last executing test programs:

12.781007323s ago: executing program 4 (id=489):
r0 = socket(0x2, 0x3, 0xff)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0xd00, 0x4)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10)
sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000140)="25daecdbdce723b7b21e8d5c32e71c33b09147ca", 0x14}], 0x1}, 0x40)

12.769152046s ago: executing program 4 (id=490):
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==")
socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x5ecfb203)

12.711427859s ago: executing program 4 (id=492):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='e:my_read_msr msr/r', 0x13)

12.683853355s ago: executing program 4 (id=494):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x7c, 0x2ca, &(0x7f00000001c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r0, &(0x7f0000000500)="723a732f70202e2f66696c65323a300c2b74ade886b15cfbad57a885b91bdd98444726e2d4ceb6150261aae4ef05bfe69d1bdd15846cae8a4c0e8599e47a95ac466b969f3450108d9f9094bd039bd29f48d8f7b3bdb9b0bd170686c531df2aa1ea7da7e0899cbf1f9336c96910c3bba49c5890f0a5a12bda3c9df6ba8c1eb65ab28d02032f27deb96276e7ef8ed944ade61646b0855e7b5d7b6086f25d3d", 0x9e)

12.657298301s ago: executing program 3 (id=495):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, 0x0)

12.642933115s ago: executing program 4 (id=496):
r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
fchdir(r1)
lstat(&(0x7f0000000240)='./bus\x00', &(0x7f0000000300))

12.498369807s ago: executing program 4 (id=499):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000000), 0x5, 0x4c3, &(0x7f0000000e80)="$eJzs3MtvG8UfAPDvOonT/tr8Ysq7D2ooj4hH0qQFekDiIZB6QUKCQzmGNK1K0wY1QaJVBAGhckT9CwpHJP4CTnBBgIQE4gpHJIRUoVz6OKBFa3tTx7FTJ3Xitvl8JDczu+ud7+zurHdmagewaZWzf5KI7RHxe0QMVrNLNyhX/1xZmJu4ujA3kUSavvlPUtnu8sLcRL5p/r5ttcxQIaLwaRK7mpQ7c/bcyfGpqckztfzI7Kn3RmbOnnvmxKnx45PHJ0+PHTp08MDo88+NPduReg5kse78cHr3g4ffvvD6xJEL7/z4dRbv9tr6ywtzxaXvKOWJnRGRNu7vpTbKLEd56bGs89jqwr/lDdSlk94uBsKq9EREdrr6Ku1/MHri+skbjNc+iSh0NT5g/aRpmvYvW5rdFbZmifkUuIMl0e0IgO7IP/Gzfnz+2uBHkK669HK1A5TV+0rtVV3TW+n5lEvVvtHAOpVfjr0Rce3ikflrF6NhPAUAYD18mz3/PN3s+a8Q99Vt9//a3FApIu6KiB0RcXdE3BMR90ZUtr0/Ih5ot+Ck+dTI8uefX7eusWptyZ7/XqjNbS19/lsc9y711HIDlfr3JcdOTE3urx2Toejrz/KjK5Tx3au/fd5qXTkisme//JWVnz8L1uL4u7dhgO7o+Oz4zdS53qW9ETt7m9U/WZwJSGLLmvc/UIw48eRXu1utv3H9V9CBeab0y4gnqud/Phrqn0tWnp8c2RJTk/tH8qtiuZ9+Of9Gq/Jvqv4dcOnjiP81vf4X619K6udrZ1ZdRO/5Pz5r2adZ6/VfTN6qpPNJ2w/GZ2fPjEYUk/nly8ci4mq1r5vn8+2z+g/ta97+d0T8+0VtP7siIruI90TEQxGVXlsW+8MR8UhE7FvhAPzwyqPvZn9/vmH9H+/K+T+6qvNfn+iLxiXNEj0nv/+mVfntnf+DldRQbcn1+1/a02q/1cLz+1brAG/q4AEAAMBtolD5P/BJElEdN9let66Y9aOnZ2afOjb9/umj1XWl6CvkI12DdeOho7Wx4Tw/1pA/UBk3TtM03VrJD09MT63XnDrQnm3V9l8YXrwXFArDw9V1fzWMrr3YlQiBdbWqebRW32gDbkvttX8NH+5Ei+1/+TcBcxo/3KGq7b9nsNtxABvP77XA5tWs/X8UcaULoQAbzOc/bF7aP2xeq23/pXWKA9h4Pv9hU1r6lfhitPF1/rYSOw53Zj+dSKT9t0QYdYlIrh/5nm7H07+2t0fhFjmY9YmkyarC4pI9f+Y/DFFoe8/FjgQWK23THxHt7jC7cjbmYHb7zgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAZ/wUAAP//69PiJg==")
mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff)
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0)
creat(0xfffffffffffffffd, 0xc6)

12.477019252s ago: executing program 32 (id=499):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000000), 0x5, 0x4c3, &(0x7f0000000e80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff)
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0)
creat(0xfffffffffffffffd, 0xc6)

12.473394773s ago: executing program 3 (id=502):
r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, 0x0})
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000002c0)={0x1, 0x0, [{0x80000000, 0xf3, 0x5, 0xfffff7e2, 0x7, 0xffffff5d, 0x3ff}]})

12.096283739s ago: executing program 3 (id=505):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bf9000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0})
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x490, 0x0, 0xfffeffff}]})

11.910020511s ago: executing program 3 (id=507):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x7c, 0x2ca, &(0x7f00000001c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r0, &(0x7f0000000500)="723a732f70202e2f66696c65323a300c2b74ade886b15cfbad57a885b91bdd98444726e2d4ceb6150261aae4ef05bfe69d1bdd15846cae8a4c0e8599e47a95ac466b969f3450108d9f9094bd039bd29f48d8f7b3bdb9b0bd170686c531df2aa1ea7da7e0899cbf1f9336c96910c3bba49c5890f0a5a12bda3c9df6ba8c1eb65ab28d02032f27deb96276e7ef8ed944ade61646b0855e7b5d7b6086f25d3d", 0x9e)

11.745886058s ago: executing program 3 (id=508):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x7b, 0x11ff, &(0x7f0000002480)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x82)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1042, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0xe898d2275f586838)
preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b)

11.522411189s ago: executing program 3 (id=512):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x110, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$printer(0x6, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r0, 0xc0085508, 0x0)

11.467898842s ago: executing program 33 (id=512):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x110, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$printer(0x6, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r0, 0xc0085508, 0x0)

3.906770181s ago: executing program 0 (id=652):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x210080, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@minixdf}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x13}}, {@abort}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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")
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r0, &(0x7f0000000740)='E', 0x1, 0x4fed3)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4f003, 0x100000001, 0x3})

3.78000081s ago: executing program 6 (id=653):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80)
r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map=r1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

3.64630281s ago: executing program 6 (id=654):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10001, 0xffffffff, 0x3, 0x8, 0xffffffc0}, 0x4, 0x1, 0x8, 0x0, 0x3, 0x0, 0x16, 0x13, 0x3, 0xca, {0x0, 0x8, 0x3, 0x5, 0x84, 0x8}}}}]}, 0x78}}, 0x0)

3.636158453s ago: executing program 0 (id=655):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="3d1706000000a37d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001940)={0x84, &(0x7f0000001480)={0x40, 0x10, 0xcb, "eb97063f89fdf4caeebccd6c976f1a95cd96c29a5b151892a4ea16900d2faf825adccf174ca2050c4501a4d2438f40ce1b2c24b76bd1a8286e631f9426870fb695221e8b7927e956be2b1b6661f54088046ce959dcc50e3e41571ac29d121be7aae64e646d45ccb2abdb63f9e365854f0a1af3d50cf3e1afc7444c1cec8b1e8b5c7c050f902f93969b2ca05af039385c8ecbeb7776ec0320f570086811c1ea1d4c167aebebb55e2dc61ca5f0ee6a77e47b9b30aebe64afd7fc255c40fb82fccc15b998705f8c0acc59a135"}, &(0x7f0000001580)={0x0, 0xa, 0x1, 0xd8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.587258444s ago: executing program 6 (id=657):
syz_mount_image$f2fs(&(0x7f0000010600), &(0x7f0000000000)='./file0\x00', 0x3004050, &(0x7f0000000540)=ANY=[], 0x2, 0x10629, &(0x7f0000010640)="$eJzs3L1vG2UYAPDHSdMvSokQAwtwEkJKJGzV6YcoU4BWLRKtKj4GhBA4tmO5tX1R7KamC2JgQ/wNLGwMfGysiP+BBYkFiYEJiQ2pyPdeqqYUaHGbkOb3ky7Pva9fP/ec5eW5cy6APWs++/23ShyNQxExGxFHIor9SrkVllN4MiKeiYiZW7ZKOX9zYn9EHI6Io5PkKWelfOmdX148f/qjcx9/+u1PT69++d0XO3fWwE57LiL6a2n/Wj/FvJPi5XK+sdEtYv/ERhnTC/0r5ThP8Vp7pchwrbG5rlHE4520Pl+7OpzE1V6jOYmd7moxvzZIBxxudDbzFG+43Fgvxq32ShG7w7yIneuprnEZrw9HKU+rzPdBkT5Go82Y5tvjdjqftStFbA5G5XzKm7fa40ncKGN5uGjmvVZRx8odPsAbs3f9Wf+fvdYdXB1nG+31YTcfZCdr9Rdq9VPV+nreao/aJ6qNfuvUiWyh05ssq47ajf5yJ887vXatmfcXs4VOs1mt17OFM+2VbmOQ1eu147Vj1ZOL5d7z2bmLb2W9VrYwiS93B1dH3d4wW83Xs/SOxWypdvz0YvZsPXvjwqXs0utnz1649OZ7Z96++NKFV18pF/2lrGxh6djSUrV+rHpwj5//Un1xuvMfV7aOn7qRbI6Xp0vPw66y0wUA7D76f2An6P+n7P8fEg+g/80iYtf0v/9+/h/+kFbujf4f7onvDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAnvXz3Dfni535NH6knH+0nHq8HFciYiYibtzBbOzfknO2zDP3N+vnbqvh+0oUGSbHOFBuhyNiudz+eCy9BgAAANy7H7/+/N3Urac/8ztdEP/Vobtemd3cSxdtZo68f59qqETE3Pyv9yFLlBeb4onpq0om3+99MZ4yy2ZtxQWsg9NXlRSX3Pbdr2x3ZXZLOHhLqKQws63lAAAA22JrJ7C9XQgAAADb6ZN7WfxVfPbgKuGBuv2eXnE3s/wtfvkD/gMplDcED20ZAQAAALuQf6kHAACAh1/R///z8//GLc//AwAAgN0tPf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgT3buHTdxIIwD+MfDC/vSWqttuM2WXGKlPcKWW+YQXCE9CiV1jpGOdDkCggjPRIohSElsjIh+P8keZoA/nyWaGT8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4pftiMb27uf7TIOJqt9tsm2nviAAAAIB9q2IxrV6Uqf81j3/PQz9zvxcR/Yh4ae4+iE+1zEHOKY58vtir4TaiStj9xihvXyLid97WP9J7AAAAwNst55NZmq2nXXnuguhSWrTpf/vbUl4vIoryoYWUyItN8at5Vcnu/z2M/w1TnmqrFrDGzatKqiW3YVtprzKoNeNnTS81/U7LAQAAOlGfCXQ7CwEAAKBL/85dAOdRnc3M1+LnC/hHqcknBD/XegAAAMAFcks9AAAAXJb1Oybz1Vc8/w8AAAA+tvT8PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE5pVSymy/lk1jRnsz0QZcTh6BHtHA0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Mj+vKNACIRBGOxd35nM/Q8rDZqamlSB8PE3BgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/vzkgIhDMAANNP56U56/8NKwJ5BhPegJSF0UQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHii13Uyen1WW2UcSb5tM8mvc8O/U8OW5N2w98G88SMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsnM/oXFUcRzA3+xmt39AXGMMEhUrNlUQs9kNLfQieBCCB/XgxWOabmrsNmqbQ1JyycWbV+96EywKufRWj17suRA8tMfCIhV6VmZ2pnmJSWzAzG6azwfevl8mw8x7L7Dsd98QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYpvd+OFPU1fSl0a8r+bF7j9bmd+tTD5e6Y2lL66TcYR85L+f9J7dufRavYTI+uDEBAADw7KkW+T6EcL+2MZv2lUaW/yeLc9LMv/Zcvy7y/F75/06nOVbk/82Jj997cqNG/z61EMLCYrczXdoMh9vZ0M761oPNP+M13Hne8/tdpLpVJv1vaKrZn63y4fqLvVq26sm3d+9+UM/KE///LACAg5oq+rwoPh+lfWuQAwPgmTWStxDl/2pjsGMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKENvPbxT1EkIYWJkq07de7Q2v1t/p9Mce7jUzdrmb7cb8TXTS9RCCAuL3c50iXMZZmdDO+u7v557NV7DnefdWL15da7b7VxXKBQHLdK3rSEYxmEUA3jTAgDgyKrlLf2AfL+2MZseS0ZD+Pv77fn/ragO++T/Ivun7ZWV3rn4XnH+b5U2w+FW5P+N5OfVeA13ntdcvvZV88bqzXcXr81d6VzpLLUunr9w4eJMa2a6mX2f0vStCgAAAH21XY7V8xbn/8rov/f/T0d1eMr8/+kPr7Xje1WPbf4/tedvivz/0qU/2vvl/61Nv0MdKAAAwLH2wpnHfyW7HE/q9bAyt7x8vdV/ffJzu/86gKEe2Im8xfn/5OigRwUAAACUobeebNv/vxzV4T/2/8dWfsza7W+mvo6vWc13whcWu52p+S+7l8ubztAq9v8ffz7x+9Pt/x9eMYDpAwAAUJJTeYv3/2vZ8/+VN4pzKiGEt9/s1/m/Adwj/7++7fn/yfb5n+J7xc//z5Q4x2FUGe+vR5H/r176bnKv/J+dOx7CyPiABgsAAMCRdzJvaf5/UNuY/eKX0x/VPf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP+zPPWoCQRjH4XcnCUkgXe6x5OMMIlgJNlY2foCwsGfwAF7Ixsp28SJ6BUWdra1kLZ6n+f+KYZgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACe3unuiZeIKCK1mSINVt+H14h4i7Rumt77NYvNcV9/3HK03Q0vOZ70v/Itn1E8+isAAJ0o282xWFbzn7y/ef/y/uctp3U16/LRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCZHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCxAAAAAIAwf+s0OjYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADGCgAA///2MInD")
r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x152)
getdents(r0, &(0x7f0000000240)=""/184, 0xb8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80)
getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000)

2.85399731s ago: executing program 6 (id=661):
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20040086, &(0x7f00000000c0)={0xa, 0x4e20, 0x6, @loopback, 0x200}, 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000b40)=0x228a, 0x4)
sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x40000, 0x0, 0x0)

