last executing test programs: 52.68464283s ago: executing program 4 (id=60): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18cd6, &(0x7f0000000180)={[{@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@fat=@debug}, {@fat=@showexec}, {@shortname_winnt}, {@uni_xlate}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@rodir}, {@uni_xlate}, {@rodir}, {@utf8no}]}, 0x81, 0x29b, &(0x7f0000001100)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 52.529776239s ago: executing program 4 (id=67): syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r0) fchmodat(r0, &(0x7f0000000000)='.\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 52.508444385s ago: executing program 4 (id=68): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) lseek(r0, 0x2000, 0x0) 52.48510922s ago: executing program 4 (id=69): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 52.474104913s ago: executing program 4 (id=70): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000014f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f00000055c0)=@vmx={0x0, 0x0, 0x2080, {0x54000, 0x10000, {0x3}, 0x0, 0x7fff}, {"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", "29baa4aa0fd6db4c99d949d764048f99a5d180a66515f7434cdd89c3a1a10ebfb173cf6d6c61de9275c8041a10dfd80950f2902c621e968048bafb0f0d94cbf2b2bc4da853c50a0e992f76f45aa3ab1161a723ebede37a4fa05108433b75dfb83db5de3abae0fbcbed05967f3a37261ad4427b5b4027b2cb188cd24afdd01e4e03390f4ce83684300b62aa5e6eec3c9fd3d20b124a7f5a181a69880cebd19e3d06ef139eaadeab2934aa9019bbe57cb368ec422c5ff879b9c4e4944561205b14bc86f730a8ecfe0c6560d86b380a5ba5ef658a18cd4c5fe5d524beed45b5cb2ecea5f54fe44d9eec4308ef3abb0b0f03d70614826beba304acbcae00a5b62f61bc3f249d73840781b94f8e294b226898c3c9ffb00ce1addff56e1e79916e4f9069b690144a4dd5e85681deff638030f68ee57b8758a6846979a514650fe73cc513f661c69eb7e1f733a087fd15627dc7e3f3d2aa08a60d5efa6e1e7acc374a89ca6ec2062c747afc50f9e00126af7248cab3f3baa08dc3a2e07054f97b4654168bbcae3f17771973bc3b78d7204649e936d516a80fa8f9c5ad7ad12e57e7e3e9aa6fa225eb1948cc17d50a8853e398dbc2577c70b5e32e5aae6b02dc192184f85cccd9ff1f0b45921abefa09c4f39fe268d324925f48f1fedcf635b63363052acd690dc234b6179db5558c30dfe21ed46639a73e6d2f6020937b3d98ad5d022d1ff2cb6f5e3227a82092f411c1861244df184c7dcc00c4754f28dd4b2982da06be1f5c51181c9deff224bc6ce777ff20ed46aa7092f1af7b32aac6f19686d499aa0552cfb7359e1f0125f8432d7cfa80bbda6af797a5826dc5e9ea445dbc3ea781889de180e4f3a7384446837e5bd0ef5b4b14281b24b7c7dad9bd81a3356f23bc9a21601b7f1f386ae58a64d8534fa4091be9105eadf8612eb74a856cec38fba6837d696d1ab692f4236e2cd202f94491ce5a90096669e81d201945fd339bd590a0913650b1ae1b5f44ea3c133f3c593ad7281a26d1d65d1eed08f7d9e341a21b78200dc9e378fc618755a4a26f03d9fcd87c58418fce32063d6177027d2024c47ad7521d185994cb2395f87d2a116a19611f2a67d7ecec8db4d756311c9bcecbd649f569ca0c2ad5279315568528c96b48372a9e78027214b0120122b2a6cec6e2968fbd31ddf28421e481fda589aba0bf88bdbb5b394adbb0259efa5dddb7bfe078dd7b9e273bbc53123567c55502708139aac32ec3e81556bdd8f1cdeb39a5eb5f5f75f00c0d48b8d82102d32bfd0937227906a0e898de7f4a994b1518639b6ae187c740a52b02b6b560e8eab31cef782d86107b78b001139d3a631c8cc4b353d487048463b9e2fe2240f5707b6689845b32c313538f8bb33e66836756c715e9173f913f45929996c4293e22cc777731202fb5c2a8257732b5ac8c8659ad489ffe6771895be60810c5b55a9a59e27b40ea8d354b730800cdffae1901226d37f2613f35ad6906aa87bd9c49d0fe04a2f069a83d5bc9e9210bdec7795cb0f532790b6ce0b515b7c8a0e1f1e340870d076e2003bf1d51716dc1ba92dfffd3a89e6b2ee6f0e20359ddd0c1e7240ca1bccf0c5d44dd40137664999f3cb841cb1321cdd351c7601eb50dd1c3a44ff1eed980505bf250246c3eb80eaa6ea7d66cd6035b07daaea4bfeabdd7c277154695d43d0561792d4aad6a14ecfa121c269135a48d5aae6a0322b0f447961b96340be70fc77cf0abbc4b3e929f80c57564943801aae477b1e34