x11c/0x210 [ 225.147871][ T7264] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 225.153775][ T7264] dvb_dmxdev_filter_start+0x422/0x1060 [ 225.159330][ T7264] dvb_demux_do_ioctl+0x47e/0x530 [ 225.164366][ T7264] dvb_usercopy+0x191/0x2b0 [ 225.168886][ T7264] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 225.174435][ T7264] ? dvb_generic_ioctl+0xb0/0xb0 [ 225.179392][ T7264] ? dvb_demux_poll+0x210/0x210 [ 225.184252][ T7264] dvb_demux_ioctl+0x25/0x30 [ 225.188844][ T7264] __se_sys_ioctl+0xfa/0x170 [ 225.193464][ T7264] do_syscall_64+0x4c/0xa0 [ 225.197899][ T7264] ? clear_bhb_loop+0x60/0xb0 [ 225.202585][ T7264] ? clear_bhb_loop+0x60/0xb0 [ 225.207273][ T7264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.213181][ T7264] RIP: 0033:0x7f4c84b9e159 [ 225.217601][ T7264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.237211][ T7264] RSP: 002b:00007f4c85ac8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.245631][ T7264] RAX: ffffffffffffffda RBX: 00007f4c84e25fa0 RCX: 00007f4c84b9e159 [ 225.253612][ T7264] RDX: 0000200000000040 RSI: 0000000040146f2c RDI: 0000000000000004 [ 225.261587][ T7264] RBP: 00007f4c84c3506b R08: 0000000000000000 R09: 0000000000000000 [ 225.269562][ T7264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.277538][ T7264] R13: 00007f4c84e26038 R14: 00007f4c84e25fa0 R15: 00007ffe058a4ac8 [ 225.285521][ T7264] [ 225.288622][ T7264] Kernel Offset: disabled [ 225.292948][ T7264] Rebooting in 86400 seconds..