2.619565194s ago: executing program 6 (id=663):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc215, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080)
ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f00000001c0)={{0x3, 0x1, 0x400, 0xa, 0x1, 0xfe}, 0x6, [0x10001, 0x8, 0x814, 0x80000001, 0x7ff, 0x8, 0x0, 0x8, 0x8, 0x0, 0x1, 0x9, 0x72, 0x1, 0x6, 0x88e0, 0x7fffffff, 0x7, 0x909, 0x40, 0x104, 0xfffffffe, 0x3, 0x5, 0xa4b0, 0x8, 0x8, 0x40, 0x5, 0x1, 0xa, 0xdbc, 0x6, 0xbbe, 0x4, 0xf, 0xffffffff, 0xfff, 0x2c000000, 0x0, 0x81d4, 0x8, 0x7f, 0x0, 0x7, 0xffffffff, 0x40, 0xa5, 0x8001, 0xa7b, 0xfff, 0x3, 0xfff, 0x4, 0xaa92, 0x6, 0x2, 0x4, 0x3, 0x9, 0x6, 0xdc3, 0x400, 0x1, 0x0, 0x9, 0xfbd, 0x1, 0xffffffff, 0x10, 0x4000, 0x5, 0x0, 0xa8, 0xc, 0x6, 0x4, 0x400, 0x86df, 0x10001, 0x566, 0x7fff, 0x0, 0x5, 0x8f, 0xa2de, 0x2, 0x7, 0x5, 0x4, 0x876b, 0x8, 0x4f1a2ae9, 0x40, 0xcda, 0x7, 0x4, 0x9, 0x0, 0x40, 0x0, 0x1, 0xf, 0x720, 0x9, 0x0, 0x6, 0xa, 0xe, 0x6, 0x7, 0x38, 0x7, 0xc, 0x6, 0x35ba85f, 0x1, 0x4, 0x5, 0xfffffff9, 0x3, 0x2fa8, 0x400, 0x0, 0x80000001, 0x1, 0x707e, 0x1, 0x4, 0xffff431e, 0x6, 0x7, 0x3, 0x7, 0x7, 0x6, 0x0, 0x7, 0x8, 0x2, 0x4, 0x7, 0xb3, 0x80000000, 0x4, 0x8, 0xb5, 0xfffffff7, 0xd010, 0x6, 0x52ccec90, 0x4, 0x0, 0x7, 0xfffffc00, 0x3, 0xc, 0xbe, 0x5, 0x80b, 0x1, 0x7, 0x5c, 0xc, 0x4, 0x7, 0x995, 0x10, 0x80, 0x8, 0x36f5, 0x9, 0x0, 0x0, 0x8f, 0x2, 0x66a, 0x9, 0x8000, 0x4, 0x6, 0xd99c, 0x200, 0x0, 0xfb86, 0x6, 0x8, 0x90, 0x1, 0x2, 0x1, 0x6, 0x0, 0x9, 0x7fff0000, 0x32, 0x5, 0x7, 0x9, 0x5, 0xca, 0x800000, 0x7, 0x5, 0xa43, 0x2, 0x3, 0x7, 0x389afabc, 0x10000, 0xfffffff9, 0x0, 0x9, 0x400, 0x5, 0x2, 0x8, 0x3, 0x95, 0x2, 0x6, 0xffff, 0xc, 0x401, 0x5d, 0x1, 0x5bbd, 0x6, 0x0, 0x3, 0x8, 0xfffffffb, 0x9, 0x8, 0x3, 0xd, 0x6f, 0x3, 0x5, 0xfffffff9, 0x4, 0x0, 0xb32e, 0x8, 0x80, 0x9, 0xa, 0x9, 0xffff8001, 0x7, 0x9, 0x8, 0xffffffff, 0xf452, 0x5, 0x9, 0x2, 0x16, 0x0, 0x7, 0x80, 0x400, 0x8, 0x9, 0x8, 0x4, 0x9, 0x4, 0x970, 0x8, 0x0, 0x5, 0x5, 0xa797, 0x6, 0x800, 0x769f, 0x5, 0x2, 0x0, 0x1000000, 0x7fff, 0x6, 0x20000, 0x6, 0x101, 0x7, 0x4, 0xee21, 0x90b9, 0x8, 0xb1ef, 0x5, 0xea9, 0x10001, 0x2, 0x0, 0x18000, 0x0, 0x8, 0xffff, 0x40, 0x8, 0x2, 0x828, 0x8, 0x80000000, 0x7, 0x7, 0xc346, 0x2b7, 0x174, 0x873, 0xffff7fff, 0x321, 0x6b7, 0x9, 0x0, 0x3, 0x7, 0x2610d534, 0x6, 0x100, 0x9, 0x1, 0x6, 0x7, 0xc30, 0x1000, 0x9, 0xc4, 0x12d617f1, 0x2, 0x30a3, 0x800, 0x5, 0xffff, 0x5, 0x9c, 0x9, 0x16e, 0xe60, 0x2, 0x6c000000, 0xe, 0x1, 0x8, 0x800, 0x200, 0x8, 0x0, 0x14, 0x1, 0x8, 0xe, 0x42ccd6ba, 0x2, 0xcc33, 0x3, 0x3, 0x8001, 0x0, 0x0, 0xfffffff7, 0x7ff, 0x0, 0x8, 0x6, 0x1, 0x2, 0x80000000, 0x81, 0x3000000, 0x7, 0x80000001, 0x2, 0x7, 0x8cc2, 0x7, 0x8000, 0x4, 0x5, 0x3, 0x10, 0x2, 0x7, 0x9, 0xfffffff8, 0xfffff4eb, 0x0, 0x7, 0x1941, 0x0, 0xb, 0x1ba5, 0x10001, 0x1, 0x7, 0x12, 0x3, 0x2, 0xbb, 0x40, 0x7, 0xfff, 0x3, 0x7, 0x1000, 0x91, 0x9, 0xa, 0x4, 0x65e3, 0x6, 0x9, 0xb855, 0xfff, 0x10, 0x9, 0xd, 0x1, 0x5, 0x9, 0x800, 0x4, 0x8, 0x3, 0x3, 0x4, 0x4, 0x9, 0x85, 0x5, 0x7, 0x7b55, 0x582ab2bf, 0x40, 0x0, 0x2, 0xffffffff, 0x2e3, 0xd643, 0x3, 0xc, 0x8, 0x7, 0x5, 0xa, 0x5b48, 0xd90, 0xfff, 0x2ac, 0x3ff, 0xffffffc0, 0xfff, 0x3, 0x80200, 0x8, 0x0, 0xec, 0x7, 0xfffffad7, 0x11, 0x8d, 0x5, 0x3, 0x205, 0xefab, 0x0, 0x8f, 0x7, 0x85, 0x7, 0x5, 0x4, 0x8, 0x5, 0x0, 0x401, 0x401, 0x4fb5, 0x6, 0x6cf2, 0x2, 0x7, 0x7e3c, 0xd18, 0x5, 0x9, 0x4, 0x9, 0xfffffffc, 0x58e, 0x2, 0x2, 0x3, 0x200, 0x80, 0x6, 0xfed2, 0x3, 0xfffffff2, 0x6, 0x5, 0x7ff, 0x8d52, 0x2, 0x0, 0x100, 0x6, 0x40, 0x0, 0x5, 0x8, 0x7, 0x3, 0xf, 0x0, 0x1, 0xf41, 0x1, 0x9, 0x6, 0x4, 0xffffffc0, 0x7, 0x6, 0x3, 0x4, 0xac4, 0x5, 0x5, 0xcb, 0x1, 0xffffffff, 0x0, 0x3, 0x95, 0x80000000, 0xff, 0x6, 0xffff, 0x1, 0xb36, 0x4, 0x6, 0x9, 0x10001, 0x6, 0x9, 0x925e, 0x8, 0x6, 0xff, 0x2, 0x40c, 0x3, 0x1, 0xd, 0x10, 0xfffffffb, 0x1e7, 0xfffff801, 0x7f, 0x3, 0x0, 0x2, 0xffffffd9, 0x76, 0x1, 0x9, 0x636, 0x4, 0x5, 0x2, 0x0, 0xfffffffb, 0xa, 0x0, 0x2a, 0xb035, 0x2, 0x9, 0x3, 0x3, 0x80000001, 0xa000000, 0x0, 0x1e2, 0xe, 0xf7aa, 0x80000000, 0x9, 0x1000000, 0x5, 0x7, 0x2, 0xffffff2b, 0xffff, 0xfffffffc, 0x6, 0xbccf, 0x210, 0xe, 0x1200, 0xffffffb5, 0x1ff, 0x4, 0xf, 0x9, 0x7, 0x6, 0x7fffffff, 0x9, 0x9, 0x3, 0x171, 0xb6, 0xe63d, 0x8, 0x8, 0x4, 0x8, 0x3, 0x54b6, 0xfffffffb, 0x7, 0x101, 0x7, 0x0, 0xc, 0xa04c, 0x2, 0x8, 0xfff, 0x3, 0x400, 0x8, 0x7f, 0x3, 0x80, 0x1b, 0x101, 0x80, 0xf7, 0x4, 0x7, 0x6, 0x1, 0x3, 0x8, 0x0, 0x3, 0x8, 0xf, 0x5, 0xfffffffb, 0x2, 0x4, 0x6, 0x85b5, 0xffff, 0x401, 0x7fffffff, 0x2, 0xb860, 0x7, 0x3ff, 0x2c7, 0x9, 0x4, 0xf, 0x0, 0x101, 0x4, 0x4, 0x4, 0x6, 0x401, 0x6f, 0x7, 0xf075, 0x1, 0x80000000, 0x101, 0xfffffff8, 0x26, 0x5, 0xfffffffa, 0xfff, 0x7, 0x4, 0x800, 0x9, 0x1000, 0x2, 0x80000001, 0xb, 0x7, 0x7ff, 0x5, 0xc8, 0x1, 0x8, 0x401, 0x222, 0x4, 0x4, 0x0, 0x5, 0x1, 0x9, 0x7, 0x4, 0xa, 0x8, 0x2, 0x14000000, 0x1212, 0x6, 0x799ea642, 0x1, 0x6, 0xcd3, 0x4, 0x4, 0x1ff, 0x6, 0x6, 0x9, 0x1ff, 0x0, 0xfd7b, 0x7, 0x7, 0x2, 0xc, 0x0, 0x40, 0x3, 0x7, 0x8, 0xe34, 0x4, 0xfffffffd, 0x1, 0x6, 0xe1d, 0xe5, 0x0, 0x2, 0x0, 0x6, 0x800, 0x1, 0xc, 0x745, 0x40, 0x7, 0xc1, 0x6, 0x7f34, 0x676, 0x4, 0xf, 0x4, 0x8000, 0x8000, 0x5, 0x8, 0x8000, 0x5f5c, 0x683a, 0x1, 0x5, 0xb9, 0x0, 0x8, 0x6000, 0x9, 0x0, 0x0, 0x1ff, 0x6, 0x6, 0x7a0, 0x0, 0x81c, 0x9, 0x1, 0x1000, 0x9, 0x9, 0x2, 0xd, 0x7, 0x1, 0x3, 0x6, 0x7e5, 0x8, 0x10000, 0x9, 0x2, 0x9, 0x2f, 0x77c9, 0x5, 0x9, 0xd8, 0x0, 0x3, 0x1, 0x5, 0x6, 0x0, 0x5, 0xfffffffc, 0x7a5, 0x987, 0x9, 0x8, 0x9, 0x44, 0x9, 0x3, 0xbd5c, 0x4, 0x3, 0x9, 0x3, 0x1a, 0x99bdbece, 0x7ff, 0x6, 0x1, 0x8000, 0x2, 0x1000, 0x3ff, 0xf, 0xc3, 0x9, 0xf0000000, 0x2, 0x4, 0x10, 0xfffffab5, 0x6347, 0x7fffffff, 0xf, 0x8, 0x6, 0x2, 0x3, 0x400, 0xfffffc01, 0xf07, 0x4, 0x6, 0xd, 0x7, 0x3ff, 0xfffffffd, 0x6, 0x100, 0x4, 0xfffffffd, 0xfffffff9, 0xae9, 0x95b2, 0x8, 0x8, 0x8, 0x3, 0x3, 0x1, 0x7ff, 0x5, 0xb5, 0x5, 0x200, 0xff, 0xffffefa9, 0x7fffffff, 0x8, 0x83a, 0x8, 0x6828aa25, 0xffffffe5, 0x1800000, 0x81, 0x2, 0x5, 0x8000, 0x6, 0x7, 0x2, 0x7, 0x8000, 0x9, 0x10, 0x6, 0x24, 0x7, 0x8216, 0x5e1d, 0x9, 0xa, 0x3, 0x0, 0x80000000, 0xa8, 0xd, 0x800, 0x5, 0x1ff, 0x7ff, 0x27, 0x9, 0x7, 0x1, 0x5, 0x5, 0xb7ab, 0x4, 0x7, 0x2b800, 0x9, 0x7b93, 0x0, 0x7c, 0x8, 0x6, 0x6, 0xff, 0xffffffff, 0x400, 0x0, 0x3, 0x400, 0x0, 0x9ca, 0x8, 0x63bf, 0x9, 0x4, 0x6, 0xfffff001, 0x9, 0x7, 0x7, 0x7, 0x44d, 0x9, 0xd94, 0x8000, 0x149e, 0x75ea, 0x3, 0x2, 0xffffffff, 0x7, 0xa9ac, 0x8, 0x2, 0x8, 0xffffffff, 0x7, 0x6, 0x3, 0x3, 0x219, 0x4, 0x6, 0x5, 0x9, 0x0, 0x3, 0xd, 0x10000, 0x9, 0xec3d, 0x200, 0x3, 0x21c, 0x6, 0x64, 0x26, 0x5, 0xff, 0xc2a5, 0x695bd36b, 0x0, 0x578, 0x4, 0xc2, 0x401, 0x7, 0xf, 0x4, 0x2, 0x92b1, 0xce8, 0x3, 0x1, 0x7, 0x8, 0x3, 0xa, 0x2, 0x6932d36f, 0xfffffff8, 0x8, 0xa78e, 0x4, 0x16b, 0x7c8, 0x1000, 0xc82, 0xd4, 0x9, 0xbdab, 0x4]})

2.619437794s ago: executing program 5 (id=664):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x283016, 0x0, 0x13, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]})
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)
mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

2.480264176s ago: executing program 5 (id=666):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
io_setup(0x2, &(0x7f0000000000)=<r0=>0x0)
r1 = eventfd(0x0)
io_submit(r0, 0x2, &(0x7f0000000080)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r1, &(0x7f0000000180)="010007000000f500", 0x8, 0x32, 0x0, 0x0, r1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0, 0x0, 0x6, 0x0, 0x3, r1}])
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

2.185623063s ago: executing program 5 (id=672):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8402, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x2000000000000004)
ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000440))

1.635613468s ago: executing program 2 (id=674):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_INTERRUPT(r2, 0x4004ae86, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0010140, 0x0, 0xffffffff80000000}]})

1.548363458s ago: executing program 2 (id=675):
syz_emit_ethernet(0x76, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a}, @fragment={0x4, 0x0, 0xb9, 0x1, 0x0, 0x12, 0x65}]}}}}}}}, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', <r1=>0x0})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x41}, @empty, 0x7, 0x7fff, 0x3d, 0x500, 0x5, 0x19c0000, r1})

921.18421ms ago: executing program 6 (id=676):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80)
sendfile(r0, r0, 0x0, 0x1000000201005)

920.6711ms ago: executing program 0 (id=686):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r0}, 0x20)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2810000, &(0x7f00000001c0)={[{@user_xattr}, {@nogrpid}, {@noinit_itable}, {@nogrpid}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nojournal_checksum}, {@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x1000}}, {@jqfmt_vfsv0}, {@data_err_ignore}]}, 0x1, 0x57a, &(0x7f0000000300)="$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")
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r2, &(0x7f0000000300)="9242f1ab"}, 0x20)

920.30629ms ago: executing program 2 (id=677):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0046209, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

880.897809ms ago: executing program 1 (id=678):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x283016, 0x0, 0x13, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]})
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)
mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

880.792649ms ago: executing program 2 (id=679):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x210080, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@minixdf}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x13}}, {@abort}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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")
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r0, &(0x7f0000000740)='E', 0x1, 0x4fed3)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4f003, 0x100000001, 0x3})

773.572634ms ago: executing program 0 (id=680):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)='DV', 0x2}], 0x1}, 0x4048841)
recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}, 0x1)
recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/48, 0x30}], 0x1}, 0x0)

733.140323ms ago: executing program 1 (id=681):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x80000009}}}, 0x10, 0x0}, 0x0)

709.594518ms ago: executing program 0 (id=682):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000000), 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r1, 0xffffffffffffffff, 0x0)

610.151981ms ago: executing program 0 (id=683):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
io_setup(0x2, &(0x7f0000000000)=<r0=>0x0)
r1 = eventfd(0x0)
io_submit(r0, 0x2, &(0x7f0000000080)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r1, &(0x7f0000000180)="010007000000f500", 0x8, 0x32, 0x0, 0x0, r1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0, 0x0, 0x6, 0x0, 0x3, r1}])
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

604.905212ms ago: executing program 1 (id=684):
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
r1 = socket(0x2, 0x3, 0xff)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_int(r1, 0x0, 0x4, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xffba83)

589.243525ms ago: executing program 2 (id=685):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x7ff)

561.692202ms ago: executing program 1 (id=687):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x14800, &(0x7f0000000140)={[{@noauto_da_alloc}, {@dioread_lock}, {@oldalloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x5b9, &(0x7f0000000680)="$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")
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x850ce, 0x0, 0x1, 0x0, &(0x7f0000000140))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
open(0x0, 0x94100, 0x19d)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

490.392878ms ago: executing program 1 (id=688):
syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x6000000d})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000a})

464.076824ms ago: executing program 2 (id=689):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000a"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000850000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000e8ff0000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6(0xa, 0x5, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

445.477368ms ago: executing program 1 (id=690):
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000)

131.71501ms ago: executing program 5 (id=691):
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20040086, &(0x7f00000000c0)={0xa, 0x4e20, 0x6, @loopback, 0x200}, 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000b40)=0x228a, 0x4)
sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x40000, 0x0, 0x0)

82.491181ms ago: executing program 5 (id=692):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x4, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40d0}, 0x24040844)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0)
sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010026bd07000000fef811"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4004000)

0s ago: executing program 5 (id=693):
r0 = socket$netlink(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x1f, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xe}}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