cbd74161817bad30b5fe2fff975ed89a0744ae41c3016771d73fbf59b8e4a6b559d49e55f87af85caea7ba32f07ceda7179072256c3e8f670e9830d763b3ee466d24ceb0a12ee555b5d445f0d87100c0b88f3b27f977f8b721a7cc2fd328cb6582a7076af80367c35adceaed14cfcafe81cf42918e36f04644b87dfc13d1c18b21c9502ba37bcf069ec0abe9596bedccf910eb426f204bfdb6d931901c70eea6ae89ef8aff6c1e10b375c59f771cacad3326620d3e557f6bfb5bb16df19232e16f0609d8fa71430810c958b18c235e7ef9b9ae375bcd5f3fd54b4b5e2dd18558569be272262d8712801b7dd371ddd2eec3807b22088e9826eb1d36e26f1e1b7ca93f76bc18399a1629d6f2324ea179a7c2b3cbfb0642cd336a6c9c486c1b592b5a22a0044051bc9930cec287bab0ac21c56b0e620c3a33c497d3e502a348b3193547829624b34645dfa6ede3f3a4f9174f1868b518d7a441d71465b9e9ec6569fa41fb8dcbeba4c03e94b9cf1b2f434dccf5d25233b06902a7d4ccc1643d55795f02dbadf737ec8e6e08b726cf6888f20b2ea94b1d339df5da0df6cfdcb4328e27919cc516fc303c37d5dfcc23e22d7d38bf47cbf285272d73db067c6d727e0829cd34712b626de03c724dc1a9e36749f84b21a2f6ea7e7d91f78c37109a53941cc6b5cca9ac976b0cd6011fac01d2bccea025d63daa3a4854ace8a2fff7efbe4f90acb566f7ad85bef012e6077164df683a1a1da6859057765f977fdd28fd7853902ff37c6abc1a774ac2b3eb40b63fcca8f2512602cacff389946d7e6ae2d73119e4702b6f7ae235845ba41d5f0d77026f3f8efd8b0c89c5ea45255f11e9c4ee9089ea20b6086a300703fd18b2867caea883ce9f235d7c0fedfe62b3b1e4ad225b5bcadd2c1d17aa6217cd3e41e47d09c13847ec76aefb269ed02aeabdbef616d9ef5a79f29943da200ecf30ed84eb0d62c9863d1fb351d3f3f5b2e4ef57b024301a3fdf5a5871fa5ec81b3c28610fc77c6eb2b81ba8b298ba7e51a36b7e99134876c51ec5e11d4e4de0e592fe574ca4f81924fce59a5e443e762d809aa87146be2b25425bcaedbe1a4c6fcf9ca522e4a1addb1ae65398d1605e14783a52c3e56203149ee99db120df0123933ba7f72201d78bb0cb9a9165c2a8e08560a91ccbbf1b187ebd254aeb616d163b4159a657bc3bed0eb396660f7c76cac238dbb6a6791b47b887912660c82c83d6d8c9ac78ba8b803cfdf972c6cc5f701871edd0af4eacc4104bcc9e4ac275a9135fe3aa0820bd57f500e0b4fb9f64bb05f16b29b48c675d0b22bc7e920482d3dfe3c4fe1e8f9ef8322e3460683fe9e8bba6478f2d08f08571d1efe1f69dc310d2383d14b5f6925df0486cf056c7103c5891a1c012a32a55faa4aa16bb5fd13dba2c6d89c7cc938408bccbcb2b450dbd99d57c8ede31cd30112d21d224240a9a0fbe17e1308e8a1daa69793ec8b486b9e24d94cee01922c94d78c6901b1f31f807ef844b1f07050a0f0d672fa8ad0621bdf6cfb4cde7ce81285836a77776d244f2582d67bcf19548c2b8f579f7d4145d1e2b0f9946f471a2e4ac39455612528e3c371833e0c096c1dd58ef17860837f9bcd4411d4ca8adf7eae91860bd89803ac0cea1ba7991afd2d6db1bc017ef2fe414062724b3fca0d8c77ff326495743821a13687d88f41b54d807bc7268e739e1e5b9b8b38e9879bfbe4a8864776c3cf2ab4222f627b0c78fb8cf5defcff4f076d2b6d55f6001c16f7a0d5007526e845e8e3d1ebb914aeb06cc999fd0a59b7acbeb79227453a7171d76920095eb2a144e9b2ec089e197c7fa5fc48ef5d629d6ef79676e3c115ace597802db639d90dfc2d2434d6c4b4edbeae4f62b6f4a8960d5637678a79385cc23dff02ab57d9982a910053374bcd70cbb66c2a67ae5ed9462dfaad97425d816d7948da6b3944433e3f9c34de44ae4cf8c8948451ab5a436dac89f0afda5f3e535ab6b0a0fe6872bdb2554cb631f14346ec3758a7e23567a059b69db7d6994ba1e900c25f73175056b356dac8ee0efe9af9c5dd60292b01215bae5ca1ee6a44bd3dc793e2d4a856b00baaf56216e1a18a6ada7bd5f30c6dc45648912c244d484d7db856da8b2459e13d6c660ed802d59b6705ab25ba6c7298a4fe956d337f897f639891821e5386f4abfb0673103e2af493bbb0268d5c512cff4e2aded82e22d49dc3fb68583993ab917a67c1422a3a8be91d503222aadcd28548413501f65a4c69f9f0ce6cf2bc72b01c10030743709c4e09bbb45fa8b472c8e9c9411b67a172de88894ca9ee077a410e78c1a02aff5c1311dcc7f681afe16218e922dfd6dbe0d055fd85039e7ac3eba5cea19f4aafde443129ab2bcfcb8e9c1f509895add955cc6fa2cf1f5059b7c6db8d1887efedd7cd785861ddb45d2238634f6e3835292ce4bd5932c24f53e5e4cc329baef8d66292ccb80c425728f27d4fbcc92da1c01f39fc6186ae8b0f19d1406339c63e4b76ba2e7457597e229b22a0dfb14da210621267380fba2ea4933adb856efd7535d7ffdf60b71091f1a45046863f5c97da25d93c42f89c502b7be0217d8d5ae4