 bcdDevice= 0.40
[   29.162949][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   29.182216][   T24] usb 3-1: Product: syz
[   29.186603][   T24] usb 3-1: Manufacturer: syz
[   29.191234][   T24] usb 3-1: SerialNumber: syz
[   29.197241][  T311] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   29.206041][   T24] hub 3-1:1.0: bad descriptor, ignoring hub
[   29.217690][   T24] hub: probe of 3-1:1.0 failed with error -5
[   29.276603][   T19] scsi host1: usb-storage 2-1:1.0
[   29.283537][   T19] usb 2-1: USB disconnect, device number 2
[   29.304279][   T28] audit: type=1400 audit(1790748747.968:159): avc:  denied  { mount } for  pid=424 comm="syz.0.39" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   29.389745][  T311] usb 5-1: unable to get BOS descriptor or descriptor too short
[   29.401145][  T311] usb 5-1: unable to read config index 0 descriptor/start: -71
[   29.409330][  T311] usb 5-1: can't read configurations, error -71
[   29.412594][   T24] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   29.455620][  T432] syz.3.41 (432) used greatest stack depth: 21472 bytes left
[   29.555800][  T441] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   29.565056][  T441] EXT4-fs (loop0): orphan cleanup on readonly fs
[   29.572972][  T441] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.45: Failed to acquire dquot type 1
[   29.585869][  T441] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.45: bg 0: block 40: padding at end of block bitmap is not set
[   29.592281][  T439] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[   29.610403][  T441] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem
[   29.623720][  T441] EXT4-fs (loop0): 1 truncate cleaned up
[   29.629810][  T441] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   29.647640][   T24] usb 3-1: reset high-speed USB device number 2 using dummy_hcd
[   29.657716][  T290] EXT4-fs (loop0): unmounting filesystem.
[   29.750873][  T458] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   29.759654][  T458] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   29.774664][  T458] syz.0.53 (pid 458) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   29.806583][  T290] EXT4-fs (loop0): unmounting filesystem.
[   30.125347][  T487] EXT4-fs error (device loop1): ext4_get_journal_inode:5749: comm syz.1.66: inode #2147418112: comm syz.1.66: iget: illegal inode #
[   30.156128][  T487] EXT4-fs (loop1): no journal found
[   30.172960][  T487] EXT4-fs (loop1): can't get journal size
[   30.178899][   T24] usb 3-1: USB disconnect, device number 2
[   30.188432][   T24] usblp0: removed
[   30.211599][  T487] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[   30.221695][  T487] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[   30.230533][  T487] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   30.251909][  T287] EXT4-fs (loop1): unmounting filesystem.
[   30.368313][  T495] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   30.405738][  T495] EXT4-fs (loop1): re-mounted. Quota mode: writeback.
[   30.440430][  T287] EXT4-fs (loop1): unmounting filesystem.
[   30.470986][  T452] F2FS-fs (loop3): invalid crc value
[   30.497814][  T452] F2FS-fs (loop3): Found nat_bits in checkpoint
[   30.533723][  T452] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[   30.545369][  T452] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   30.683674][  T518] EXT4-fs: Ignoring removed bh option
[   30.696967][  T518] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   30.718829][  T518] EXT4-fs (loop2): 1 truncate cleaned up
[   30.724592][  T518] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   30.757651][  T518] overlayfs: upper fs needs to support d_type.
[   30.790425][  T518] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[   30.830669][  T291] EXT4-fs (loop2): unmounting filesystem.
[   30.937508][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   30.965680][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   30.989526][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   30.998657][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   31.007597][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[   31.032678][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   31.041652][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   31.050602][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   31.061241][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   31.070193][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   31.089147][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   31.090917][  T504] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (512, 24)
[   31.100322][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   31.115033][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   31.124012][  T504] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   31.132592][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   31.142038][  T504] F2FS-fs (loop0): Test dummy encryption mode enabled
[   31.149184][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   31.159954][  T504] F2FS-fs (loop0): invalid crc value
[   31.174561][  T504] F2FS-fs (loop0): Found nat_bits in checkpoint
[   31.217547][  T538] xt_hashlimit: size too large, truncated to 1048576
[   31.259601][  T504] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[   31.282152][  T504] F2FS-fs (loop0): Start checkpoint disabled!
[   31.295354][  T504] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[   31.318672][  T504] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   31.335913][  T504] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   31.487776][   T10] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[   31.509059][  T555] exfat: Deprecated parameter 'namecase'
[   31.536844][  T555] exfat: Deprecated parameter 'namecase'
[   31.578075][  T555] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[   31.651832][  T559] Unable to locate . in name.bConfigurationValue
[   31.879471][  T557] set_capacity_and_notify: 14 callbacks suppressed
[   31.879493][  T557] loop1: detected capacity change from 0 to 40427
[   31.906601][  T557] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64)
[   31.914525][  T557] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   31.929829][  T557] F2FS-fs (loop1): Image doesn't support compression
[   31.945389][  T557] F2FS-fs (loop1): Image doesn't support compression
[   31.954623][  T578] loop0: detected capacity change from 0 to 512
[   31.957326][  T557] F2FS-fs (loop1): invalid crc value
[   31.972535][  T557] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   31.985529][  T578] binder: 577:578 ioctl c018620c 200000000000 returned -22
[   32.017292][  T583] loop4: detected capacity change from 0 to 256
[   32.048198][  T557] F2FS-fs (loop1): Start checkpoint disabled!
[   32.068312][  T557] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[   33.306073][    C0] sched: RT throttling activated
[   33.308560][  T311] usb 3-1: new low-speed USB device number 3 using dummy_hcd
[   33.309929][  T557] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   33.328397][  T557] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   34.332638][  T557] F2FS-fs (loop1): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[   34.382395][   T28] kauditd_printk_skb: 64 callbacks suppressed
[   34.382411][   T28] audit: type=1400 audit(1790748753.048:222): avc:  denied  { write } for  pid=594 comm="syz.4.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   34.419242][  T311] usb 3-1: config index 0 descriptor too short (expected 1307, got 27)
[   34.429479][   T28] audit: type=1400 audit(1790748753.088:223): avc:  denied  { nlmsg_write } for  pid=594 comm="syz.4.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   34.439019][  T311] usb 3-1: config 0 has an invalid interface number: 0 but max is -1
[   34.462546][   T28] audit: type=1400 audit(1790748753.088:224): avc:  denied  { nlmsg_read } for  pid=594 comm="syz.4.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   34.484018][   T43] kworker/u4:2: attempt to access beyond end of device
[   34.484018][   T43] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   34.487069][  T597] loop0: detected capacity change from 0 to 2048
[   34.510114][  T311] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0
[   34.516576][   T28] audit: type=1400 audit(1790748753.098:225): avc:  denied  { setattr } for  pid=556 comm="syz.1.94" name="/" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   34.536198][  T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[   34.567890][  T311] usb 3-1: string descriptor 0 read error: -22
[   34.574367][   T28] audit: type=1400 audit(1790748753.238:226): avc:  denied  { read } for  pid=598 comm="syz.3.112" name="usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   34.578394][  T311] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[   34.606722][  T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   34.615808][  T597] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   34.619078][   T28] audit: type=1400 audit(1790748753.238:227): avc:  denied  { open } for  pid=598 comm="syz.3.112" path="/dev/usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   34.627318][  T311] usb 3-1: config 0 descriptor??
[   34.649691][  T597] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.663194][  T571] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   34.673615][  T597] fs-verity: sha256 using implementation "sha256-avx2"
[   34.681120][  T311] hub 3-1:0.0: bad descriptor, ignoring hub
[   34.686574][   T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   34.695671][   T28] audit: type=1400 audit(1790748753.238:228): avc:  denied  { ioctl } for  pid=598 comm="syz.3.112" path="/dev/usbmon7" dev="devtmpfs" ino=180 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   34.696166][  T311] hub: probe of 3-1:0.0 failed with error -5
[   34.727845][  T311] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input4
[   34.739439][   T28] audit: type=1400 audit(1790748753.338:229): avc:  denied  { ioctl } for  pid=596 comm="syz.0.110" path="/24/file0/file0/file0" dev="loop0" ino=13 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   34.768809][   T28] audit: type=1400 audit(1790748753.418:230): avc:  denied  { read } for  pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=638 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   34.781732][  T290] EXT4-fs (loop0): unmounting filesystem.
[   34.792352][   T28] audit: type=1400 audit(1790748753.418:231): avc:  denied  { open } for  pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=638 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   34.842061][  T413] usb 3-1: USB disconnect, device number 3
[   34.866843][  T405] udevd[405]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory
[   34.882014][  T610] loop0: detected capacity change from 0 to 512
[   34.905293][  T610] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   34.914619][  T610] System zones: 1-12
[   34.916287][   T24] usb 5-1: Using ep0 maxpacket: 8
[   34.923776][  T610] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.113: missing EA_INODE flag
[   34.935793][  T610] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.113: error while reading EA inode 12 err=-117
[   34.939029][   T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   34.951665][  T610] EXT4-fs (loop0): 1 orphan inode deleted
[   34.964421][  T610] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   35.000966][  T615] device vlan0 entered promiscuous mode
[   35.007600][   T24] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   35.017599][  T615] device eth0 entered promiscuous mode
[   35.027095][   T24] usb 5-1: New USB device found, idVendor=0644, idProduct=8020, bcdDevice= 0.40
[   35.040308][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.052930][  T290] EXT4-fs (loop0): unmounting filesystem.
[   35.064904][   T24] usb 5-1: Product: syz
[   35.069690][   T24] usb 5-1: Manufacturer: syz
[   35.074419][   T24] usb 5-1: SerialNumber: syz
[   35.145487][  T619] loop0: detected capacity change from 0 to 4096
[   35.173746][  T619] EXT4-fs: Ignoring removed orlov option
[   35.191574][  T619] EXT4-fs (loop0): Test dummy encryption mode enabled
[   35.195711][  T625] input: syz1 as /devices/virtual/input/input5
[   35.229452][  T619] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   35.265319][  T619] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   35.290098][   T24] usb 5-1: unit 3 not found!
[   35.327656][  T290] EXT4-fs (loop0): unmounting filesystem.
[   35.344143][   T24] usb 5-1: USB disconnect, device number 4
[   35.350609][  T621] loop2: detected capacity change from 0 to 40427
[   35.360296][  T621] F2FS-fs (loop2): Invalid log blocks per segment (1)
[   35.367153][  T621] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   35.375390][  T621] F2FS-fs (loop2): fault_type options not supported
[   35.383313][  T621] F2FS-fs (loop2): fault_injection options not supported
[   35.390436][  T621] F2FS-fs (loop2): Image doesn't support compression
[   35.397874][  T621] F2FS-fs (loop2): invalid crc value
[   35.397887][  T405] udevd[405]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   35.469375][  T621] F2FS-fs (loop2): Found nat_bits in checkpoint
[   35.506185][  T635] loop0: detected capacity change from 0 to 4096
[   35.542909][  T635] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   35.596317][  T621] F2FS-fs (loop2): Start checkpoint disabled!
[   35.610009][  T638] loop3: detected capacity change from 0 to 256
[   35.622847][  T621] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[   35.631622][  T290] EXT4-fs (loop0): unmounting filesystem.
[   35.656380][  T621] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   35.673666][  T621] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   35.682113][  T405] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   35.749822][  T621] syz.2.120: attempt to access beyond end of device
[   35.749822][  T621] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   35.764673][  T647] loop0: detected capacity change from 0 to 2048
[   35.807730][  T647] GPT:first_usable_lbas don't match.
[   35.813129][  T647] GPT:34 != 290
[   35.821107][    T8] kworker/u4:0: attempt to access beyond end of device
[   35.821107][    T8] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   35.835209][  T647] GPT: Use GNU Parted to correct GPT errors.
[   35.841626][  T647]  loop0: p1 p2 p3
[   35.923610][  T608] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (512, 24)
[   35.936244][  T608] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   36.058368][  T608] F2FS-fs (loop1): Test dummy encryption mode enabled
[   36.105613][  T661] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   36.115383][  T608] F2FS-fs (loop1): invalid crc value
[   36.144392][  T665] sch_tbf: burst 65537 is lower than device lo mtu (65550) !
[   36.154312][  T661] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   36.167313][  T661] ext2 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.183006][  T608] F2FS-fs (loop1): Found nat_bits in checkpoint
[   36.190254][  T657] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   36.209656][  T657] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.276884][  T291] EXT4-fs (loop2): unmounting filesystem.
[   36.296862][  T288] EXT4-fs (loop3): unmounting filesystem.
[   36.308109][  T608] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[   36.321102][  T675] xt_hashlimit: size too large, truncated to 1048576
[   36.340234][  T608] F2FS-fs (loop1): Start checkpoint disabled!
[   36.348609][  T608] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[   36.368524][  T608] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[   36.382193][  T608] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   36.456321][  T608] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   36.469828][  T655] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0)
[   36.479296][  T655] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   36.487881][  T655] F2FS-fs (loop4): invalid crc value
[   36.516470][  T655] F2FS-fs (loop4): Found nat_bits in checkpoint
[   36.557577][  T655] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   36.564674][  T655] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   36.626217][  T655] F2FS-fs (loop4): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, max: 903
[   36.643059][  T655] F2FS-fs (loop4): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, max: 903
[   36.659567][    T8] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[   36.792255][  T701] exfat: Deprecated parameter 'utf8'
[   36.805259][  T701] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a991031, utbl_chksum : 0xe619d30d)
[   36.898397][  T701] incfs: ino conflict with backing FS 1
[   36.968654][  T713] set_capacity_and_notify: 5 callbacks suppressed
[   36.968670][  T713] loop3: detected capacity change from 0 to 512
[   37.029524][  T713] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   37.053433][  T719] loop2: detected capacity change from 0 to 512
[   37.073072][  T719] EXT4-fs: Ignoring removed mblk_io_submit option
[   37.086221][  T713] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   37.114901][  T719] EXT4-fs error (device loop2): ext4_iget_extra_inode:4765: inode #15: comm syz.2.154: corrupted in-inode xattr
[   37.127442][  T719] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.154: couldn't read orphan inode 15 (err -117)
[   37.139458][  T719] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   37.207869][  T291] EXT4-fs (loop2): unmounting filesystem.
[   37.217301][  T724] loop0: detected capacity change from 0 to 512
[   37.248626][  T724] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   37.258624][  T288] EXT4-fs (loop3): unmounting filesystem.
[   37.273403][  T728] loop2: detected capacity change from 0 to 16
[   37.292105][  T730] Driver unsupported XDP return value 0 on prog  (id 15) dev N/A, expect packet loss!
[   37.304861][  T724] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.156: iget: bad i_size value: 38620345925642
[   37.319280][  T728] erofs: (device loop2): mounted with root inode @ nid 36.
[   37.338933][  T728] erofs: (device loop2): erofs_find_target_block: corrupted dir block 8200 @ nid 36
[   37.348721][  T724] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.156: couldn't read orphan inode 15 (err -117)
[   37.368323][  T728] erofs: (device loop2): z_erofs_readahead: readahead error at page 22 @ nid 36
[   37.395172][  T728] erofs: (device loop2): z_erofs_readahead: readahead error at page 21 @ nid 36
[   37.416447][  T724] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   37.425488][  T728] erofs: (device loop2): z_erofs_readahead: readahead error at page 20 @ nid 36
[   37.441237][  T741] loop1: detected capacity change from 0 to 256
[   37.453990][  T728] erofs: (device loop2): z_erofs_readahead: readahead error at page 18 @ nid 36
[   37.488157][  T728] erofs: (device loop2): z_erofs_readahead: readahead error at page 16 @ nid 36
[   37.499936][  T290] EXT4-fs (loop0): unmounting filesystem.
[   37.517951][  T728] erofs: (device loop2): z_erofs_readahead: readahead error at page 12 @ nid 36
[   37.531003][  T728] erofs: (device loop2): z_erofs_readahead: readahead error at page 9 @ nid 36
[   37.548390][  T728] erofs: (device loop2): z_erofs_readahead: readahead error at page 8 @ nid 36
[   37.579404][  T728] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36
[   37.594908][  T755] loop1: detected capacity change from 0 to 128
[   37.601498][  T728] syz.2.158: attempt to access beyond end of device
[   37.601498][  T728] loop2: rw=524288, sector=67108872, nr_sectors = 16 limit=16
[   37.620678][  T728] syz.2.158: attempt to access beyond end of device
[   37.620678][  T728] loop2: rw=524288, sector=720, nr_sectors = 16 limit=16
[   37.635550][  T755] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   37.644125][  T728] syz.2.158: attempt to access beyond end of device
[   37.644125][  T728] loop2: rw=524288, sector=525144, nr_sectors = 16 limit=16
[   37.666361][  T728] syz.2.158: attempt to access beyond end of device
[   37.666361][  T728] loop2: rw=524288, sector=16, nr_sectors = 8 limit=16
[   37.680800][  T755] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   37.766733][  T287] EXT4-fs (loop1): unmounting filesystem.
[   37.817819][  T769] mmap: syz.2.176 (769) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   37.996215][  T289] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   38.197199][  T289] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   38.213468][  T289] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   38.235169][  T771] capability: warning: `syz.2.177' uses deprecated v2 capabilities in a way that may be insecure
[   38.245794][  T289] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[   38.245824][  T289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.245849][  T289] usb 1-1: Product: syz
[   38.245863][  T289] usb 1-1: Manufacturer: syz
[   38.245882][  T289] usb 1-1: SerialNumber: syz
[   38.255428][  T289] ums-sddr09 1-1:1.0: USB Mass Storage device detected
[   38.303297][  T733] loop3: detected capacity change from 0 to 131072
[   38.321226][  T733] F2FS-fs (loop3): invalid crc value
[   38.338395][  T776] loop2: detected capacity change from 0 to 256
[   38.356757][  T289] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[   38.356757][  T289]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[   38.386954][  T733] F2FS-fs (loop3): Found nat_bits in checkpoint
[   38.438556][  T776] FAT-fs (loop2): Directory bread(block 64) failed
[   38.476203][  T776] FAT-fs (loop2): Directory bread(block 65) failed
[   38.493448][  T776] FAT-fs (loop2): Directory bread(block 66) failed
[   38.514941][  T733] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[   38.534878][  T776] FAT-fs (loop2): Directory bread(block 67) failed
[   38.545012][  T776] FAT-fs (loop2): Directory bread(block 68) failed
[   38.562407][  T733] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   38.576659][  T776] FAT-fs (loop2): Directory bread(block 69) failed
[   38.606189][  T776] FAT-fs (loop2): Directory bread(block 70) failed
[   38.612765][  T776] FAT-fs (loop2): Directory bread(block 71) failed
[   38.636349][  T776] FAT-fs (loop2): Directory bread(block 72) failed
[   38.656501][  T776] FAT-fs (loop2): Directory bread(block 73) failed
[   38.695222][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   38.708311][  T776] xt_hashlimit: size too large, truncated to 1048576
[   38.714494][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   38.734140][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   38.764211][  T760] syz.4.172 (760) used greatest stack depth: 16992 bytes left
[   38.772067][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   38.784317][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[   38.803751][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   38.822814][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   38.840571][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   38.862301][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   38.881082][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   38.897437][  T289] ums-sddr09: probe of 1-1:1.0 failed with error -5
[   38.899971][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   38.916894][  T289] usb 1-1: USB disconnect, device number 3
[   38.936210][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   38.958113][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   38.975739][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   38.996655][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   39.120101][  T768] loop1: detected capacity change from 0 to 131072
[   39.147398][  T768] F2FS-fs (loop1): Test dummy encryption mode enabled
[   39.159884][  T768] F2FS-fs (loop1): invalid crc value
[   39.212055][  T768] F2FS-fs (loop1): Found nat_bits in checkpoint
[   39.296325][  T768] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   39.389039][  T768] fscrypt: AES-256-XTS using blk-crypto-fallback
[   39.438887][   T28] kauditd_printk_skb: 42 callbacks suppressed
[   39.438902][   T28] audit: type=1400 audit(1790748758.108:274): avc:  denied  { mount } for  pid=801 comm="syz.0.187" name="/" dev="ramfs" ino=18142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   39.499609][   T28] audit: type=1400 audit(1790748758.168:275): avc:  denied  { unmount } for  pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   39.836130][  T221] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   39.957303][  T824] loop2: detected capacity change from 0 to 1024
[   39.986984][  T824] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002]
[   40.006242][  T824] System zones: 0-1, 3-36
[   40.016571][  T824] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.195: bad orphan inode 134217728
[   40.028072][  T221] usb 4-1: not running at top speed; connect to a high speed hub
[   40.046482][  T221] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   40.047139][  T824] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   40.066100][  T221] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[   40.085162][  T221] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[   40.094293][  T221] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.113540][   T28] audit: type=1400 audit(1790748758.778:276): avc:  denied  { load_policy } for  pid=826 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   40.116581][  T221] usb 4-1: Found UVC 1.00 device <unnamed> (046d:0825)
[   40.154167][  T827] SELinux: failed to load policy
[   40.170983][  T291] EXT4-fs (loop2): unmounting filesystem.
[   40.273608][  T839] tun0: tun_chr_ioctl cmd 1074025677
[   40.279077][  T839] tun0: linktype set to 823
[   40.284857][  T833] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   41.326290][  T833] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.331656][  T221] usb 4-1: Failed to query (GET_INFO) UVC control 1 on unit 1: -32 (exp. 1).
[   42.418711][  T847] set_capacity_and_notify: 1 callbacks suppressed
[   42.418731][  T847] loop2: detected capacity change from 0 to 256
[   42.442832][  T292] EXT4-fs (loop4): unmounting filesystem.
[   42.459255][  T847] exfat: Deprecated parameter 'utf8'
[   42.472031][  T847] exfat: Deprecated parameter 'utf8'
[   42.478141][  T847] exfat: Deprecated parameter 'utf8'
[   42.483882][  T847] exfat: Deprecated parameter 'namecase'
[   42.506780][  T847] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   42.509430][  T849] FAULT_INJECTION: forcing a failure.
[   42.509430][  T849] name failslab, interval 1, probability 0, space 0, times 1
[   42.531856][  T849] CPU: 0 PID: 849 Comm: syz.4.205 Not tainted syzkaller #0
[   42.539091][  T849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   42.549194][  T849] Call Trace:
[   42.552507][  T849]  <TASK>
[   42.555463][  T849]  __dump_stack+0x21/0x24
[   42.559888][  T849]  dump_stack_lvl+0x110/0x170
[   42.564614][  T849]  ? __cfi_dump_stack_lvl+0x8/0x8
[   42.569694][  T849]  dump_stack+0x15/0x24
[   42.573895][  T849]  should_fail_ex+0x3bf/0x510
[   42.578618][  T849]  __should_failslab+0xac/0xf0
[   42.583440][  T849]  should_failslab+0x9/0x20
[   42.587973][  T849]  __kmem_cache_alloc_node+0x3d/0x2d0
[   42.593409][  T849]  ? alloc_tty_struct+0xa3/0x760
[   42.598400][  T849]  ? alloc_tty_struct+0xa3/0x760
[   42.603379][  T849]  kmalloc_trace+0x29/0xb0
[   42.607937][  T849]  alloc_tty_struct+0xa3/0x760
[   42.612755][  T849]  ? __cfi_ida_alloc_range+0x10/0x10
[   42.618090][  T849]  ? __cfi_alloc_tty_struct+0x10/0x10
[   42.623518][  T849]  ? __kasan_check_write+0x14/0x20
[   42.628670][  T849]  ? mutex_lock+0x93/0x1b0
[   42.633143][  T849]  ? __cfi_mutex_lock+0x10/0x10
[   42.638169][  T849]  tty_init_dev+0x59/0x4e0
[   42.642642][  T849]  ? devpts_new_index+0xe2/0x160
[   42.647674][  T849]  ptmx_open+0xdd/0x2f0
[   42.651891][  T849]  chrdev_open+0x593/0x600
[   42.656350][  T849]  ? __cfi_chrdev_open+0x10/0x10
[   42.657499][   T28] audit: type=1400 audit(1790748761.218:277): avc:  denied  { read } for  pid=846 comm="syz.2.204" path=2F34382FE91F7189591E9233614B2F66696C6531 dev="loop2" ino=1048620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   42.661406][  T849]  ? fsnotify_perm+0x3e9/0x5b0
[   42.661447][  T849]  do_dentry_open+0x885/0x11f0
[   42.696095][  T849]  ? __cfi_chrdev_open+0x10/0x10
[   42.701083][  T849]  vfs_open+0x73/0x80
[   42.705115][  T849]  path_openat+0x2699/0x2f30
[   42.709761][  T849]  ? slab_post_alloc_hook+0x4f/0x2d0
[   42.715094][  T849]  ? kmem_cache_alloc+0x166/0x320
[   42.720170][  T849]  ? getname_flags+0xba/0x510
[   42.724878][  T849]  ? do_sys_openat2+0xeb/0x820
[   42.729695][  T849]  ? do_filp_open+0x420/0x420
[   42.734426][  T849]  do_filp_open+0x1ee/0x420
[   42.738962][  T849]  ? __cfi_do_filp_open+0x10/0x10
[   42.744005][  T849]  ? alloc_fd+0x4c1/0x570
[   42.748358][  T849]  do_sys_openat2+0x15e/0x820
[   42.753069][  T849]  ? __se_sys_futex+0x136/0x310
[   42.757942][  T849]  ? do_sys_open+0xe0/0xe0
[   42.762383][  T849]  ? __this_cpu_preempt_check+0x13/0x20
[   42.767963][  T849]  ? xfd_validate_state+0x70/0x150
[   42.773157][  T849]  __x64_sys_openat+0x136/0x160
[   42.778038][  T849]  x64_sys_call+0x783/0x9a0
[   42.782591][  T849]  do_syscall_64+0x4c/0xa0
[   42.787046][  T849]  ? clear_bhb_loop+0x30/0x80
[   42.791773][  T849]  ? clear_bhb_loop+0x30/0x80
[   42.796477][  T849]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   42.802397][  T849] RIP: 0033:0x7fb09c99e159
[   42.806888][  T849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   42.826535][  T849] RSP: 002b:00007fb09d89e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   42.835000][  T849] RAX: ffffffffffffffda RBX: 00007fb09cc25fa0 RCX: 00007fb09c99e159
[   42.843019][  T849] RDX: 0000000000080782 RSI: 00002000000000c0 RDI: ffffffffffffff9c
[   42.851073][  T849] RBP: 00007fb09ca3506b R08: 0000000000000000 R09: 0000000000000000
[   42.859081][  T849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   42.867062][  T849] R13: 00007fb09cc26038 R14: 00007fb09cc25fa0 R15: 00007ffd34a0dab8
[   42.875060][  T849]  </TASK>
[   42.880401][  T221] usb 4-1: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1).
[   42.897803][   T28] audit: type=1400 audit(1790748761.568:278): avc:  denied  { create } for  pid=851 comm="syz.2.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   42.918591][  T221] usb 4-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1).
[   42.928477][  T221] usb 4-1: No streaming interface found for terminal 2.
[   42.935859][   T28] audit: type=1400 audit(1790748761.568:279): avc:  denied  { write } for  pid=851 comm="syz.2.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   42.956124][  T311] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   42.965582][  T221] usb 4-1: USB disconnect, device number 2
[   43.001158][  T859] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring
[   43.026580][  T862] loop4: detected capacity change from 0 to 512
[   43.036058][  T862] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[   43.045973][  T862] EXT4-fs (loop4): 1 truncate cleaned up
[   43.051814][  T862] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   43.063685][  T862] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[   43.077279][  T292] EXT4-fs (loop4): unmounting filesystem.
[   43.109755][  T871] loop2: detected capacity change from 0 to 1024
[   43.117005][  T871] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   43.137702][  T871] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   43.148267][  T311] usb 1-1: unable to get BOS descriptor or descriptor too short
[   43.156917][  T311] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   43.175157][  T311] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[   43.188095][  T291] EXT4-fs (loop2): unmounting filesystem.
[   43.196912][  T875] loop1: detected capacity change from 0 to 128
[   43.209073][  T311] usb 1-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40
[   43.225683][   T28] audit: type=1400 audit(1790748761.888:280): avc:  denied  { write } for  pid=876 comm="syz.2.215" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   43.234156][  T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.262726][  T311] usb 1-1: Product: syz
[   43.267191][  T311] usb 1-1: Manufacturer: syz
[   43.271118][  T875] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   43.272025][  T311] usb 1-1: SerialNumber: syz
[   43.281396][  T875] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.309776][  T287] EXT4-fs (loop1): unmounting filesystem.
[   43.349628][  T887] x86/PAT: syz.2.219:887 freeing invalid memtype [mem 0xfe004000-0xfe005fff]
[   43.368671][  T889] loop1: detected capacity change from 0 to 256
[   43.385154][   T28] audit: type=1326 audit(1790748762.048:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=890 comm="syz.2.221" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c679e159 code=0x7ffc0000
[   43.410696][   T28] audit: type=1326 audit(1790748762.048:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=890 comm="syz.2.221" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c679e159 code=0x7ffc0000
[   43.439776][   T28] audit: type=1326 audit(1790748762.048:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=890 comm="syz.2.221" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c679e159 code=0x7ffc0000
[   43.482747][  T889] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d)
[   43.502254][  T311] usb 1-1: 1:1 : bogus bTerminalLink 9
[   43.516276][  T311] snd-usb-audio: probe of 1-1:1.0 failed with error -2
[   43.529248][  T311] usb 1-1: 1:1 : bogus bTerminalLink 9
[   43.542571][  T311] snd-usb-audio: probe of 1-1:1.1 failed with error -2
[   43.553711][  T895] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿ
[   43.561455][  T311] usb 1-1: 1:1 : bogus bTerminalLink 9
[   43.572676][  T311] snd-usb-audio: probe of 1-1:1.2 failed with error -2
[   43.582376][  T897] loop3: detected capacity change from 0 to 256
[   43.597172][  T405] udevd[405]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   43.613149][  T311] usb 1-1: USB disconnect, device number 4
[   43.625399][  T897] exfat: Deprecated parameter 'utf8'
[   43.635151][  T897] exfat: Deprecated parameter 'namecase'
[   43.651058][  T897] exfat: Deprecated parameter 'namecase'
[   43.657827][  T897] exfat: Deprecated parameter 'namecase'
[   43.663590][  T897] exfat: Deprecated parameter 'namecase'
[   43.686879][  T902] loop1: detected capacity change from 0 to 1024
[   43.697229][  T897] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x26a8b90f, utbl_chksum : 0xe619d30d)
[   43.703252][  T902] EXT4-fs: Ignoring removed nomblk_io_submit option
[   43.738440][  T902] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   43.747061][  T902] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.763732][  T906] loop2: detected capacity change from 0 to 256
[   43.778300][  T287] EXT4-fs (loop1): unmounting filesystem.
[   43.796365][  T908] loop1: detected capacity change from 0 to 128
[   43.804695][  T908] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   43.813611][  T908] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   43.857116][  T287] EXT4-fs (loop1): unmounting filesystem.
[   44.111893][  T932] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(3)
[   44.139097][  T934] loop4: detected capacity change from 0 to 512
[   44.162510][  T934] EXT4-fs (loop4): 1 truncate cleaned up
[   44.169752][  T934] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   45.156122][  T311] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   45.197617][  T292] EXT4-fs (loop4): unmounting filesystem.
[   45.208043][  T940] input: syz1 as /devices/virtual/input/input7
[   45.261965][  T947] erofs: (device loop1): z_erofs_parse_cfgs: algorithm 1 isn't enabled on this kernel
[   45.272420][  T948] EXT4-fs (loop4): orphan cleanup on readonly fs
[   45.280129][  T948] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.245: ea_inode with extended attributes
[   45.320761][   T28] kauditd_printk_skb: 32 callbacks suppressed
[   45.320777][   T28] audit: type=1400 audit(1790748763.988:316): avc:  denied  { execute } for  pid=954 comm="syz.3.249" path="/41/file1" dev="tmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   45.353746][  T948] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.245: error while reading EA inode 11 err=-117
[   45.386045][  T948] EXT4-fs (loop4): 1 orphan inode deleted
[   45.392281][  T948] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   45.409957][  T311] usb 1-1: Using ep0 maxpacket: 16
[   45.420303][  T311] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   45.431108][  T292] EXT4-fs (loop4): unmounting filesystem.
[   45.440189][   T28] audit: type=1400 audit(1790748764.108:317): avc:  denied  { mount } for  pid=965 comm="syz.2.255" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   45.441207][  T311] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   45.475354][   T28] audit: type=1400 audit(1790748764.138:318): avc:  denied  { unmount } for  pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   45.503457][  T311] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[   45.514058][  T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   45.533417][  T311] usb 1-1: SerialNumber: syz
[   45.542432][   T28] audit: type=1400 audit(1790748764.208:319): avc:  denied  { map } for  pid=971 comm="syz.4.257" path="socket:[18587]" dev="sockfs" ino=18587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   45.575684][   T28] audit: type=1400 audit(1790748764.238:320): avc:  denied  { create } for  pid=974 comm="syz.3.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   45.598281][  T311] usb 1-1: 0:2 : does not exist
[   45.604092][   T28] audit: type=1400 audit(1790748764.238:321): avc:  denied  { connect } for  pid=974 comm="syz.3.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   45.625598][  T978] EXT4-fs: Ignoring removed nomblk_io_submit option
[   45.658246][  T978] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   45.666400][  T413] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   45.677610][   T28] audit: type=1400 audit(1790748764.348:322): avc:  denied  { mounton } for  pid=977 comm="syz.3.259" path="/44/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   45.708982][   T28] audit: type=1400 audit(1790748764.368:323): avc:  denied  { write } for  pid=977 comm="syz.3.259" name="/" dev="overlay" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   45.732268][   T28] audit: type=1400 audit(1790748764.368:324): avc:  denied  { remove_name } for  pid=977 comm="syz.3.259" name="file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   45.740876][  T983] EXT4-fs: Ignoring removed mblk_io_submit option
[   45.761792][  T983] EXT4-fs: Ignoring removed oldalloc option
[   45.768473][   T28] audit: type=1400 audit(1790748764.368:325): avc:  denied  { rename } for  pid=977 comm="syz.3.259" name="file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   45.793448][  T288] EXT4-fs (loop3): unmounting filesystem.
[   45.802772][  T983] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   45.812490][  T983] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.835779][  T983] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 3: comm syz.4.260: lblock 3 mapped to illegal pblock 3 (length 3)
[   45.836568][  T983] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   45.836598][  T983] EXT4-fs (loop4): This should not happen!! Data will be lost
[   45.836598][  T983] 
[   45.866124][  T413] usb 2-1: Using ep0 maxpacket: 16
[   45.879806][  T308] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:3: lblock 8 mapped to illegal pblock 8 (length 5)
[   45.883486][  T413] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   45.903529][  T308] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117
[   45.909913][  T413] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   45.925067][  T308] EXT4-fs (loop4): This should not happen!! Data will be lost
[   45.925067][  T308] 
[   45.929571][  T413] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   45.929598][  T413] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[   45.941392][  T308] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm kworker/u4:3: bg 0: block 112: padding at end of block bitmap is not set
[   45.949808][  T413] usb 2-1: config 0 interface 0 has no altsetting 0
[   45.964566][  T308] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28
[   45.976898][  T413] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[   45.983463][  T308] EXT4-fs (loop4): This should not happen!! Data will be lost
[   45.983463][  T308] 
[   45.995464][  T413] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   46.005662][  T308] EXT4-fs (loop4): Total free blocks count 0
[   46.017299][  T413] usb 2-1: config 0 descriptor??
[   46.033399][  T308] EXT4-fs (loop4): Free/Dirty block details
[   46.039621][  T308] EXT4-fs (loop4): free_blocks=0
[   46.152247][ T1003] EXT4-fs: Invalid commit interval -1, must be smaller than 21474836
[   46.244733][ T1009] netlink: 104 bytes leftover after parsing attributes in process `syz.3.270'.
[   46.440553][  T311] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[   46.460067][  T413] logitech-djreceiver 0003:046D:C53A.0001: hiddev96,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.1-1/input0
[   46.461118][  T311] usb 1-1: USB disconnect, device number 5
[   46.674673][  T289] usb 2-1: USB disconnect, device number 3
[   46.806130][   T19] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   46.987622][   T19] usb 3-1: config 0 has no interfaces?
[   46.994734][   T19] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[   47.013982][   T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.024342][   T19] usb 3-1: Product: syz
[   47.028601][   T19] usb 3-1: Manufacturer: syz
[   47.037955][   T19] usb 3-1: SerialNumber: syz
[   47.046372][   T19] usb 3-1: config 0 descriptor??
[   47.226144][   T19] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[   47.261869][  T413] usb 3-1: USB disconnect, device number 4
[   47.376282][ T1043] EXT4-fs: Ignoring removed oldalloc option
[   47.393651][ T1043] EXT4-fs (loop3): Test dummy encryption mode enabled