a61e6193a2f767a84101d6ffcf5ec25e41312cbf1ec6590bf0c4b65633fa49b0a7c61502f6fb27239f7b294244563d78b448066e131a6601ed9e25b4f1685a98e7466f2678e6af475dff10b8f13ad64c0f96dd40c815a0047edd0697efadd7cd95892f330cf22d9aabd1fb532f47d9fc0dedde46dd8184c4fa5d8fef569c66057990c2f6d7502df89787b17473cf76085c6720a7e391a620f39cbe6c41931d842ef1c1680e058d05bcff6ed47b0cfaec4b3118426db775b514db47ca06eebb70e8ad5791a344bc162c69d06ef839d211e034777d8ee76fa9d4d6f1fc68cdc04c3c0a27f0c7613bbc50ff42967d74d84132739e93c134606741fc4f46a99d20fd214500541135040a1582c4724ea1dba23124d6b76d2e1bc18a7f6d3c0da76198faa937d7e5d832cca395c34cc3677ad32f0b5fa685144eae184a7630b55495676d4804b795a076b72eecec4f93ca967d6c840a6a8fd02042f2ee79787a346511d7f9b42d73ebc07dd7032548ccf0a43119fe83200178e4ea0c5bed0b57368b4a995cf799fa3d293837c24658307203077857194c43803e3472d9952a3513f975656f79fd6fda13550256b5a78f216af865ff47bfee12a308c9a8a53d751b57a9cb8f6342ed98874043b1fa98639b9c94c6b41cf960c39515cdf3455d877f29c0e9adaccfde6b9ccdcc0d3a406ba003e97821c7812389b18fa234cc74312c6cafa4c53f579f048c8859bf4b0c10d73fe11d5b4162dbbfc11324e6c328ac14df2619ec524a0fc6ac3e5cac1f4cee5b4a72fa0d106fe7a007d760de7149bac0dcafaa2feabf5e96a540536990fd6f11eb6f8d468446af32f1a2330f0e69ddedae3d9ccd17ad61f6796243c8ee49d73c93a64303b9d2f3cdf6b1428d5a584216a14bf82f01791b299c8366369e316294af3f93a0cb0ab3603e16d65c7638c08b0aea4ee77e9133f2c79b33839187640c5f090c42b0411310de913209eda55466eeff82953253b11cac4fd9c5fcd4854f186496a9d540c3725d819dd2a05134c9a1152589abf34a8ebb2c9c7f67b82dfe88852809559061858c8f6a8a7a7cd4892532db3a8ad686b08f6e8f110947802b18b7e0bc07ac0f14b9a164a18952facb47278e74ede5a697d5ee7df455bb627f26bf5a9069e0327f7081154da9871aaea7877c21fdd8d1225c58d7a274eebe93020f2249c2acf4bffde73ca3af3a9a8f0f0db58e9b967cb43c0624f7815c0bb890e061728585db7db803e1b105fbf038d58e4f7adb9eab25999a4606d91ebfbde9d05657d6868e6ad8b5cedd675386f7fc1d88975760ab2a176c03c3ac0a025609776f58510d625335ba8aadfb0cbcc91e3702c06f242cd38db6955851ba96f89708fe05b534cc9506b9abc7d1530b109ab1c08e43cf7dedaa95"}}) 52.352331793s ago: executing program 4 (id=72): r0 = io_uring_setup(0x1368, &(0x7f0000000080)={0x0, 0x1b8a, 0x1, 0x3, 0x28c}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 52.352172903s ago: executing program 32 (id=72): r0 = io_uring_setup(0x1368, &(0x7f0000000080)={0x0, 0x1b8a, 0x1, 0x3, 0x28c}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 20.707907708s ago: executing program 2 (id=828): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000040)={[{@errors_remount}, {@bsdgroups}]}, 0x1, 0x4fe, &(0x7f0000000a40)="$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") mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4040, 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 20.440210255s ago: executing program 2 (id=834): pipe2$9p(0x0, 0x80800) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) 20.33725153s ago: executing program 2 (id=835): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 20.088613542s ago: executing program 2 (id=841): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) 20.027833697s ago: executing program 2 (id=842): ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c00200da779e57c52e33a83fdbd563a5b7c6b958cb6e49387a5ba5a89b0887c0292eb888cc8efa81040100d83ba748033542625bc334eaf793332891541000f3c63c0a5f0af254a5bd1f4b81d0c5188ddcadf07eff7b49004e0b243a8a4d93632fbe9ab868d88310829d8e04a3c0572143a3d3d1472cc5da6f72bb097f5f7b95a09e442c0a1463aaa90db7dcbc542dc5bced278eda11583f810469b706968e793db3230"], 0x1, 