[   47.411452][ T1043] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.283: inode has both inline data and extents flags
[   47.426440][   T19] usb 5-1: not running at top speed; connect to a high speed hub
[   47.435403][ T1043] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.283: couldn't read orphan inode 15 (err -117)
[   47.437011][   T19] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   47.459835][ T1043] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   47.496329][   T19] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[   47.497122][  T288] EXT4-fs (loop3): unmounting filesystem.
[   47.512565][   T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.544904][   T19] usb 5-1: Found UVC 1.00 device <unnamed> (046d:0825)
[   47.562668][   T19] usb 5-1: No streaming interface found for terminal 2.
[   47.614699][ T1052] set_capacity_and_notify: 6 callbacks suppressed
[   47.614719][ T1052] loop1: detected capacity change from 0 to 128
[   47.638435][ T1052] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   47.674944][  T985] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   47.710574][ T1060] loop5: detected capacity change from 0 to 7
[   47.751531][   T19] usb 5-1: USB disconnect, device number 5
[   47.791322][ T1067] loop1: detected capacity change from 0 to 512
[   47.811315][ T1067] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   47.828733][ T1067] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.294: invalid indirect mapped block 9 (level 0)
[   47.846358][ T1067] EXT4-fs (loop1): 1 truncate cleaned up
[   47.856344][ T1067] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   47.897617][ T1067] EXT4-fs (loop1): re-mounted. Quota mode: none.
[   47.907699][ T1072] netlink: 24 bytes leftover after parsing attributes in process `syz.3.296'.
[   47.956830][ T1072] netlink: 67 bytes leftover after parsing attributes in process `syz.3.296'.
[   47.967864][  T287] EXT4-fs (loop1): unmounting filesystem.
[   48.032900][ T1076] loop3: detected capacity change from 0 to 256
[   48.049969][ T1076] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   48.092552][ T1076] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   48.192531][ T1082] xt_hashlimit: size too large, truncated to 1048576
[   48.237724][ T1084] loop2: detected capacity change from 0 to 16
[   48.265490][ T1084] erofs: (device loop2): mounted with root inode @ nid 36.
[   48.286023][ T1084] device vlan0 entered promiscuous mode
[   48.301860][ T1084] device bridge0 entered promiscuous mode
[   48.565792][ T1108] loop4: detected capacity change from 0 to 256
[   48.595004][ T1108] exfat: Deprecated parameter 'namecase'
[   48.614870][ T1108] exfat: Deprecated parameter 'utf8'
[   48.639266][ T1108] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d)
[   48.934346][ T1160] loop2: detected capacity change from 0 to 1024
[   48.955679][ T1160] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   48.988820][ T1160] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   49.001218][ T1160] EXT4-fs (loop2): shut down requested (2)
[   49.009925][ T1160] EXT4-fs (loop2): re-mounted. Quota mode: none.
[   49.026349][  T291] EXT4-fs (loop2): unmounting filesystem.
[   49.067584][ T1181] loop3: detected capacity change from 0 to 512
[   49.183195][ T1202] loop3: detected capacity change from 0 to 512
[   49.198950][ T1202] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[   49.208895][ T1202] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.353: casefold flag without casefold feature
[   49.223364][ T1202] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.353: couldn't read orphan inode 15 (err -117)
[   49.235735][ T1202] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   49.263497][ T1202] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #2: block 4: comm syz.3.353: lblock 0 mapped to illegal pblock 4 (length 1)
[   49.282329][ T1211] loop2: detected capacity change from 0 to 2048
[   49.294002][  T288] EXT4-fs (loop3): unmounting filesystem.
[   49.316045][ T1211] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   49.338039][ T1211] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   49.357278][ T1216] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   49.366790][  T291] EXT4-fs (loop2): unmounting filesystem.
[   49.388856][ T1225] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   49.402765][  T288] EXT4-fs (loop3): unmounting filesystem.
[   49.562203][ T1245] EXT4-fs: Ignoring removed nomblk_io_submit option
[   49.587677][ T1245] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   49.617440][  T287] EXT4-fs (loop1): unmounting filesystem.
[   49.736168][  T221] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   49.762085][ T1253] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   49.771468][ T1253] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   49.793108][  T288] EXT4-fs (loop3): unmounting filesystem.
[   49.926154][  T221] usb 3-1: Using ep0 maxpacket: 32
[   49.941895][  T221] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[   49.964894][  T221] usb 3-1: config 0 has no interface number 0
[   49.975049][  T221] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   49.994428][  T221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   50.002563][  T221] usb 3-1: Product: syz
[   50.007147][  T221] usb 3-1: Manufacturer: syz
[   50.011785][  T221] usb 3-1: SerialNumber: syz
[   50.025592][  T221] usb 3-1: config 0 descriptor??
[   50.032197][  T221] smsc95xx v2.0.0
[   50.318523][ T1272] F2FS-fs (loop4): fault_injection options not supported
[   50.339708][ T1272] F2FS-fs (loop4): fault_type options not supported
[   50.360052][ T1272] F2FS-fs (loop4): invalid crc value
[   50.383335][ T1272] F2FS-fs (loop4): Found nat_bits in checkpoint
[   50.404373][   T28] kauditd_printk_skb: 90 callbacks suppressed
[   50.404391][   T28] audit: type=1400 audit(1790748769.068:416): avc:  denied  { read write } for  pid=1292 comm="syz.0.385" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   50.434884][  T289] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   50.437704][  T221] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   50.473478][  T221] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   50.482788][   T28] audit: type=1400 audit(1790748769.068:417): avc:  denied  { open } for  pid=1292 comm="syz.0.385" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   50.514310][ T1296] ip_tables: iptables: counters copy to user failed while replacing table
[   50.533085][   T28] audit: type=1400 audit(1790748769.078:418): avc:  denied  { ioctl } for  pid=1292 comm="syz.0.385" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   50.558517][ T1272] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   50.580472][   T28] audit: type=1400 audit(1790748769.138:419): avc:  denied  { create } for  pid=1295 comm="syz.0.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   50.616111][   T28] audit: type=1400 audit(1790748769.158:420): avc:  denied  { setopt } for  pid=1295 comm="syz.0.386" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   50.637516][  T289] usb 4-1: config 0 has no interfaces?
[   50.643040][  T289] usb 4-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00
[   50.663598][  T289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.672084][   T28] audit: type=1400 audit(1790748769.268:421): avc:  denied  { write } for  pid=1295 comm="syz.0.386" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   50.693667][   T28] audit: type=1400 audit(1790748769.318:422): avc:  denied  { read } for  pid=1299 comm="syz.0.387" dev="nsfs" ino=4026532482 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   50.714995][  T289] usb 4-1: config 0 descriptor??
[   50.721371][   T28] audit: type=1400 audit(1790748769.318:423): avc:  denied  { open } for  pid=1299 comm="syz.0.387" path="net:[4026532482]" dev="nsfs" ino=4026532482 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   50.759098][  T292] syz-executor: attempt to access beyond end of device
[   50.759098][  T292] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   50.795528][   T28] audit: type=1400 audit(1790748769.318:424): avc:  denied  { create } for  pid=1299 comm="syz.0.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   50.835878][   T28] audit: type=1400 audit(1790748769.318:425): avc:  denied  { bind } for  pid=1299 comm="syz.0.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   50.895837][  T221] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   50.916383][  T221] smsc95xx: probe of 3-1:0.67 failed with error -71
[   50.955478][  T221] usb 3-1: USB disconnect, device number 5
[   51.007538][ T1302] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   51.025508][ T1302] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   51.042332][ T1302] F2FS-fs (loop0): invalid crc value
[   51.053668][ T1306] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   51.081538][ T1302] F2FS-fs (loop0): Found nat_bits in checkpoint
[   51.109810][ T1306] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   51.129427][ T1306] EXT4-fs (loop1): shut down requested (2)
[   51.137974][ T1306] EXT4-fs (loop1): re-mounted. Quota mode: none.
[   51.155016][ T1282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.164672][ T1302] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   51.172354][ T1302] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   51.183471][  T287] EXT4-fs (loop1): unmounting filesystem.
[   51.195482][ T1282] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.214471][  T289] usb 4-1: USB disconnect, device number 3
[   51.239563][ T1321] exfat: Deprecated parameter 'namecase'
[   51.245457][ T1321] exfat: Deprecated parameter 'utf8'
[   51.276928][ T1321] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d)
[   51.318298][ T1322] syz.0.388: attempt to access beyond end of device
[   51.318298][ T1322] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   51.460183][ T1326] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   51.482976][ T1326] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   51.562022][  T291] EXT4-fs (loop2): unmounting filesystem.
[   51.751175][ T1350] size and base must be multiples of 4 kiB
[   51.798248][ T1350] CPU: 1 PID: 1350 Comm: syz.2.405 Not tainted syzkaller #0
[   51.805618][ T1350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   51.815708][ T1350] Call Trace:
[   51.819016][ T1350]  <TASK>
[   51.821970][ T1350]  __dump_stack+0x21/0x24
[   51.826354][ T1350]  dump_stack_lvl+0x110/0x170
[   51.831088][ T1350]  ? __cfi_dump_stack_lvl+0x8/0x8
[   51.836160][ T1350]  dump_stack+0x15/0x24
[   51.840412][ T1350]  mtrr_del+0x84/0x90
[   51.844429][ T1350]  mtrr_ioctl+0x8e5/0xfb0
[   51.848792][ T1350]  ? __cfi_mtrr_ioctl+0x10/0x10
[   51.853676][ T1350]  ? selinux_file_ioctl+0x3ad/0x4c0
[   51.858924][ T1350]  ? __fget_files+0x2d1/0x330
[   51.863641][ T1350]  ? __cfi_mtrr_ioctl+0x10/0x10
[   51.868557][ T1350]  proc_reg_unlocked_ioctl+0x1e6/0x2d0
[   51.874064][ T1350]  ? __cfi_proc_reg_unlocked_ioctl+0x10/0x10
[   51.880087][ T1350]  __se_sys_ioctl+0x12f/0x1b0
[   51.884804][ T1350]  __x64_sys_ioctl+0x7b/0x90
[   51.889433][ T1350]  x64_sys_call+0x58b/0x9a0
[   51.893979][ T1350]  do_syscall_64+0x4c/0xa0
[   51.898436][ T1350]  ? clear_bhb_loop+0x30/0x80
[   51.903189][ T1350]  ? clear_bhb_loop+0x30/0x80
[   51.907908][ T1350]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   51.913839][ T1350] RIP: 0033:0x7fd3c679e159
[   51.918282][ T1350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   51.937922][ T1350] RSP: 002b:00007fd3c76ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   51.946383][ T1350] RAX: ffffffffffffffda RBX: 00007fd3c6a26090 RCX: 00007fd3c679e159
[   51.954400][ T1350] RDX: 0000200000000900 RSI: 0000000040104d04 RDI: 0000000000000003
[   51.962417][ T1350] RBP: 00007fd3c683506b R08: 0000000000000000 R09: 0000000000000000
[   51.970410][ T1350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   51.978403][ T1350] R13: 00007fd3c6a26128 R14: 00007fd3c6a26090 R15: 00007ffef04d7de8
[   51.986397][ T1350]  </TASK>
[   52.046800][ T1361] device-mapper: ioctl: unable to find target
[   52.071266][ T1365] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   52.106810][ T1365] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   52.123206][ T1367] xt_hashlimit: size too large, truncated to 1048576
[   52.195609][ T1370] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   52.262492][ T1370] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   52.279358][ T1370] EXT4-fs (loop0): shut down requested (2)
[   52.289820][ T1370] EXT4-fs (loop0): re-mounted. Quota mode: none.
[   52.314289][  T290] EXT4-fs (loop0): unmounting filesystem.
[   52.658949][ T1377] set_capacity_and_notify: 15 callbacks suppressed
[   52.658969][ T1377] loop1: detected capacity change from 0 to 40427
[   52.676046][ T1377] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   52.684142][ T1377] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   52.693365][ T1377] F2FS-fs (loop1): invalid crc value
[   52.700355][ T1377] F2FS-fs (loop1): Found nat_bits in checkpoint
[   52.739354][ T1377] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   52.746451][ T1377] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   52.806410][  T413] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   52.827162][ T1397] syz.1.415: attempt to access beyond end of device
[   52.827162][ T1397] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   52.872999][ T1401] loop4: detected capacity change from 0 to 512
[   52.911518][ T1401] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   52.924765][ T1401] System zones: 1-12
[   52.930545][ T1401] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.422: missing EA_INODE flag
[   52.942718][ T1401] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.422: error while reading EA inode 12 err=-117
[   52.955714][ T1401] EXT4-fs (loop4): 1 orphan inode deleted
[   52.987196][  T413] usb 3-1: config 0 has no interfaces?
[   52.992779][  T413] usb 3-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00
[   53.011073][  T413] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.020706][  T413] usb 3-1: config 0 descriptor??
[   53.027201][ T1407] loop0: detected capacity change from 0 to 2048
[   53.076947][ T1407]  loop0: p3 < > p4 < >
[   53.081201][ T1407] loop0: partition table partially beyond EOD, truncated
[   53.096437][ T1407] loop0: p3 start 4284289 is beyond EOD, truncated
[   53.251717][ T1418] console message test
[   53.269337][ T1414] loop0: detected capacity change from 0 to 8192
[   53.286362][ T1414] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   53.431762][ T1383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   53.443777][ T1383] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   53.461911][  T289] usb 3-1: USB disconnect, device number 6
[   53.463307][ T1445] loop0: detected capacity change from 0 to 4096
[   53.493855][ T1445] EXT4-fs (loop0): Test dummy encryption mode enabled
[   53.585146][ T1441] loop4: detected capacity change from 0 to 40427
[   53.595368][ T1441] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   53.604091][ T1441] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   53.622900][ T1441] F2FS-fs (loop4): invalid crc value
[   53.642296][ T1441] F2FS-fs (loop4): Found nat_bits in checkpoint
[   53.682422][ T1441] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   53.689892][ T1441] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   53.779535][ T1460] syz.4.437: attempt to access beyond end of device
[   53.779535][ T1460] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   54.456182][  T289] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   54.637542][  T289] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   54.647830][  T289] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[   54.657706][ T1392] Bluetooth: hci0: command 0x1003 tx timeout
[   54.663755][  T289] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   54.666182][  T714] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   54.679238][  T289] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   54.692005][  T289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   54.700230][  T289] usb 1-1: Product: syz
[   54.708428][  T289] usb 1-1: Manufacturer: syz
[   54.727293][  T289] usb 1-1: SerialNumber: syz
[   54.733377][  T289] usb 1-1: config 0 descriptor??
[   54.768639][ T1482] loop4: detected capacity change from 0 to 512
[   54.877348][ T1490] loop3: detected capacity change from 0 to 256
[   54.884654][ T1491] xt_hashlimit: size too large, truncated to 1048576
[   54.903746][ T1490] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   54.917676][ T1490] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   54.954563][  T289] usb 1-1: USB disconnect, device number 6
[   55.398770][ T1499] loop3: detected capacity change from 0 to 40427
[   55.413520][ T1499] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   55.430498][ T1499] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   55.439383][ T1499] F2FS-fs (loop3): invalid crc value
[   55.446303][ T1499] F2FS-fs (loop3): Found nat_bits in checkpoint
[   55.488772][ T1499] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   55.495872][ T1499] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   55.526146][  T221] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   55.844305][ T1513] syz.3.458: attempt to access beyond end of device
[   55.844305][ T1513] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   55.878118][  T221] usb 5-1: config 0 has no interfaces?
[   55.883676][  T221] usb 5-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00
[   55.896654][   T28] kauditd_printk_skb: 47 callbacks suppressed
[   55.896669][   T28] audit: type=1400 audit(1790748774.568:473): avc:  denied  { create } for  pid=1515 comm="syz.0.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   55.952875][  T221] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.961211][   T28] audit: type=1400 audit(1790748774.598:474): avc:  denied  { connect } for  pid=1515 comm="syz.0.465" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   55.989708][  T221] usb 5-1: config 0 descriptor??
[   56.028330][ T1519] loop1: detected capacity change from 0 to 256
[   56.053813][ T1519] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[   56.082576][   T28] audit: type=1400 audit(1790748774.748:475): avc:  denied  { write } for  pid=1518 comm="syz.1.466" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   56.125994][   T28] audit: type=1400 audit(1790748774.778:476): avc:  denied  { add_name } for  pid=1518 comm="syz.1.466" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   56.173179][   T28] audit: type=1400 audit(1790748774.778:477): avc:  denied  { associate } for  pid=1518 comm="syz.1.466" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   56.265011][ T1529] size and base must be multiples of 4 kiB
[   56.274183][ T1529] CPU: 0 PID: 1529 Comm: syz.1.471 Not tainted syzkaller #0
[   56.281546][ T1529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   56.291634][ T1529] Call Trace:
[   56.294949][ T1529]  <TASK>
[   56.297910][ T1529]  __dump_stack+0x21/0x24
[   56.302278][ T1529]  dump_stack_lvl+0x110/0x170
[   56.306996][ T1529]  ? __cfi_dump_stack_lvl+0x8/0x8
[   56.312065][ T1529]  dump_stack+0x15/0x24
[   56.316273][ T1529]  mtrr_del+0x84/0x90
[   56.320314][ T1529]  mtrr_ioctl+0x8e5/0xfb0
[   56.324687][ T1529]  ? __cfi_mtrr_ioctl+0x10/0x10
[   56.329570][ T1529]  ? selinux_file_ioctl+0x3ad/0x4c0
[   56.334819][ T1529]  ? __fget_files+0x2d1/0x330
[   56.339548][ T1529]  ? __cfi_mtrr_ioctl+0x10/0x10
[   56.344455][ T1529]  proc_reg_unlocked_ioctl+0x1e6/0x2d0
[   56.349970][ T1529]  ? __cfi_proc_reg_unlocked_ioctl+0x10/0x10
[   56.356012][ T1529]  __se_sys_ioctl+0x12f/0x1b0
[   56.360740][ T1529]  __x64_sys_ioctl+0x7b/0x90
[   56.365383][ T1529]  x64_sys_call+0x58b/0x9a0
[   56.369936][ T1529]  do_syscall_64+0x4c/0xa0
[   56.374402][ T1529]  ? clear_bhb_loop+0x30/0x80
[   56.379113][ T1529]  ? clear_bhb_loop+0x30/0x80
[   56.383811][ T1529]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   56.389718][ T1529] RIP: 0033:0x7fc6e999e159
[   56.394155][ T1529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   56.413782][ T1529] RSP: 002b:00007fc6ea875028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   56.422224][ T1529] RAX: ffffffffffffffda RBX: 00007fc6e9c26090 RCX: 00007fc6e999e159
[   56.430218][ T1529] RDX: 0000200000000900 RSI: 0000000040104d04 RDI: 0000000000000003
[   56.438226][ T1529] RBP: 00007fc6e9a3506b R08: 0000000000000000 R09: 0000000000000000
[   56.446260][ T1529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   56.454257][ T1529] R13: 00007fc6e9c26128 R14: 00007fc6e9c26090 R15: 00007ffca77395f8
[   56.462250][ T1529]  </TASK>
[   56.465775][ T1497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   56.474545][ T1497] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   56.507414][   T24] usb 5-1: USB disconnect, device number 6