0x105ea, &(0x7f0000020c40)="$eJzs3EtvG1UbB/DHzdvrW0qFeoEVIyGkWMJWnaQRSAgFaEUrkSrismAFju1Ybm1PFDsXuoZV+QhskRBix2dgw9eoWCAhFkjsikCemaAGikRTJ06T30+a/M8cn3l8ziib47EcwJF1Pvnt11Kci9MRMRURZyOydqk4Mgt5PB8RL0bEsYeOUtH/V8eJiDgTEedGxfOapeKl+d/vP/jqhZuv3/vmfrn209dfTm7VwKS9HBG91by92cszbed5u+ivb3Sy7M1tFJm/0LtTnKd5braWswqb9e1x9Sxn2/n4dHV9MMqVbr0xynZnJetf7edvONhob9fJLrhdX8vOm63lLDuDNMv23XxeW0XeHQzzOs2i3qdZ+RgOtzPvb2218vWs3smy0R8W/XndtNnaGuVGkcXbRSPtNrN5LO/6Nh9473b661vJRmtt0En7ydVq7dVqbb5SW0ubrWFrrlLvNefnkul2dzSsMmzVewvtNG13W9VG2isn0+1Go1KrJdPXWsudej+p1aqz1SuVq+Wi9Uryzq0Pk24zmR7lW53++rDTHSQr6VqSX1FOZqqzr5WTl2rJ+4tLydJ7168vLn3w8bWPbr25ePPtYtA/ppVMz1yZmanUrlRmauWDuf4TRf0xrn8q9mD9pSe7nKPOPxDAY7P/BybB/v9x9v/Jru/zQXdI9v+/3Bvj+m/EU7f+Xfv37dvJJyvM0WD/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwZP14/LsbWeN8fv7/ov+Zouu5iLgcEZci4mJE/PEIU3FiR80LEVEq2o8af/xvc/i+FFmF0TUni+NMRCwUx4Nn9/ouAAAAwOH17Q+ffR4xNWpmf96Y9ITYT8WHNqfGVS/7yOd/46p2ISu2NaZqF7dLjsWliDh+/ucxVbscEcfOfjKmav/J1I449VCU8ji2n7MBAAD2x86dwNh2bwAAABw4X0x6AkxG9ry2+C5+8Sz4ZB7FA8HTO84AAACAp1Bp0hMAAAAA9ly2//f7fwAAAHC45b//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwJzt3k7NEDMcB+A84An5EYvi4CivjkgWH8AguPYDexh1nMCGcA3cewYChUwngrJwiE9/nSWY6ncCvHRIWbaEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3NP3arP6uvv8pW3O4dhOmacBAAAAmuyrzSpdTOr6y3z/db71NiIWETGPiFlENI3dB/H8IrEX03SuNb2+uunDt4iUcHrPMB8vIuJ9Pn6+uf/nAAAAAP+r3Xa5jhicLtPp3fmKJyBP2oxK5aUpn2el0qYp7FOhtNnvyCLmEVFNfhRKW0RE/9WHXGv4/vXTeVyouYtGcjG6KHp10S/YGAAA0BHXI4FiozcAAAA65+OjO8BjpPXa/Fv8vBY8rIu8IDi+qgEAAADddftv+7Pev+0HAAAA8ABp/P/H/n95VuDv9/8L+/8BAABAh9T7/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBP+2qz2m2X67Y5h2M7ZZ4GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH6xP+8oEAJhEAZ71/edBu9/LGnQ1NSkCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjzu7/8n5gaZ5K518bS80iydmpsnRp758bRH8bXrwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn7sTCIEgCIN9539Oi/mHJQ0agwhVsPAxwzwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8EW/++X/xNQ4k8ydNpaOR5K1q8bWVWPvQePowXj7NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDFDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUV9ufeNmEgjOPwaydR4jYZIb3Fxww0VAhG4ENCsuQZGICFaKhoLRaBFUDAQUtnCp6n+f90uuIOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3tPp6Y2PiMg+H5lHPlz9HS4HX5Gvm2bwfc1sc9zXP7ecbHejlL8x/i8iooishd8AALSvvG+KxbKad9J20/bS9tOW07qavfLRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJzZuYOWKMIwAMDfrrtr1qmjChF0qEtuapaBlw6C9yCom+gm0lqhe1Dx4i+IOnntL+St/kJ/IOhQgocOHgq6BGKMO6vfkooWzAz6PPDOvLow8327MOw77zcLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZ7KzHq508lIIYaBymCc+/1ibOWr/8fWXgU58f/jhWnzM5BDVEMKz+WbjToZzKbqlldXn081mY/F8JZVQiGEULulNP/aijEdS2KRzhahEV14AAPh31TSSb5ffqptTyf9KEyHsveuu/29GeTih/t/e6K+Gjf7B7Y3+wd3lT634XHH9P5zZDAuj97gX6q2FV/WlldXb8wvTc425xovR0ZGxe2N3H9wfqe/fK6m7YwIAAMD/qaUR1//lib/7/5ejPJxc/w924vHk0yfxuXoudv1/rMOmX94jAQAAuNiuXv/186jVl6VaLSxPt1qLw+3twd8j7W0OQz2z3jTi+r9nIu9RAQAAAFnYWS919f9nozycsv8/9H5tKz5mTwihL+3/D828bM5mN51Cy+Jx4uQ8u3t5zxQAAIC89KUR9/+r++v/ywdLHsohhFs32nn6M4Cnqv+/vn3U9dB6vP5/NLspFlJ5vP1+7O/HQ6iM5z0iAAAAzrNLaSTF/lZ1c2rx95vJmvX/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPxhx45RGgiiMABvdrNaiQErtfICoheIWAhi4yFEQfAEIogHEFtL72DpHVIr2FhYpvAG8mZ3VNIELHaVfB9M3iMMmZdJk38BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAuab7330VL6OmL9v3nj+uTqK+zNTwfr++GSv6QZdD/zt7fQ8AAADAgqhyvi+K4q1+PIxajlP+r/OeyPwPK02f8/xs7s/16e51I+f/6+Oty6+DRs058aFn5xenO519w79vde6OYbr59OylSj9IeXSzNq3TfQ5uJ5ODpdQudzEtAPAb27m2Tf4/FHW3z8EAWBjDdhU/8n817ncmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC58BgAA//8hBF6m") openat(0xffffffffffffff9c, 0x0, 0x109342, 0x7c) syz_usb_connect$midi(0x3, 0x32, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xfc08, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x1, 0xb, 0x10, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x6, [], [{{0x9, 0x5, 0xd, 0x3, 0x400, 0x4, 0x2, 0x8, {0x5, 0x25, 0x1, 