[   56.821548][   T28] audit: type=1400 audit(1790748775.488:478): avc:  denied  { create } for  pid=1538 comm="syz.2.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   56.861210][   T28] audit: type=1400 audit(1790748775.518:479): avc:  denied  { connect } for  pid=1538 comm="syz.2.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   56.895545][   T28] audit: type=1400 audit(1790748775.518:480): avc:  denied  { read } for  pid=1538 comm="syz.2.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   56.915085][  T308] tipc: Subscription rejected, illegal request
[   56.915703][   T28] audit: type=1400 audit(1790748775.588:481): avc:  denied  { write } for  pid=1538 comm="syz.2.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   57.049944][ T1548] EXT4-fs: Ignoring removed orlov option
[   57.071737][ T1548] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   57.123924][   T28] audit: type=1400 audit(1790748775.788:482): avc:  denied  { read } for  pid=1554 comm="syz.2.482" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   57.135320][ T1555] binder: 1554:1555 ioctl 54a3 0 returned -22
[   57.155458][ T1555] binder: 1554:1555 ioctl c0046209 0 returned -22
[   57.231498][ T1570] device batadv_slave_0 entered promiscuous mode
[   57.238887][ T1568] device batadv_slave_0 left promiscuous mode
[   57.272435][ T1578] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   57.283548][ T1578] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[   57.293503][ T1578] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   57.391456][  T292] FAT-fs (loop4): error, corrupted directory (invalid entries)
[   57.399117][  T292] FAT-fs (loop4): Filesystem has been set read-only
[   57.406153][  T292] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[   57.473995][  T287] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1)
[   57.482320][  T287] FAT-fs (loop1): Filesystem has been set read-only
[   57.738144][ T1600] set_capacity_and_notify: 6 callbacks suppressed
[   57.738162][ T1600] loop1: detected capacity change from 0 to 40427
[   57.755055][ T1600] F2FS-fs (loop1): invalid crc value
[   57.763836][ T1600] F2FS-fs (loop1): Found nat_bits in checkpoint
[   57.803137][ T1603] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.811696][ T1603] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.823736][ T1600] F2FS-fs (loop1): Start checkpoint disabled!
[   57.824153][ T1603] device bridge_slave_0 entered promiscuous mode
[   57.835162][ T1600] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[   57.844643][ T1600] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   57.845706][ T1603] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.859463][ T1603] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.867712][ T1603] device bridge_slave_1 entered promiscuous mode
[   57.911529][ T1600] syz.1.501: attempt to access beyond end of device
[   57.911529][ T1600] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   57.954337][  T308] kworker/u4:3: attempt to access beyond end of device
[   57.954337][  T308] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   57.975092][ T1603] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.982202][ T1603] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.989535][ T1603] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.996602][ T1603] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.045403][ T1613] loop2: detected capacity change from 0 to 256
[   58.073581][ T1613] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   58.093572][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   58.103823][  T308] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.124520][ T1613] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[   58.135560][  T308] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.142232][ T1615] loop1: detected capacity change from 0 to 256
[   58.157312][ T1617] loop3: detected capacity change from 0 to 256
[   58.166427][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   58.178041][  T308] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.185139][  T308] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.192897][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   58.193609][ T1613] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   58.204239][  T308] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.220103][  T308] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.239261][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   58.248005][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   58.277776][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   58.298733][ T1603] device veth0_vlan entered promiscuous mode
[   58.308606][  T288] FAT-fs (loop3): error, corrupted directory (invalid entries)
[   58.317920][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   58.341012][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   58.349474][  T288] FAT-fs (loop3): Filesystem has been set read-only
[   58.361246][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   58.369664][  T288] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[   58.384789][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   58.402829][ T1603] device veth1_macvtap entered promiscuous mode
[   58.423191][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   58.453885][  T984] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   58.468974][  T984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   58.572197][ T1632] device batadv_slave_0 entered promiscuous mode
[   58.581121][ T1631] loop0: detected capacity change from 0 to 16
[   58.599405][ T1631] erofs: (device loop0): mounted with root inode @ nid 36.
[   58.607360][ T1629] device batadv_slave_0 left promiscuous mode
[   58.636122][  T413] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   58.656991][ T1639] loop0: detected capacity change from 0 to 256
[   58.698134][ T1641] loop2: detected capacity change from 0 to 512
[   58.717971][ T1641] EXT4-fs (loop2): Test dummy encryption mode enabled
[   58.727964][ T1644] loop0: detected capacity change from 0 to 256
[   58.750327][ T1644] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   58.762606][ T1644] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[   58.775756][ T1644] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   58.792764][ T1641] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[   58.822146][ T1641] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[   58.836132][  T413] usb 2-1: Using ep0 maxpacket: 16
[   58.843586][  T413] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   58.865735][  T413] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   58.877040][  T413] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[   58.891805][  T413] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   58.908116][  T413] usb 2-1: SerialNumber: syz
[   58.938220][  T413] usb 2-1: 0:2 : does not exist
[   58.947137][ T1645] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.957798][ T1645] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.973118][ T1645] device bridge_slave_0 entered promiscuous mode
[   58.990748][ T1645] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.999824][ T1645] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.007561][ T1645] device bridge_slave_1 entered promiscuous mode
[   59.076759][  T984] device bridge_slave_1 left promiscuous mode
[   59.083143][  T984] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.100379][  T984] device bridge_slave_0 left promiscuous mode
[   59.113165][  T984] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.121175][ T1650] loop0: detected capacity change from 0 to 40427
[   59.136989][ T1650] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   59.145642][  T984] device veth1_macvtap left promiscuous mode
[   59.146255][ T1650] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   59.152894][  T984] device veth0_vlan left promiscuous mode
[   59.201532][ T1650] F2FS-fs (loop0): Found nat_bits in checkpoint
[   59.248728][ T1661] loop2: detected capacity change from 0 to 40427
[   59.257927][ T1650] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   59.265063][ T1661] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   59.273045][ T1650] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   59.280675][ T1661] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   59.297090][ T1661] F2FS-fs (loop2): invalid crc value
[   59.313283][ T1661] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597)
[   59.364466][ T1661] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   59.371647][ T1661] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   59.385558][ T1645] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.392677][ T1645] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.400024][ T1645] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.407113][ T1645] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.427251][  T290] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[   59.427276][  T290] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[   59.435402][  T290] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[   59.449345][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   59.455443][  T290] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[   59.464908][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.465953][  T290] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[   59.479768][  T290] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[   59.487926][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.502702][  T290] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[   59.516393][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   59.550410][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   59.566363][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.573475][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.620518][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   59.639138][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   59.657136][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.664234][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.713629][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   59.734230][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   59.747019][  T413] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[   59.758026][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   59.767773][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   59.785520][ T1645] device veth0_vlan entered promiscuous mode
[   59.792796][  T413] usb 2-1: USB disconnect, device number 4
[   59.799935][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   59.812137][  T405] udevd[405]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   59.843579][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   59.863280][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   59.878800][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   59.887415][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   59.894990][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   59.913316][ T1645] device veth1_macvtap entered promiscuous mode
[   59.929598][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   59.941064][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   59.974593][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   59.996686][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   60.015331][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   60.026666][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   60.040636][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   60.138685][ T1694] F2FS-fs (loop2): invalid crc value
[   60.155777][ T1694] F2FS-fs (loop2): Found nat_bits in checkpoint
[   60.206211][  T413] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   60.221773][ T1710] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.543: inode has both inline data and extents flags
[   60.225874][ T1694] F2FS-fs (loop2): Start checkpoint disabled!
[   60.241859][ T1694] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[   60.249346][ T1710] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.543: couldn't read orphan inode 15 (err -117)
[   60.252558][ T1694] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   60.313050][ T1710] EXT4-fs error (device loop6): ext4_check_dx_root:2266: inode #2: comm syz.6.543: Corrupt dir, invalid name_len for '.', running e2fsck is recommended
[   60.335997][ T1719] FAT-fs (loop1): Directory bread(block 1285) failed
[   60.367676][ T1719] FAT-fs (loop1): Directory bread(block 1286) failed
[   60.374491][ T1719] FAT-fs (loop1): Directory bread(block 1287) failed
[   60.381542][ T1719] FAT-fs (loop1): Directory bread(block 1288) failed
[   60.396267][  T413] usb 6-1: Using ep0 maxpacket: 16
[   60.402294][ T1719] FAT-fs (loop1): Directory bread(block 1285) failed
[   60.403680][  T413] usb 6-1: config 1 has an invalid interface number: 105 but max is 0
[   60.422229][ T1719] FAT-fs (loop1): Directory bread(block 1286) failed
[   60.429525][    T8] kworker/u4:0: attempt to access beyond end of device
[   60.429525][    T8] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[   60.435887][  T413] usb 6-1: config 1 has no interface number 0
[   60.450154][  T413] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[   60.451308][ T1719] FAT-fs (loop1): Directory bread(block 1287) failed
[   60.468245][  T413] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   60.478566][  T413] usb 6-1: config 1 interface 105 has no altsetting 0
[   60.489519][  T413] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[   60.497540][ T1719] FAT-fs (loop1): Directory bread(block 1288) failed
[   60.505326][ T1719] FAT-fs (loop1): FAT read failed (blocknr 1281)
[   60.506309][  T413] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[   60.524360][ T1724] FAT-fs (loop1): Directory bread(block 1285) failed
[   60.525274][  T413] usb 6-1: Product: syz
[   60.540081][  T413] usb 6-1: Manufacturer: syz
[   60.544729][  T413] usb 6-1: SerialNumber: syz
[   60.559160][ T1697] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   60.591081][ T1697] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   60.651266][ T1740] FAULT_INJECTION: forcing a failure.
[   60.651266][ T1740] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   60.664614][ T1740] CPU: 1 PID: 1740 Comm: syz.2.554 Not tainted syzkaller #0
[   60.671947][ T1740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   60.682035][ T1740] Call Trace:
[   60.685331][ T1740]  <TASK>
[   60.688263][ T1740]  __dump_stack+0x21/0x24
[   60.692617][ T1740]  dump_stack_lvl+0x110/0x170
[   60.697308][ T1740]  ? __cfi_dump_stack_lvl+0x8/0x8
[   60.702342][ T1740]  ? __futex_queue+0x175/0x300
[   60.707108][ T1740]  ? __cfi___futex_queue+0x10/0x10
[   60.712245][ T1740]  ? futex_wait_setup+0x1c0/0x260
[   60.717290][ T1740]  dump_stack+0x15/0x24
[   60.721459][ T1740]  should_fail_ex+0x3bf/0x510
[   60.726146][ T1740]  should_fail+0xb/0x10
[   60.730315][ T1740]  should_fail_usercopy+0x1a/0x20
[   60.735358][ T1740]  _copy_from_user+0x1e/0xc0
[   60.739959][ T1740]  core_sys_select+0x471/0x700
[   60.744760][ T1740]  ? __cfi_core_sys_select+0x10/0x10
[   60.750048][ T1740]  ? _raw_spin_lock_irq+0x95/0xf0
[   60.755089][ T1740]  ? __cfi_set_user_sigmask+0x10/0x10
[   60.760470][ T1740]  ? mutex_unlock+0x8f/0x230
[   60.765068][ T1740]  __se_sys_pselect6+0x274/0x340
[   60.770029][ T1740]  ? __x64_sys_pselect6+0x100/0x100
[   60.775285][ T1740]  ? ksys_write+0x1fa/0x260
[   60.779800][ T1740]  ? __kasan_check_write+0x14/0x20
[   60.784922][ T1740]  __x64_sys_pselect6+0xe5/0x100
[   60.789868][ T1740]  x64_sys_call+0x1b0/0x9a0
[   60.794377][ T1740]  do_syscall_64+0x4c/0xa0
[   60.798805][ T1740]  ? clear_bhb_loop+0x30/0x80
[   60.803491][ T1740]  ? clear_bhb_loop+0x30/0x80
[   60.808200][ T1740]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   60.814138][ T1740] RIP: 0033:0x7fd3c679e159
[   60.818558][ T1740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   60.838183][ T1740] RSP: 002b:00007fd3c76cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[   60.846599][ T1740] RAX: ffffffffffffffda RBX: 00007fd3c6a25fa0 RCX: 00007fd3c679e159
[   60.854571][ T1740] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000000000000040
[   60.862554][ T1740] RBP: 00007fd3c683506b R08: 0000200000000340 R09: 00002000000003c0
[   60.870528][ T1740] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000
[   60.878503][ T1740] R13: 00007fd3c6a26038 R14: 00007fd3c6a25fa0 R15: 00007ffef04d7de8
[   60.886502][ T1740]  </TASK>
[   60.939448][ T1744] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   60.947636][ T1744] System zones: 1-12
[   60.952498][ T1744] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.556: missing EA_INODE flag
[   60.965439][ T1744] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.556: error while reading EA inode 12 err=-117
[   60.978293][ T1744] EXT4-fs (loop6): 1 orphan inode deleted
[   61.057290][   T37] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   61.090772][ T1697] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   61.099413][ T1697] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   61.120006][   T28] kauditd_printk_skb: 45 callbacks suppressed
[   61.120022][   T28] audit: type=1400 audit(1790748779.788:528): avc:  denied  { read } for  pid=1748 comm="syz.6.558" name="inject" dev="tracefs" ino=8129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   61.176143][ T1022] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   61.266173][   T37] usb 2-1: Using ep0 maxpacket: 16
[   61.272657][   T37] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   61.285496][   T37] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   61.294929][   T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.310292][   T37] usb 2-1: Product: syz
[   61.314523][   T37] usb 2-1: Manufacturer: syz
[   61.320104][   T37] usb 2-1: SerialNumber: syz
[   61.342469][ T1753] F2FS-fs (loop6): invalid crc value
[   61.349096][ T1753] F2FS-fs (loop6): Found nat_bits in checkpoint
[   61.366097][ T1022] usb 3-1: Using ep0 maxpacket: 16
[   61.380056][ T1022] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   61.395509][ T1022] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   61.408420][ T1022] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[   61.413241][ T1753] F2FS-fs (loop6): Start checkpoint disabled!
[   61.417538][ T1022] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   61.425860][ T1753] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0
[   61.433928][ T1022] usb 3-1: SerialNumber: syz
[   61.442491][ T1753] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[   61.457876][ T1022] usb 3-1: 0:2 : does not exist
[   61.497086][ T1757] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   61.515675][  T984] kworker/u4:5: attempt to access beyond end of device
[   61.515675][  T984] loop6: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[   61.559214][ T1759] FAT-fs (loop0): Directory bread(block 64) failed
[   61.576875][ T1759] FAT-fs (loop0): Directory bread(block 65) failed
[   61.583506][ T1759] FAT-fs (loop0): Directory bread(block 66) failed
[   61.591102][ T1759] FAT-fs (loop0): Directory bread(block 67) failed
[   61.598049][ T1759] FAT-fs (loop0): Directory bread(block 68) failed
[   61.604708][ T1759] FAT-fs (loop0): Directory bread(block 69) failed
[   61.612517][ T1759] FAT-fs (loop0): Directory bread(block 70) failed
[   61.619770][ T1759] FAT-fs (loop0): Directory bread(block 71) failed
[   61.626565][ T1759] FAT-fs (loop0): Directory bread(block 72) failed
[   61.633213][ T1759] FAT-fs (loop0): Directory bread(block 73) failed
[   61.665121][ T1759] xt_hashlimit: size too large, truncated to 1048576
[   61.708555][  T413] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[   61.729944][  T413] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[   61.756151][  T413] aqc111 6-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, c6:78:a9:36:c2:1b
[   61.787282][  T413] usb 6-1: USB disconnect, device number 2
[   61.793766][   T28] audit: type=1400 audit(1790748780.458:529): avc:  denied  { read } for  pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   61.798402][  T413] aqc111 6-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[   61.840328][   T28] audit: type=1400 audit(1790748780.508:530): avc:  denied  { search } for  pid=141 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   61.884860][   T28] audit: type=1400 audit(1790748780.508:531): avc:  denied  { read } for  pid=141 comm="dhcpcd" name="n16" dev="tmpfs" ino=2954 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   61.916283][   T28] audit: type=1400 audit(1790748780.508:532): avc:  denied  { open } for  pid=141 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=2954 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   61.946981][  T413] aqc111 6-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[   61.962320][  T413] aqc111 6-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[   61.982238][  T413] aqc111 6-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[   61.996270][   T28] audit: type=1400 audit(1790748780.508:533): avc:  denied  { getattr } for  pid=141 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=2954 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   62.034472][   T28] audit: type=1400 audit(1790748780.638:534): avc:  denied  { read } for  pid=1765 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   62.057612][ T1761] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[   62.067366][ T1761] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[   62.079504][ T1761] F2FS-fs (loop6): invalid crc value
[   62.096018][   T28] audit: type=1400 audit(1790748780.638:535): avc:  denied  { open } for  pid=1765 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   62.123032][   T28] audit: type=1400 audit(1790748780.638:536): avc:  denied  { getattr } for  pid=1765 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   62.153732][ T1761] F2FS-fs (loop6): Found nat_bits in checkpoint
[   62.223556][   T28] audit: type=1400 audit(1790748780.878:537): avc:  denied  { write } for  pid=1764 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=492 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   62.272469][ T1022] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[   62.286681][ T1761] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[   62.294596][ T1022] usb 3-1: USB disconnect, device number 7
[   62.306825][ T1761] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[   62.356634][   T37] cdc_ncm 2-1:1.0: failed to get mac address
[   62.373164][   T37] cdc_ncm 2-1:1.0: bind() failure
[   62.383257][   T37] cdc_ncm: probe of 2-1:1.1 failed with error -71
[   62.396180][   T37] cdc_mbim: probe of 2-1:1.1 failed with error -71
[   62.417004][   T37] usb 2-1: USB disconnect, device number 5
[   62.476331][ T1796] syz.6.561: attempt to access beyond end of device
[   62.476331][ T1796] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   62.504946][ T1795] EXT4-fs: Ignoring removed nobh option
[   62.516863][  T405] udevd[405]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   62.540255][ T1795] EXT4-fs: Ignoring removed orlov option
[   62.606125][  T289] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   62.626403][ T1803] EXT4-fs (loop0): VFS: Can't find ext4 filesystem
[   62.692231][ T1806] file system registered
[   62.806108][  T289] usb 6-1: Using ep0 maxpacket: 16
[   62.822391][  T289] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   62.834967][  T289] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   62.849738][  T289] usb 6-1: config 0 interface 0 has no altsetting 0
[   62.856884][  T289] usb 6-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00
[   62.881659][ T1820] set_capacity_and_notify: 11 callbacks suppressed
[   62.881679][ T1820] loop6: detected capacity change from 0 to 512
[   62.895349][  T289] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.908057][  T289] usb 6-1: config 0 descriptor??
[   62.930079][ T1820] EXT4-fs (loop6): 1 truncate cleaned up
[   63.028440][ T1844] loop1: detected capacity change from 0 to 512
[   63.060151][ T1848] loop6: detected capacity change from 0 to 512
[   63.118540][ T1848] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   63.180853][ T1860] loop1: detected capacity change from 0 to 1024
[   63.205231][ T1864] loop0: detected capacity change from 0 to 512
[   63.213541][ T1860] EXT4-fs: Ignoring removed orlov option
[   63.241621][ T1830] loop2: detected capacity change from 0 to 40427
[   63.249048][ T1864] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   63.267414][ T1830] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64)
[   63.275209][ T1830] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   63.284162][ T1830] F2FS-fs (loop2): Image doesn't support compression
[   63.291734][ T1830] F2FS-fs (loop2): Image doesn't support compression
[   63.312555][ T1830] F2FS-fs (loop2): invalid crc value
[   63.320237][  T289] input: HID 046d:c215 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:046D:C215.0002/input/input8
[   63.328471][ T1830] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   63.399129][  T289] logitech 0003:046D:C215.0002: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 046d:c215] on usb-dummy_hcd.5-1/input0
[   63.413041][ T1880] input: syz1 as /devices/virtual/input/input9
[   63.428244][ T1830] F2FS-fs (loop2): Start checkpoint disabled!
[   63.436271][ T1830] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[   63.450807][ T1830] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   63.458976][ T1830] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   63.547856][  T289] usb 6-1: USB disconnect, device number 3
[   63.638162][ T1896] process 'syz.1.603' launched './file0' with NULL argv: empty string added
[   63.676518][ T1896] Invalid argument reading file caps for ./file0
[   63.726699][ T1904] loop1: detected capacity change from 0 to 512
[   63.770680][ T1904] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   63.897779][  T985] kworker/u4:6: attempt to access beyond end of device
[   63.897779][  T985] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   64.006009][ T1927] loop2: detected capacity change from 0 to 2048
[   64.027941][ T1927] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.042358][ T1927] fs-verity: sha512 using implementation "sha512-avx2"
[   64.114348][ T1942] loop2: detected capacity change from 0 to 1024
[   64.128807][ T1942] EXT4-fs: Ignoring removed nobh option
[   64.134594][ T1942] EXT4-fs: Ignoring removed orlov option
[   64.195143][ T1951] FAULT_INJECTION: forcing a failure.
[   64.195143][ T1951] name failslab, interval 1, probability 0, space 0, times 0
[   64.207967][ T1951] CPU: 1 PID: 1951 Comm: syz.2.626 Not tainted syzkaller #0
[   64.215294][ T1951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   64.225376][ T1951] Call Trace:
[   64.228686][ T1951]  <TASK>
[   64.231646][ T1951]  __dump_stack+0x21/0x24
[   64.236039][ T1951]  dump_stack_lvl+0x110/0x170
[   64.240757][ T1951]  ? __cfi_dump_stack_lvl+0x8/0x8
[   64.245827][ T1951]  dump_stack+0x15/0x24
[   64.250029][ T1951]  should_fail_ex+0x3bf/0x510
[   64.254744][ T1951]  ? vm_area_alloc+0xe9/0x1a0
[   64.259464][ T1951]  __should_failslab+0xac/0xf0
[   64.264268][ T1951]  should_failslab+0x9/0x20
[   64.268799][ T1951]  kmem_cache_alloc+0x3b/0x320
[   64.273637][ T1951]  vm_area_alloc+0xe9/0x1a0
[   64.278183][ T1951]  mmap_region+0xfab/0x2130
[   64.282722][ T1951]  ? __cfi_mmap_region+0x10/0x10
[   64.287685][ T1951]  ? __kasan_check_read+0x11/0x20
[   64.292738][ T1951]  ? cap_mmap_addr+0x165/0x2e0
[   64.297522][ T1951]  ? __cfi_arch_get_unmapped_area_topdown+0x10/0x10
[   64.304134][ T1951]  ? get_unmapped_area+0x30c/0x370
[   64.309272][ T1951]  do_mmap+0x858/0xdd0
[   64.313375][ T1951]  ? __cfi_do_mmap+0x10/0x10
[   64.317991][ T1951]  ? do_futex+0x2bf/0x430
[   64.322344][ T1951]  vm_mmap_pgoff+0x206/0x3f0
[   64.326977][ T1951]  ? __cfi_vm_mmap_pgoff+0x10/0x10
[   64.332112][ T1951]  ? xfd_validate_state+0x70/0x150
[   64.337257][ T1951]  ksys_mmap_pgoff+0xf6/0x1d0
[   64.341964][ T1951]  ? __kasan_check_write+0x14/0x20
[   64.347145][ T1951]  __x64_sys_mmap+0xfa/0x110
[   64.351761][ T1951]  x64_sys_call+0x8fd/0x9a0
[   64.356292][ T1951]  do_syscall_64+0x4c/0xa0
[   64.360745][ T1951]  ? clear_bhb_loop+0x30/0x80
[   64.365450][ T1951]  ? clear_bhb_loop+0x30/0x80
[   64.370157][ T1951]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   64.376093][ T1951] RIP: 0033:0x7fd3c679e159
[   64.380539][ T1951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   64.400158][ T1951] RSP: 002b:00007fd3c76cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[   64.408596][ T1951] RAX: ffffffffffffffda RBX: 00007fd3c6a25fa0 RCX: 00007fd3c679e159
[   64.416593][ T1951] RDX: 000000000200000b RSI: 0000000000200000 RDI: 0000200000000000
[   64.424588][ T1951] RBP: 00007fd3c683506b R08: ffffffffffffffff R09: 0000000042795000
[   64.432581][ T1951] R10: 0000000000204031 R11: 0000000000000246 R12: 0000000000000000
[   64.440565][ T1951] R13: 00007fd3c6a26038 R14: 00007fd3c6a25fa0 R15: 00007ffef04d7de8
[   64.448561][ T1951]  </TASK>
[   64.499393][ T1945] loop5: detected capacity change from 0 to 40427
[   64.513860][ T1945] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64)
[   64.521276][  T289] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   64.537981][ T1945] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   64.546449][ T1945] F2FS-fs (loop5): Image doesn't support compression
[   64.553333][ T1945] F2FS-fs (loop5): Image doesn't support compression
[   64.562102][ T1945] F2FS-fs (loop5): invalid crc value
[   64.568270][ T1945] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   64.596206][ T1022] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   64.604879][ T1945] F2FS-fs (loop5): Start checkpoint disabled!
[   64.607650][ T1956] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.613556][ T1945] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[   64.631916][ T1956] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   64.647123][ T1945] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[   64.654472][ T1945] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[   64.662694][ T1956] EXT4-fs (loop2): Remounting filesystem read-only
[   64.677764][  T291] EXT4-fs unmount: 31 callbacks suppressed
[   64.677781][  T291] EXT4-fs (loop2): unmounting filesystem.
[   64.706128][  T289] usb 2-1: Using ep0 maxpacket: 16
[   64.714178][  T289] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[   64.732703][  T289] usb 2-1: config 0 has no interface number 0
[   64.739661][  T289] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[   64.752572][  T289] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[   64.774235][  T289] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[   64.783479][ T1022] usb 1-1: Using ep0 maxpacket: 16
[   64.789774][ T1022] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   64.810982][  T289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.821670][ T1022] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   64.828347][ T1968] erofs: (device loop2): mounted with root inode @ nid 36.
[   64.845393][  T289] usb 2-1: Product: syz
[   64.859859][  T289] usb 2-1: Manufacturer: syz
[   64.864544][  T289] usb 2-1: SerialNumber: syz
[   64.869324][ T1022] usb 1-1: config 0 interface 0 has no altsetting 0
[   64.887316][ T1022] usb 1-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00
[   64.897197][  T289] usb 2-1: config 0 descriptor??
[   64.902464][ T1947] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   64.916143][ T1947] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   64.933491][ T1022] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.943189][ T1022] usb 1-1: config 0 descriptor??
[   65.012785][ T1961] F2FS-fs (loop6): Invalid SB checksum offset: 0
[   65.021480][ T1973] device-mapper: ioctl: name not supplied when creating device
[   65.029417][ T1961] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[   65.046166][ T1961] F2FS-fs (loop6): invalid crc value
[   65.064446][ T1961] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   65.141111][ T1961] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0
[   65.148848][ T1961] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[   65.157387][ T1947] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   65.166770][ T1947] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   65.211120][    T8] kworker/u4:0: attempt to access beyond end of device
[   65.211120][    T8] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   65.347376][ T1986] EXT4-fs: Ignoring removed nobh option
[   65.353115][ T1986] EXT4-fs: Ignoring removed orlov option
[   65.368919][ T1022] input: HID 046d:c215 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:046D:C215.0003/input/input10
[   65.381662][  T289] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[   65.413452][ T1986] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   65.430929][ T1645] syz-executor: attempt to access beyond end of device
[   65.430929][ T1645] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   65.459399][ T1022] logitech 0003:046D:C215.0003: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 046d:c215] on usb-dummy_hcd.0-1/input0
[   65.487630][ T1603] EXT4-fs (loop5): unmounting filesystem.
[   65.550233][ T1991] EXT4-fs: Ignoring removed orlov option
[   65.586618][ T1991] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   65.603809][   T37] usb 1-1: USB disconnect, device number 7
[   65.639658][ T1603] EXT4-fs (loop5): unmounting filesystem.
[   66.003955][  T289] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   66.016790][  T289] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9
[   66.046236][ T1022] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   66.056314][  T289] asix: probe of 2-1:0.34 failed with error -71
[   66.063569][  T289] usb 2-1: USB disconnect, device number 6
[   66.111759][ T2018] EXT4-fs: Ignoring removed bh option
[   66.130545][ T2018] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[   66.151379][ T2021] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   66.163502][ T2018] EXT4-fs (loop6): 1 truncate cleaned up
[   66.169273][ T2018] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[   66.182079][ T2018] overlayfs: upper fs needs to support d_type.
[   66.190659][ T2021] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   66.200551][ T2018] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[   66.209231][ T2021] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[   66.223918][ T2021] EXT4-fs error (device loop0) in ext4_setattr:5697: error 28
[   66.228360][ T1022] usb 6-1: unable to get BOS descriptor or descriptor too short
[   66.240057][ T1022] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   66.252894][ T2021] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   66.252923][ T1645] EXT4-fs (loop6): unmounting filesystem.
[   66.267560][ T2021] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28
[   66.272412][ T1022] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[   66.284129][ T2021] EXT4-fs (loop0): This should not happen!! Data will be lost
[   66.284129][ T2021] 
[   66.310109][ T2021] EXT4-fs (loop0): Total free blocks count 0
[   66.315546][ T1022] usb 6-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40
[   66.325596][ T1022] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.331743][ T2021] EXT4-fs (loop0): Free/Dirty block details
[   66.335349][ T1022] usb 6-1: Product: syz
[   66.343929][ T1022] usb 6-1: Manufacturer: syz
[   66.347331][ T2021] EXT4-fs (loop0): free_blocks=20480
[   66.353455][ T1022] usb 6-1: SerialNumber: syz
[   66.355040][ T2021] EXT4-fs (loop0): dirty_blocks=32
[   66.363878][ T2021] EXT4-fs (loop0): Block reservation details
[   66.370286][ T2021] EXT4-fs (loop0): i_reserved_data_blocks=2
[   66.395922][    T8] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   66.568502][ T1022] usb 6-1: 1:1 : bogus bTerminalLink 9
[   66.584685][ T1022] snd-usb-audio: probe of 6-1:1.0 failed with error -2
[   66.606153][ T1022] usb 6-1: 1:1 : bogus bTerminalLink 9
[   66.612464][ T1022] snd-usb-audio: probe of 6-1:1.1 failed with error -2
[   66.621260][ T1022] usb 6-1: 1:1 : bogus bTerminalLink 9
[   66.638652][ T1022] snd-usb-audio: probe of 6-1:1.2 failed with error -2
[   66.652622][ T1022] usb 6-1: USB disconnect, device number 4
[   66.686513][   T37] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   66.706366][  T413] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[   66.866959][  T405] udevd[405]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   66.868685][ T2039] F2FS-fs (loop6): Segment count (31) mismatch with total segments from devices (0)
[   66.892147][   T37] usb 1-1: Using ep0 maxpacket: 16
[   66.897597][ T2039] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[   66.910162][  T413] usb 3-1: not running at top speed; connect to a high speed hub
[   66.918481][   T37] usb 1-1: config 1 has an invalid interface number: 105 but max is 0
[   66.927956][ T2039] F2FS-fs (loop6): invalid crc value
[   66.934157][  T413] usb 3-1: config 0 has too many interfaces: 223, using maximum allowed: 32
[   66.943170][   T37] usb 1-1: config 1 has no interface number 0
[   66.949431][  T413] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   66.959903][   T37] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[   66.970228][  T413] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 223
[   66.973680][ T2039] F2FS-fs (loop6): Found nat_bits in checkpoint
[   66.979665][   T37] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   66.996015][  T413] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[   67.005262][  T413] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.013484][   T37] usb 1-1: config 1 interface 105 has no altsetting 0
[   67.023324][   T37] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[   67.040118][  T413] usb 3-1: config 0 descriptor??
[   67.056787][   T37] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[   67.065907][  T413] usb 3-1: Found UVC 9.00 device <unnamed> (046d:0825)
[   67.074434][   T37] usb 1-1: Product: syz
[   67.078959][   T37] usb 1-1: Manufacturer: syz
[   67.084360][   T37] usb 1-1: SerialNumber: syz
[   67.090136][ T2039] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[   67.096975][ T2035] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   67.099848][ T2039] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[   67.105135][ T2035] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   67.148270][ T2039] F2FS-fs (loop6): f2fs_fill_dentries: corrupted namelen=24152, run fsck to fix.
[   67.159536][ T2039] F2FS-fs (loop6): f2fs_fill_dentries: corrupted namelen=24152, run fsck to fix.
[   67.240518][   T28] kauditd_printk_skb: 50 callbacks suppressed
[   67.240553][   T28] audit: type=1400 audit(1790748785.908:588): avc:  denied  { ioctl } for  pid=2051 comm="syz.5.662" path="socket:[24614]" dev="sockfs" ino=24614 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   67.421591][ T2057] EXT4-fs: Ignoring removed bh option
[   67.427664][ T2057] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[   67.447711][ T2057] EXT4-fs (loop5): 1 truncate cleaned up
[   67.453496][ T2057] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   67.468917][ T2057] overlayfs: upper fs needs to support d_type.
[   67.475739][  T413] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[   67.507207][ T2057] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[   67.535526][ T2035] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   67.552165][ T1603] EXT4-fs (loop5): unmounting filesystem.
[   67.563253][ T2035] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   67.598055][ T2065] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   67.627692][ T2065] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   67.639456][ T2065] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[   67.654152][ T2065] EXT4-fs error (device loop1) in ext4_setattr:5697: error 28
[   67.664046][ T2065] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28
[   67.677199][ T2065] EXT4-fs (loop1): This should not happen!! Data will be lost
[   67.677199][ T2065] 
[   67.686984][  T289] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   67.694574][ T2065] EXT4-fs (loop1): Total free blocks count 0
[   67.700723][ T2065] EXT4-fs (loop1): Free/Dirty block details
[   67.706975][ T2065] EXT4-fs (loop1): free_blocks=20480
[   67.712358][ T2065] EXT4-fs (loop1): dirty_blocks=32
[   67.717665][ T2065] EXT4-fs (loop1): Block reservation details
[   67.722743][  T221] usb 3-1: USB disconnect, device number 8
[   67.723857][ T2065] EXT4-fs (loop1): i_reserved_data_blocks=2
[   67.746560][    T8] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   67.810445][   T28] audit: type=1400 audit(1790748786.478:589): avc:  denied  { bind } for  pid=2078 comm="syz.1.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   67.854000][  T985] Bluetooth: hci0: Frame reassembly failed (-84)
[   67.859965][   T28] audit: type=1400 audit(1790748786.518:590): avc:  denied  { ioctl } for  pid=2082 comm="syz.5.672" path="socket:[24652]" dev="sockfs" ino=24652 ioctlcmd=0x48e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   67.886169][  T289] usb 7-1: Using ep0 maxpacket: 16
[   67.896402][  T289] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   67.907353][  T289] usb 7-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   67.920199][  T289] usb 7-1: config 0 interface 0 has no altsetting 0
[   67.926859][  T289] usb 7-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00
[   67.935917][  T289] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.945035][  T289] usb 7-1: config 0 descriptor??
[   68.116119][ T1022] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   68.196270][   T37] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[   68.207361][   T37] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[   68.220179][   T37] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 52:fa:64:3b:b8:90
[   68.233953][   T37] usb 1-1: USB disconnect, device number 8
[   68.251588][   T37] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[   68.307823][ T1022] usb 2-1: unable to get BOS descriptor or descriptor too short