0x1, "8e"}}}]}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 19.85632413s ago: executing program 2 (id=851): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @local}, 0x10) setsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000080)="5ec78db485c534bdf7a2172f3f1f30da", 0x10) 19.833173646s ago: executing program 33 (id=851): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @local}, 0x10) setsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000080)="5ec78db485c534bdf7a2172f3f1f30da", 0x10) 19.672580156s ago: executing program 3 (id=858): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000000), 0x2, 0x50e, &(0x7f0000000f40)="$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") r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) write$FUSE_DIRENTPLUS(r0, &(0x7f0000004680)={0x10, 0xffffffffffffffda}, 0x10) ftruncate(r0, 0x4000000) 19.569419282s ago: executing program 3 (id=859): socket$inet6_udp(0xa, 0x2, 0x0) brk(0x689d80000000) mlockall(0x7) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x2c) write$cgroup_subtree(r0, 0x0, 0x32600) 19.366054703s ago: executing program 3 (id=861): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, 0x0) 19.25828251s ago: executing program 3 (id=865): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000044, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$eJzs3d9rK1kdAPDvTJtue2/XZlXkuuDu4q7cu+hN2q2rVWR3BdGnBXV9v9Y2LaVpU5p0vS2LdvEPEERU8A/wRfDBR0H2TxDhgr6LiiJ6rz7qHZlkqv2RtLFNm2v6+cBpzsmZOd9zhmaSmTnMBHBtvRARb0TEWES8HBEzxftpkWK/k/LlHj18ZylPSWTZW39NIineO2grL49HxM1itcmI+OqXIr6RnIzb3N1bX6zXa9tFudra2Ko2d/furm0srtZWa5vz83M/j4hXF2azwoXGWY6I177wxx989ydffO2Xn/jm7+79+c638m597kOdfkfE0oUC9NBpu9TeFgfybbR9GcGGJB9PaWzYvQAAoB/5b/z3R8RH27//Z2Ks/WsOAAAAGCXZ69PxzyQiAwAAAEZWGhHTkaSVYi7AdKRppdKZw/vBuJHWG83Wx1caO5vLeV1EOUrpylq9NlvMFS5HKcnLc8Uc24PyK8fK8xHxTER8f2aqXa4sNerLwz75AQAAANfEzeePHv//YyZt5wEAAIARU+5ZAAAAAEaFQ34AAAAYfY7/AQAAYKR9+c0385QdPMd7+e3dnfXG23eXa831ysbOUmWpsb1VWW00Vtv37Ns4q716o7H1ydjcuV9t1ZqtanN3795GY2ezdW/tyCOwAQAAgCv0zPPv/TaJiP3PTrVTFPcBBDjiD8PuADBIY8PuADA048PuADA0pTOXsIeAUZecUX9y8k7nXGH86nL6AwAADN7tD5+8/j9R1J19bgD4f2auDwBcP0ev7k0NrR/A1SuddwbgrUH3BBiW93VenupV3/PmHX1c/++cY8iyc3UMAAAYmOl2StJKcQwwHWlaqUQ8HY+zcpSSlbV6bbao+81M6am8PNdeMzlzzjAAAAAAAAAAAAAAAAAAAAAAAAAA0JFlSWQAAADASItI/5S07+YfcXvmpemjZweOPfXrx2/98P5iq7U9FzGR/G0mf2siIlo/Kt5/JfNIAAAAABiuqfxP5zi9eJ0bdpcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDWPHr6zdJCuMu5fPh8R5W7xx2Oy/ToZpYi48fckxg+tl0TE2ADi778bEbe6xU/icZZl5aIX3eJPXXL8cnvTdI+fRsTNAcSH6+y9fP/zRrfPXxovtF+7f/7Gi3RRvfd/6X/2f2M99j9PHyv38uyDn1V7xn834tnx7vufg/hJJ/6REHnhxT7H+PWv7e11rTjUZLf4h2NVWxtb1ebu3t21jcXV2mptc35+7lMLn154dWG2urJWrxV/u4b53kd+8fi08d/oEb98dPwntv9LfY0+i389uP/wA51CqVv8Oy92//691SN+Wnz3fazI5/W3D/L7nfxhz/3018+dNv7lHuOfPGP8d/oaf3zm5a985/dda05sDQDgKjR399YX6/Xa9imZyT6W+Z8yERdt5/WB9udJyMTZy0w+IV29jEz27c7/48XaueDqJzLZRVYfjwF0Y+LE53QszttgErGft9XnPyQAADBi/vuj/7QrSAAAAAAAAAAAAAAAAAAAAMBlOudtySYjou+Fj8fcH85QAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABO9e8AAAD//zDU0hs=") r0 = open(&(0x7f0000000180)='./bus\x00', 0x48a7e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) write$P9_RREADLINK(r0, &(0x7f0000000480)={0x10, 0x17, 0x1, {0x7, './file1'}}, 0x10) 18.434197805s ago: executing program 3 (id=894): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xca000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000}}], 0x20}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18.361157054s ago: executing program 3 (id=896): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.288688192s ago: executing program 34 (id=896): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.292335847s ago: executing program 5 (id=1343): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(r0, 0x29, 0x24, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(r0, &(0x7f000000d6c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x10, 0x119, 0xc}], 0x10}}], 0x1, 0x4000010) 2.292102547s ago: executing program 5 (id=1344): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0xc090, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x22) 2.277523801s ago: executing program 5 (id=1345): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.908280513s ago: executing program 5 (id=1354): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1b7) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r0 = open$dir(&(0x7f0000000040)='./mnt\x00', 0x0, 0x2) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000440)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) 1.907999623s ago: executing program 5 (id=1355): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100033062cbd7000000000007f00000100000000000000000000000000000000000000000000000000000000000000050000fffd000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa0000000000000000000000000100000000000000030000000000000009000000000000000900000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a00000000000000010000000000000000000000000100000000000002000000230000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffff9, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10) 1.907597383s ago: executing program 5 (id=1356): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0x81, 0xac, 0xd8, 0x40, 0xdf6, 0x56, 0xd24b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7f, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x39, 0x0, 0x2, 0x7a, 0xfa, 0x71, 0x2c, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x5, 0x2}}, {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x3, 0xc, 0x9}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00030400000004030a2850032ec22f482f473676546d58322a405856d243229cf0bfe3828bcf45c2fec61cf934b3381fe7d33e2a5d"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f00000004c0)={0x40, 0x9, 0x7b, "b922272910e32107204309c32eb80b81ed43a5b851f458aabaf09c92d00efffeb31947ea25880920488312bddf3e9dab304fe79b374c7d0fba16e8ab0d6309ed6639718a09a0c1a9c05efa2729a7ae0975eddd72df9543baa680715a51111d354492081f275652a7511e79bfe882c22077b15e35bad6747b974284"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000240)={0x20, 0xc, 0x3, "a32195"}, 0x0, 0x0, 0x0, 0x0}) 1.817620256s ago: executing program 1 (id=1365): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x24000000) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, '&(.}@\xaa]\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc020}, 0x40) 1.786250923s ago: executing program 1 (id=1368): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000000)={0x80a0000, 0x206000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) 1.656262306s ago: executing program 1 (id=1369): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000056, &(0x7f00000000c0)={[{@nouid32}, {@noinit_itable}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@inlinecrypt}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x1cb) lseek(r1, 0x1ff, 0x3) 1.570444708s ago: executing program 1 (id=1373): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000000)={[{@grpquota}, {@bsdgroups}, {@noquota}]}, 0x1, 0x506, &(0x7f0000001d00)="$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") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f000023a000/0x1000)=nil) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 1.409216468s ago: executing program 1 (id=1374): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1.314278641s ago: executing program 1 (id=1375): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000280)=[@rdmsr={0x66, 0x18, {0xc0010140}}], 0x18}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000000c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.277777641s ago: executing program 35 (id=1375): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000280)=[@rdmsr={0x66, 0x18, {0xc0010140}}], 0x18}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000000c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 574.350376ms ago: executing program 7 (id=1390): openat(0xffffffffffffff9c, 0x0, 0x40441, 0x106) r0 = openat(0xffffffffffffffff, 0x0, 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x4fed0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r1, &(0x7f0000001040)=""/4096, 0x1000) 564.260499ms ago: executing program 7 (id=1391): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000140)={[{@utf8}, {@utf8}, {@umask={'umask', 0x3d, 0x200}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@allow_utime}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@gid}, {@fmask={'fmask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp857'}}]}, 0x5, 0x153c, &(0x7f00000008c0)="$eJzs3AuYjtXaOPD7Xms9Y0h6m+QwrLXuhzc5LJIkhyQ5JEkStuSUkCTZkpAYckoakpAchuQwhOQwMWmcz+dDQpI0SRKSU7L+18T81a797b2/3c73fXP/ruu9rDXruddzP+/9vs/7PGte803XYTUa16zagIjg34KX/kkAgFgAGAQA1wFAAABl48rGZYxnl5jw7+2E/bEaJl/tDNjVxPXP2rj+WRvXP2vj+mdtXP+sjeuftXH9szauP2NZ2ZYZ+a/nR9Z98Pp/Vsaf//+HpJcc98W6kjd2A4j5Z0O4/v/74b8Ry/X/Pyv4Zzbi+mdtXP+sKvZqJ8D+B+D3f1aQ7e+OcP2zNq4/Y1nZL9eCY+FqrkU/fKah+fP3C5H/5O9AfO9Lz/LVX+f/u8fPGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4z9Cc76KxQAZLavdl6MMcYYY4wxxhj74/hsVzsDxhhjjDHGGGOM/echCJCgIIAYyAaxkB1ygACIyRy/HuLgBsgNN0IeyAv5ID/EQwEoCBoMWCAIoRAUhijcBEXgZigKxaA4lAAHJaEU3AKl4VYoA7dBWbgdysEdUB4qQEWoBHdCZbgLqsDdUBXugWpQHWpATbgXasF9UBvuhzrwANSFB6EePAT14WFoAA2hEfwFGsMj0AQehabQDJpDC2j534p/AXrCi9ALekMC9IG+8BL0g/4wAAbCIHgZBsMrMARehUQYCsPgNRgOr8MIeANGwigYDW/CGHgLxsI4GA8TIAkmwiR4GybDOzAFpsI0mA7JMANmwrswC2bDHHgP5sL7MA/mwwJYCCnwASyCxZAKH8IS+AjSYCksg+WwAlbCKlgNa2AtrIP1sAE2wibYDFtgK2yD7bADdsIu+Bh2wyewB/bCPvgU9sNn/2L8mb+J74aAgAIFKlQYgzEYi7GYA3NgTsyJuTAXRjCCcRiHuTE35sE8mA/zYTzGY0EsiAYNEhIWwkIYxSgWwSJYFIticSyODh2WwlJYGm/FMlgGy2JZLIflsDxWwApYCSthZayMVbAKVsWqWA2rYQ2sgffivdgHa2NtrIN1sC7WzVyewgbYABthI2yMjbEJNsGm2BSbY3NsiS2xFbbC1tga22JbbIftsD22xw7YATtiR+yEnbAzdsYu2AW7Ylfsht2xe/oL2QBfxBexN1YTfbAv9sV+mJhtAA7EgfgyDsZX8BV8FRNxKA7D1/A1fB1H4GkceXEUjsbRWFm8hWNxHJKYgEmYhJNwEk7GyTgFp+JUnI7JOANn4kychbNxNr6Hc/F9fB/n43xciCmYgotwMaZiKi7BM5iGS3EZLscVuBJX4Gpcg6txHa7HdbgRN+Jm3IxbcStux+24E3fix6gA8BPci3sxEffjfjyAB/AgHsRDeAjTMR0P42E8gkfwKB7FY3gMj+MJPIkn8BSewtN4Bs/iWTyP5/ECPhf/VaOPi61NBJFBCSViRIyIFbEih8ghcoqcIpfIJSIiIuJEnMgtcos8Io/IJ/KJeBEvCoqCwggjSIQZZwoRFVFRRBQRRUVRUVwUF044UUqUEqVFaVFGlBFlxe2inLhDlBcVRBtXSVQSlUVbV0XcLaqKqqKaqC5qiJqipqglaonaoraoI+qIuqKuqCceEvVFHxyADUVGZRqLodhEDMOmopmQl89QrcQIbC3aiLbiCTEKR2J70cp1EE+LjmIsdhJ/FePwWdFFTMCu4nnRTXQXPcQLoqdo7XqJ3mIK9hF9xXTsJ/qLAWKgmIXVxXs4N3sN8apIFEPFMPGaWIivixHiDTFSjBKjxZtijHhLjBXjxHgxQSSJiWKSeFtMFu+IKWKqmCami2QxQ8wU74pZYraYI94Tc8X7Yp6YLxaIhSJFfCAWicUiVXwoloiPRJpYKpaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie1ih9gpdomPxW7xidgj9op94lOxX3wmDojPxUHxhTgkvhTp4itxWHwtjohvxFHxrTgmvhPHxQlxUnwvTokfxGlxRpwV58R58aO4IH4SF4UXIFEKKaWSgYyR2WSszC5zyGtkThlknv9lnLxB5pY3yjwyr8wn88t4WUAWlFoaaSXJUBaShWVU3iSLyJtlUVlMFpclpJMlZSl5iywtb5Vl5G2yrLxdlpN3yPKygqwoK8k7ZWV5l4TIpX1Uk9VlDVlT3isT4D5ZW94v68gHZF35oKwnH5L15cOygWwoG8m/yMbyEdlEPiqbymayuWwhW8rHZCv5uGwt28i28gnZTj4p28unZAf5tOwo/eWXyLOyi3xOdpXPy26yu+whf5IXpZe9ZG8JfUD2lS/JfrK/HCAHykHyZTlYviKHyFdlohwqh8nX5HD5uhwh35Aj5Sg5Wr4px8i35Fg5To6XE2SSnCgnybflZPmOnCKnymlyukyWM+SAyzPNkfIfxr/9O/FDft77ZrlFbpXb5Ha5Q+6Uu+THcrfcLffIPXKf3Cf3y/3ygDwgD8qD