[   68.316197][   T37] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[   68.325796][ T1022] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   68.326193][   T37] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[   68.337815][ T1022] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[   68.346354][   T37] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[   68.368302][  T289] input: HID 046d:c215 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:046D:C215.0004/input/input11
[   68.386893][ T1022] usb 2-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40
[   68.396304][ T1022] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.404862][ T1022] usb 2-1: Product: syz
[   68.409416][ T1022] usb 2-1: Manufacturer: syz
[   68.414124][ T1022] usb 2-1: SerialNumber: syz
[   68.458162][  T289] logitech 0003:046D:C215.0004: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 046d:c215] on usb-dummy_hcd.6-1/input0
[   68.588336][   T37] usb 7-1: USB disconnect, device number 2
[   68.626797][ T1022] usb 2-1: 1:1 : bogus bTerminalLink 9
[   68.632572][ T1022] snd-usb-audio: probe of 2-1:1.0 failed with error -2
[   68.640411][ T1022] usb 2-1: 1:1 : bogus bTerminalLink 9
[   68.646772][ T1022] snd-usb-audio: probe of 2-1:1.1 failed with error -2
[   68.654492][ T1022] usb 2-1: 1:1 : bogus bTerminalLink 9
[   68.661654][ T1022] snd-usb-audio: probe of 2-1:1.2 failed with error -2
[   68.669452][ T1022] usb 2-1: USB disconnect, device number 7
[   68.886537][  T404] udevd[404]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   69.116580][ T2095] binder: 2094:2095 ioctl c0306201 0 returned -14
[   69.130469][ T2097] set_capacity_and_notify: 10 callbacks suppressed
[   69.130487][ T2097] loop0: detected capacity change from 0 to 1024
[   69.163988][ T2103] loop2: detected capacity change from 0 to 1024
[   69.165427][ T2104] loop1: detected capacity change from 0 to 512
[   69.179006][ T2104] EXT4-fs: Ignoring removed bh option
[   69.189507][ T2104] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   69.200901][ T2103] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   69.219446][ T2097] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   69.230659][ T2104] EXT4-fs (loop1): 1 truncate cleaned up
[   69.236844][ T2104] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   69.250728][ T2104] overlayfs: upper fs needs to support d_type.
[   69.258801][  T290] EXT4-fs (loop0): unmounting filesystem.
[   69.267369][ T2104] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[   69.283556][ T2103] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   69.299369][  T287] EXT4-fs (loop1): unmounting filesystem.
[   69.307347][ T2103] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[   69.334629][ T2103] EXT4-fs error (device loop2) in ext4_setattr:5697: error 28
[   69.344531][ T2103] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28
[   69.350946][   T28] audit: type=1400 audit(1790748788.018:591): avc:  denied  { bind } for  pid=2114 comm="syz.1.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   69.357909][ T2103] EXT4-fs (loop2): This should not happen!! Data will be lost
[   69.357909][ T2103] 
[   69.385899][ T2103] EXT4-fs (loop2): Total free blocks count 0
[   69.392462][ T2103] EXT4-fs (loop2): Free/Dirty block details
[   69.398824][ T2103] EXT4-fs (loop2): free_blocks=20480
[   69.404165][ T2103] EXT4-fs (loop2): dirty_blocks=32
[   69.409368][ T2103] EXT4-fs (loop2): Block reservation details
[   69.415381][ T2103] EXT4-fs (loop2): i_reserved_data_blocks=2
[   69.439072][   T28] audit: type=1400 audit(1790748788.108:592): avc:  denied  { write } for  pid=2120 comm="syz.1.684" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[   69.462806][  T308] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   69.482611][ T2123] loop1: detected capacity change from 0 to 512
[   69.494521][ T2123] EXT4-fs: Ignoring removed oldalloc option
[   69.518332][ T2123] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   69.542212][  T287] EXT4-fs (loop1): unmounting filesystem.
[   69.856124][  T714] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   69.856798][   T45] Bluetooth: hci0: command 0x1003 tx timeout
[   69.869331][ T2083] Bluetooth: hci0: Opcode 0x080f failed: -22
[   69.975923][ T2141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.692'.
[   70.048635][   T28] audit: type=1400 audit(1790748788.718:593): avc:  denied  { setopt } for  pid=2142 comm="syz.5.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   70.080590][ T2143] xt_hashlimit: size too large, truncated to 1048576
[   70.976135][    C1] ==================================================================
[   70.984237][    C1] BUG: KASAN: use-after-free in enqueue_timer+0xae/0x480
[   70.991274][    C1] Write of size 8 at addr ffff888152c44a00 by task syz.2.689/2133
[   70.999084][    C1] 
[   71.001408][    C1] CPU: 1 PID: 2133 Comm: syz.2.689 Not tainted syzkaller #0
[   71.008695][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   71.018749][    C1] Call Trace:
[   71.022029][    C1]  <IRQ>
[   71.024880][    C1]  __dump_stack+0x21/0x24
[   71.029219][    C1]  dump_stack_lvl+0x110/0x170
[   71.033943][    C1]  ? __cfi_dump_stack_lvl+0x8/0x8
[   71.038981][    C1]  ? __cfi__printk+0x8/0x8
[   71.043414][    C1]  ? enqueue_timer+0xae/0x480
[   71.048125][    C1]  print_address_description+0x71/0x200
[   71.053706][    C1]  print_report+0x4a/0x60
[   71.058049][    C1]  kasan_report+0x122/0x150
[   71.062591][    C1]  ? enqueue_timer+0xae/0x480
[   71.067310][    C1]  __asan_report_store8_noabort+0x17/0x20
[   71.073039][    C1]  enqueue_timer+0xae/0x480
[   71.077566][    C1]  ? detach_if_pending+0xf5/0x300
[   71.082600][    C1]  __mod_timer+0x859/0xc00
[   71.087031][    C1]  mod_timer+0x1f/0x30
[   71.091126][    C1]  can_stat_update+0xb1c/0xbb0
[   71.095920][    C1]  ? __cfi_can_stat_update+0x10/0x10
[   71.101225][    C1]  call_timer_fn+0x46/0x2a0
[   71.105766][    C1]  ? __cfi_can_stat_update+0x10/0x10
[   71.111089][    C1]  __run_timers+0x646/0x9b0
[   71.115629][    C1]  ? calc_index+0x200/0x200
[   71.120166][    C1]  ? sched_clock+0x9/0x10
[   71.124512][    C1]  run_timer_softirq+0x6a/0xf0
[   71.129283][    C1]  handle_softirqs+0x1d7/0x600
[   71.134086][    C1]  __do_softirq+0xb/0xd
[   71.138274][    C1]  do_softirq+0xdc/0x130
[   71.142544][    C1]  </IRQ>
[   71.145485][    C1]  <TASK>
[   71.148435][    C1]  ? __cfi_do_softirq+0x10/0x10
[   71.153300][    C1]  ? xdp_return_buff+0x9e/0x270
[   71.158164][    C1]  __local_bh_enable_ip+0x75/0x80
[   71.163209][    C1]  bpf_test_run_xdp_live+0x1858/0x1b00
[   71.168677][    C1]  ? __cfi_mutex_unlock+0x10/0x10
[   71.173709][    C1]  ? text_poke_copy+0x7d/0xa0
[   71.178394][    C1]  ? bpf_test_run_xdp_live+0x549/0x1b00
[   71.183969][    C1]  ? xdp_convert_md_to_buff+0x370/0x370
[   71.189527][    C1]  ? __cfi_xdp_test_run_init_page+0x10/0x10
[   71.195428][    C1]  ? __kasan_check_write+0x14/0x20
[   71.200572][    C1]  ? _copy_from_user+0x8f/0xc0
[   71.205348][    C1]  bpf_prog_test_run_xdp+0x757/0xf80
[   71.210651][    C1]  ? __cfi_bpf_prog_test_run_xdp+0x10/0x10
[   71.216463][    C1]  ? __kasan_check_write+0x14/0x20
[   71.221578][    C1]  ? __cfi_bpf_prog_test_run_xdp+0x10/0x10
[   71.227407][    C1]  bpf_prog_test_run+0x3b4/0x5c0
[   71.232373][    C1]  ? __cfi_sock_free_inode+0x10/0x10
[   71.237671][    C1]  ? bpf_prog_query+0x270/0x270
[   71.242553][    C1]  ? selinux_bpf+0xce/0xf0
[   71.246974][    C1]  ? security_bpf+0x93/0xb0
[   71.251507][    C1]  __sys_bpf+0x5ee/0x850
[   71.255777][    C1]  ? bpf_link_show_fdinfo+0x330/0x330
[   71.261158][    C1]  ? fpregs_restore_userregs+0x128/0x260
[   71.266800][    C1]  __x64_sys_bpf+0x7c/0x90
[   71.271247][    C1]  x64_sys_call+0x488/0x9a0
[   71.275767][    C1]  do_syscall_64+0x4c/0xa0
[   71.280200][    C1]  ? clear_bhb_loop+0x30/0x80
[   71.284892][    C1]  ? clear_bhb_loop+0x30/0x80
[   71.289577][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   71.295494][    C1] RIP: 0033:0x7fd3c679e159
[   71.299923][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   71.319545][    C1] RSP: 002b:00007fd3c76cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   71.327970][    C1] RAX: ffffffffffffffda RBX: 00007fd3c6a25fa0 RCX: 00007fd3c679e159
[   71.335971][    C1] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a
[   71.343978][    C1] RBP: 00007fd3c683506b R08: 0000000000000000 R09: 0000000000000000
[   71.351984][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   71.359975][    C1] R13: 00007fd3c6a26038 R14: 00007fd3c6a25fa0 R15: 00007ffef04d7de8
[   71.367965][    C1]  </TASK>
[   71.371019][    C1] 
[   71.373359][    C1] Allocated by task 2083:
[   71.377695][    C1]  kasan_set_track+0x4b/0x70
[   71.382298][    C1]  kasan_save_alloc_info+0x1f/0x30
[   71.387422][    C1]  __kasan_kmalloc+0x95/0xb0
[   71.392032][    C1]  __kmalloc+0xb4/0x1e0
[   71.396207][    C1]  hci_alloc_dev_priv+0x27/0x1bd0
[   71.401260][    C1]  hci_uart_tty_ioctl+0x3c4/0xa70
[   71.406310][    C1]  tty_ioctl+0x8ef/0xc60
[   71.410607][    C1]  __se_sys_ioctl+0x12f/0x1b0
[   71.415314][    C1]  __x64_sys_ioctl+0x7b/0x90
[   71.419930][    C1]  x64_sys_call+0x58b/0x9a0
[   71.424463][    C1]  do_syscall_64+0x4c/0xa0
[   71.428905][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   71.434823][    C1] 
[   71.437183][    C1] Freed by task 2083:
[   71.441189][    C1]  kasan_set_track+0x4b/0x70
[   71.445793][    C1]  kasan_save_free_info+0x2b/0x40
[   71.450830][    C1]  ____kasan_slab_free+0x132/0x180
[   71.455959][    C1]  __kasan_slab_free+0x11/0x20
[   71.460734][    C1]  slab_free_freelist_hook+0xc2/0x190
[   71.466117][    C1]  __kmem_cache_free+0xb7/0x1b0
[   71.470983][    C1]  kfree+0x6f/0xf0
[   71.474711][    C1]  hci_release_dev+0x12a3/0x13b0
[   71.479664][    C1]  bt_host_release+0x82/0x90
[   71.484263][    C1]  device_release+0xa4/0x1d0
[   71.488872][    C1]  kobject_put+0x19d/0x280
[   71.493302][    C1]  put_device+0x1f/0x30
[   71.497474][    C1]  hci_dev_cmd+0x279/0x740
[   71.501903][    C1]  hci_sock_ioctl+0x41e/0x7f0
[   71.506589][    C1]  sock_do_ioctl+0x114/0x330
[   71.511192][    C1]  sock_ioctl+0x475/0x700
[   71.515529][    C1]  __se_sys_ioctl+0x12f/0x1b0
[   71.520219][    C1]  __x64_sys_ioctl+0x7b/0x90
[   71.524818][    C1]  x64_sys_call+0x58b/0x9a0
[   71.529333][    C1]  do_syscall_64+0x4c/0xa0
[   71.533768][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   71.539676][    C1] 
[   71.542014][    C1] Last potentially related work creation:
[   71.547760][    C1]  kasan_save_stack+0x3a/0x60
[   71.552474][    C1]  __kasan_record_aux_stack+0xb6/0xc0
[   71.557882][    C1]  kasan_record_aux_stack_noalloc+0xb/0x10
[   71.563701][    C1]  insert_work+0x51/0x300
[   71.568045][    C1]  __queue_work+0x9d0/0xd50
[   71.572566][    C1]  queue_work_on+0xde/0x150
[   71.577087][    C1]  __hci_cmd_sync_sk+0xaa8/0xd80
[   71.582042][    C1]  hci_cmd_sync_status+0x53/0x120
[   71.587086][    C1]  hci_dev_cmd+0x642/0x740
[   71.591517][    C1]  hci_sock_ioctl+0x41e/0x7f0
[   71.596215][    C1]  sock_do_ioctl+0x114/0x330
[   71.600851][    C1]  sock_ioctl+0x475/0x700
[   71.605211][    C1]  __se_sys_ioctl+0x12f/0x1b0
[   71.609905][    C1]  __x64_sys_ioctl+0x7b/0x90
[   71.614514][    C1]  x64_sys_call+0x58b/0x9a0
[   71.619032][    C1]  do_syscall_64+0x4c/0xa0
[   71.623551][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   71.629479][    C1] 
[   71.631817][    C1] Second to last potentially related work creation:
[   71.638405][    C1]  kasan_save_stack+0x3a/0x60
[   71.643096][    C1]  __kasan_record_aux_stack+0xb6/0xc0
[   71.648476][    C1]  kasan_record_aux_stack_noalloc+0xb/0x10
[   71.654293][    C1]  insert_work+0x51/0x300
[   71.658630][    C1]  __queue_work+0x9d0/0xd50
[   71.663149][    C1]  queue_work_on+0xde/0x150
[   71.667669][    C1]  hci_cmd_timeout+0x191/0x200
[   71.672442][    C1]  process_one_work+0x717/0xc30
[   71.677312][    C1]  worker_thread+0xa4d/0x11d0
[   71.681997][    C1]  kthread+0x281/0x320
[   71.686077][    C1]  ret_from_fork+0x1f/0x30
[   71.690511][    C1] 
[   71.692852][    C1] The buggy address belongs to the object at ffff888152c44000
[   71.692852][    C1]  which belongs to the cache kmalloc-8k of size 8192
[   71.706910][    C1] The buggy address is located 2560 bytes inside of
[   71.706910][    C1]  8192-byte region [ffff888152c44000, ffff888152c46000)
[   71.720364][    C1] 
[   71.722695][    C1] The buggy address belongs to the physical page:
[   71.729117][    C1] page:ffffea00054b1000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x152c40
[   71.739365][    C1] head:ffffea00054b1000 order:3 compound_mapcount:0 compound_pincount:0
[   71.747697][    C1] flags: 0x4000000000010200(slab|head|zone=1)
[   71.753796][    C1] raw: 4000000000010200 ffffea00053f3000 dead000000000002 ffff888100043500
[   71.762393][    C1] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000
[   71.770978][    C1] page dumped because: kasan: bad access detected
[   71.777413][    C1] page_owner tracks the page as allocated
[   71.783130][    C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 1507, tgid 1506 (syz.0.462), ts 55546367263, free_ts 53977510957
[   71.805634][    C1]  post_alloc_hook+0x1f5/0x210
[   71.810429][    C1]  prep_new_page+0x1c/0x110
[   71.814954][    C1]  get_page_from_freelist+0x2ca9/0x2d20
[   71.820517][    C1]  __alloc_pages+0x1fa/0x610
[   71.825150][    C1]  alloc_slab_page+0x6e/0xf0
[   71.829758][    C1]  new_slab+0x98/0x3e0
[   71.833841][    C1]  ___slab_alloc+0x70f/0xb70
[   71.838446][    C1]  __slab_alloc+0x5e/0xa0
[   71.842800][    C1]  __kmem_cache_alloc_node+0x204/0x2d0
[   71.848279][    C1]  __kmalloc_node_track_caller+0xa1/0x1e0
[   71.854009][    C1]  krealloc+0x6f/0x110
[   71.858085][    C1]  copy_verifier_state+0x69d/0xb10
[   71.863234][    C1]  push_stack+0x19b/0x4f0
[   71.867589][    C1]  do_check+0x96df/0xf140
[   71.871936][    C1]  do_check_common+0x11c3/0x1970
[   71.876910][    C1]  bpf_check+0xa04e/0x10e90
[   71.881432][    C1] page last free stack trace:
[   71.886114][    C1]  free_unref_page_prepare+0x81b/0x820
[   71.891593][    C1]  free_unref_page+0x93/0x530
[   71.896281][    C1]  __free_pages+0x67/0x100
[   71.900717][    C1]  __free_slab+0xc7/0x1a0
[   71.905059][    C1]  __unfreeze_partials+0x15a/0x190
[   71.910175][    C1]  put_cpu_partial+0xa9/0x100
[   71.914874][    C1]  __slab_free+0x1c4/0x280
[   71.919309][    C1]  ___cache_free+0xbf/0xd0
[   71.923747][    C1]  qlist_free_all+0xc6/0x140
[   71.928356][    C1]  kasan_quarantine_reduce+0x14a/0x170
[   71.933828][    C1]  __kasan_slab_alloc+0x24/0x80
[   71.938697][    C1]  slab_post_alloc_hook+0x4f/0x2d0
[   71.943834][    C1]  kmem_cache_alloc+0x166/0x320
[   71.948732][    C1]  getname_flags+0xba/0x510
[   71.953244][    C1]  user_path_at_empty+0x2f/0x1c0
[   71.958194][    C1]  __x64_sys_umount+0xf9/0x170
[   71.962981][    C1] 
[   71.965308][    C1] Memory state around the buggy address:
[   71.970962][    C1]  ffff888152c44900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   71.979031][    C1]  ffff888152c44980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   71.987096][    C1] >ffff888152c44a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   71.995172][    C1]                    ^
[   71.999255][    C1]  ffff888152c44a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   72.007325][    C1]  ffff888152c44b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   72.015406][    C1] ==================================================================
[   72.023475][    C1] Disabling lock debugging due to kernel taint
[   72.030869][    C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[   72.042629][    C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[   72.051065][    C1] CPU: 1 PID: 2133 Comm: syz.2.689 Tainted: G    B              syzkaller #0
[   72.059868][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   72.069951][    C1] RIP: 0010:__queue_work+0x582/0xd50
[   72.075267][    C1] Code: b4 00 00 00 e8 7f 56 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 7d 6a b9 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 70 e1 6e 00 49 8b 3e e8 18 66 b9 03
[   72.094883][    C1] RSP: 0018:ffffc900001b0c98 EFLAGS: 00010046
[   72.100968][    C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888152e93cc0
[   72.108953][    C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[   72.116953][    C1] RBP: ffffc900001b0d28 R08: 0000000000000007 R09: 00000000fffffffb
[   72.124935][    C1] R10: dffffc0000000000 R11: ffffed102a588939 R12: ffff888152c449c8
[   72.132916][    C1] R13: ffff8881317fe400 R14: 0000000000000000 R15: 000000007fffffff
[   72.140919][    C1] FS:  00007fd3c76cd6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   72.149860][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   72.156456][    C1] CR2: 00007f99d6a27dac CR3: 0000000112235000 CR4: 00000000003506a0
[   72.164443][    C1] DR0: 000000000000000c DR1: 0000000000000000 DR2: 0000000000000000
[   72.172432][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[   72.180422][    C1] Call Trace:
[   72.183714][    C1]  <IRQ>
[   72.186581][    C1]  delayed_work_timer_fn+0x61/0x80
[   72.191742][    C1]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[   72.197583][    C1]  call_timer_fn+0x46/0x2a0
[   72.202106][    C1]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[   72.207930][    C1]  __run_timers+0x672/0x9b0
[   72.212485][    C1]  ? calc_index+0x200/0x200
[   72.217007][    C1]  ? sched_clock+0x9/0x10
[   72.221355][    C1]  run_timer_softirq+0x6a/0xf0
[   72.226146][    C1]  handle_softirqs+0x1d7/0x600
[   72.230926][    C1]  __do_softirq+0xb/0xd
[   72.235095][    C1]  do_softirq+0xdc/0x130
[   72.239349][    C1]  </IRQ>
[   72.242289][    C1]  <TASK>
[   72.245230][    C1]  ? __cfi_do_softirq+0x10/0x10
[   72.250097][    C1]  ? xdp_return_buff+0x9e/0x270
[   72.254967][    C1]  __local_bh_enable_ip+0x75/0x80
[   72.260003][    C1]  bpf_test_run_xdp_live+0x1858/0x1b00
[   72.265499][    C1]  ? __cfi_mutex_unlock+0x10/0x10
[   72.270537][    C1]  ? text_poke_copy+0x7d/0xa0
[   72.275228][    C1]  ? bpf_test_run_xdp_live+0x549/0x1b00
[   72.280787][    C1]  ? xdp_convert_md_to_buff+0x370/0x370
[   72.286357][    C1]  ? __cfi_xdp_test_run_init_page+0x10/0x10
[   72.292276][    C1]  ? __kasan_check_write+0x14/0x20
[   72.297421][    C1]  ? _copy_from_user+0x8f/0xc0
[   72.302219][    C1]  bpf_prog_test_run_xdp+0x757/0xf80
[   72.307524][    C1]  ? __cfi_bpf_prog_test_run_xdp+0x10/0x10
[   72.313341][    C1]  ? __kasan_check_write+0x14/0x20
[   72.318472][    C1]  ? __cfi_bpf_prog_test_run_xdp+0x10/0x10
[   72.324299][    C1]  bpf_prog_test_run+0x3b4/0x5c0
[   72.329248][    C1]  ? __cfi_sock_free_inode+0x10/0x10
[   72.334548][    C1]  ? bpf_prog_query+0x270/0x270
[   72.339406][    C1]  ? selinux_bpf+0xce/0xf0
[   72.343839][    C1]  ? security_bpf+0x93/0xb0
[   72.348365][    C1]  __sys_bpf+0x5ee/0x850
[   72.352616][    C1]  ? bpf_link_show_fdinfo+0x330/0x330
[   72.358001][    C1]  ? fpregs_restore_userregs+0x128/0x260
[   72.363643][    C1]  __x64_sys_bpf+0x7c/0x90
[   72.368078][    C1]  x64_sys_call+0x488/0x9a0
[   72.372615][    C1]  do_syscall_64+0x4c/0xa0
[   72.377051][    C1]  ? clear_bhb_loop+0x30/0x80
[   72.381738][    C1]  ? clear_bhb_loop+0x30/0x80
[   72.386430][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   72.392339][    C1] RIP: 0033:0x7fd3c679e159
[   72.396768][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   72.416387][    C1] RSP: 002b:00007fd3c76cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   72.424817][    C1] RAX: ffffffffffffffda RBX: 00007fd3c6a25fa0 RCX: 00007fd3c679e159
[   72.432799][    C1] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a
[   72.440790][    C1] RBP: 00007fd3c683506b R08: 0000000000000000 R09: 0000000000000000
[   72.448783][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   72.456781][    C1] R13: 00007fd3c6a26038 R14: 00007fd3c6a25fa0 R15: 00007ffef04d7de8
[   72.464784][    C1]  </TASK>
[   72.467853][    C1] Modules linked in:
[   72.471790][    C1] ---[ end trace 0000000000000000 ]---
[   72.477288][    C1] RIP: 0010:__queue_work+0x582/0xd50
[   72.482632][    C1] Code: b4 00 00 00 e8 7f 56 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 7d 6a b9 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 70 e1 6e 00 49 8b 3e e8 18 66 b9 03
[   72.502272][    C1] RSP: 0018:ffffc900001b0c98 EFLAGS: 00010046
[   72.508393][    C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888152e93cc0
[   72.516393][    C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[   72.524387][    C1] RBP: ffffc900001b0d28 R08: 0000000000000007 R09: 00000000fffffffb
[   72.532380][    C1] R10: dffffc0000000000 R11: ffffed102a588939 R12: ffff888152c449c8
[   72.540367][    C1] R13: ffff8881317fe400 R14: 0000000000000000 R15: 000000007fffffff
[   72.548356][    C1] FS:  00007fd3c76cd6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   72.557324][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   72.563973][    C1] CR2: 00007f99d6a27dac CR3: 0000000112235000 CR4: 00000000003506a0
[   72.571974][    C1] DR0: 000000000000000c DR1: 0000000000000000 DR2: 0000000000000000
[   72.579966][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[   72.587965][    C1] Kernel panic - not syncing: Fatal exception in interrupt
[   72.595724][    C1] Kernel Offset: disabled
[   72.600070][    C1] Rebooting in 86400 seconds..