8pA8JNNlujwsD8sj8og8Ko/KY/KYPC5PyHPye3lK/iBPyzPyjDwnz8vz8sLl5wAUKqGkUipQMSqbilXZVQ51jcqprlW51HUqoq5XceoGlVvdqPKovCqfyq/iVQFVUGlllFWkQlVIFVZRdRNefsGo4qqEcqqkKqVu+VfiVRF1syqqiv0qPjO/hL+TX0vVUrVSrVRr1Vq1VW1VO9VOtVftVQfVQXVUHVUn1Ul1Vp1VF9VFdVVdVTfVTfVQPVRP1VP1Ur1UgkpQfdVLqp/qrwaogWqQellkHMMQNUQlqkQ1TA1Tw9VwNUKNUCPVSDVajVZj1Bg1Vo1V49V4laSS1CQ1SU1Wk9UUNUVNU9NUskpWM9VMNUvNUnPUHDVXzVXz1Dy1QC1QKSpFLVKLVKpKVUvUEpWmlqqlarlarlaqlWq1Wq3WqrVqvVqvNqqNKk1tUVvUNrVN7VA71C61S+1Wu9UetUftU/vUfrVfHVAH1EF1UB1Sh1S6SleH1WF1RB1RR9VRdUwdU8fVcXVSnVSn1Cl1Wp1WZ9VZdV6dVxfUBXVRXcy47AtEIAIVqCAmiAlig9ggR5AjyBnkDHIFuYJIEAnigrggd3BjkCfIG+QL8gfxQYGgYKADE9hAXC56NLgpKBLcHBQNigXFgxKBC0oGpYJbgtLBrUGZ4LagbHB7UC64IygfVAgqBpWCO4PKwV1BleDuoGpwT1AtqB7UCGoG9wa1gvuC2sH9QZ3ggaBu8GBQL3goqB88HDQIGma8voLGwSNBk+DRoGnQLGgetAha/nHzB40C70/nfdz10r11gu6j++qXdD/dXw/QA/Ug/bIenHE20a/qRD1UD9Ov6eH6dT1Cv6FH6lF6tH5Tj9Fv6bF6nB6vJ+gkPVFP0m/ryfodPUVP1dP0dJ2sZ+iZ+l09S8/Wc/R7eq5+X8/T8/UCvVCn6A/0Ir1Yp+oP9RL9kU7TS/UyvVyv0Cv1Kr1ar9Fr9Tq9Xm/QG/UmvVlv0Vv1Nr1d79A79S79sd6tP9F79F69T3+q9+vP9AH9uT6ov9CH9Jc6XX+lD+uv9RH9jT6qv9XH9Hf6uD6hy+jv9Sn9gz6tz+iz+pw+r3/UF/RP+qL2GRf3GR/vRhllYkyMiTWxJofJYXKanCaXyWUiJmLiTJzJbXKbPCaPyWfymXgTbwqagiYDGTKFTCETNVFTxBQxRU1RU9wUN844U8qUMqVNaVPGlDFlTVlTzpQz5U15U9FUNHeaO81d5i5zt7nb3GPuMdVNdVPT1DS1TC1T29Q2dUwdU9fUNfVMPVPf1DcNTAPTyDQyjU1j08Q0MU1NU9PcNDctTUvTyrQyrU1r09a0Ne1MO9PetDcdTAfT0XQ0nUwn09l0Nl1MF9PVdDXdTDfTw/QwPU1P08v0MgkmwfQ1fU0/088MMAPMIDPIDDaDzRAzxCSaRDPMDDPDzXAzwowwI80oMzrjQtW8ZcaacWa8mWCSTJKZZCaZyWaymWKmmGlmmkk2yWammWlmmVlmjplj5pq5Zp6ZZxaYBSbFpJhFZpFJNalmiVli0kyaWWaWmRVmhVllVpk1Zo1ZZ9aZDbDBbDKbzBazxWwz28wOs8PsMrvMbrPb7DF7zD6zz+w3+80Bc8AcNAfNIXPIpJt0c9gcNkfMEXPUHDXHzDFz3Bw3J81Jc8qcMqfNaXPWnDXnTd7Ln5fexNrsNoe9xua019pc9jr7t/18Nr+NtwVsQattHpv3V31jrS1qi9nitoR1tqQtZW/5Tb+8rWAr2kr2TlvZ3mWr/KZfy95na9v7bR37gK1p7/1Vv6590Nazj9j6iAC2mW1kW9jG9hHbxD5qm9pmtrltYdvZJ217+5TtYJ+2He0zv+kvsovtGrvWrrPr7R6715615+wR+409b3+0vWxvO8i+bAfbV+wQ+6pNtEN/0x9t37Rj7Ft2rB1nx9sJv+lPs9Ntsp1hZ9p37Sw7+zf9FPuBnWtT7Tw73y6wC3/uZ+SUaj+0S+xHNs0GsMwutyvsSrvKrv7/uS63G+0mu9nutp/YbXa73WF32l2ZF8J2r91nP7Wxl7sH7Rf2kD1q0+1X9rD9+ufjO2q/tcfsd/a4PWFP2u/tKfuDyozOOPbv7U/2ovUWCAlIkqKAYigbxVJ2ykHXUE66lnLRdRSh6ymObqDcdCPlobyUj/JTPBWggqTJkCWikApRYYrSTZSZXnEqQY5KUim6hUrTrVSGbqOydDuVozuoPFWgilSJ7qTKdBdVobupKt1D1ag61aCadC/VovuoNt1PdegBqksPUj16iOrTw9SAGlIj+gs1pkeoCT1KTakZNacW1JIeo1b0OLWmNtSWnqB29CS1p6eoAz1NHekZ6kR/pc70LHWh56grPU/dqDv1oBeoJ71Ivag3JVAf6ksvUT/qTwNoIA2il2kwvUJD6FVKpKE0jF6j4fQ6jaA3aCSNotH0Jo2ht2gsjaPxNIGSaCJNordpMr1DU2gqTaPplEwzaCa9S7NoNs2h92guvU/zaD4toIWUQh/QIlpMqfQhLaGPKI2W0jJaTitoJa2i1bSG1tI6Wk8baCNtos20hbbSNtpOO2gn7aKPaTd9QntoL+2jT2k/fUYH6HM6SF/QIfqS0ukrOkxf0xH6ho7St743fUfH6QSdpO/pFP1Ap+kMnaVzdJ5+pAv0E10kTxBiKEIZqjAIY8JsYWyYPcwRXhPmDK8Nc4XXhZHw+jAuvCHMHd4Y5gnzhvnC/GF8WCAsGOrQhDakMAwLhYXDaHhTWCS8OSwaFguLhyVCF5YMS4W3hKXDW8My4W1h2fD2sFx4R1g+rBA+8kCl8M6wcnhXWCW8O6wa3hNWC6uHNcKa4b1hrfC+sHZ4f1gnfCAsEz4Y1gsfCuuHD4cNwoZho/AvYePwkbBJ+GjYNGwWNg9bhC3Dx8JW4eNh67BN2Da8JmwXPhm2D58KO4RPhx3DZ34ef3Bx5vgTvxlPCPuEfcOXwpdC7++XC6ILoynRD6KLooujqdEPo0uiH0XTokujy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Kbo97XzAYOnXDSKRe4GJfNxbrsLoe7xuV017pc7joXcde7OHeDy+1udHlcXpfP5XfxroAr6LQzzjpyoSvkCruou8kVcTe7oq6YK+5KOOdKulKuhWvpWrpW7nHX2rVxbd0T7gn3pHvSPeWeck+7ju4Z18n91XV2z7ou7jn3nHvedXPdXQ/3guvpJua69J5McH1dX9fP9XMD3AA3yA1yg91gN8QNcYku0Q1zw9xwN9yNcCPcSDfSjXaj3Rg3xo11Y914N94luSQ3yU1yk91kN8VNcdPcNJfskt1MN9PNcrNc5dmX9jLPzXML3AKX4lLcIpdxzZjqlrglLs2luWVumVvhVrhVbpVb49a4dW6d2+A2uE1uk9vitrhtbpvb4Xa4XW6X2+12uz3+ukuTuv3ugDvgDrqD7pD70qW7r9xh97U74r5xR9237pj7zh13J9xJ97075X5wp90Zd9adc+fdj+6C+8lddN4lRSZGJkXejkyOvBOZEpkamRaZHkmOzIjMjLwbmRWZHZkTeS8yN/J+ZF5kfmRBZGEkJfJBZFFkcSQ18mFkSeSjSFpkaWRZZHlkRWRlxPsC20JfyBf2UX+TL+Jv9kV9MV/cl/DOl/Sl/C2+9KW807y/3Zfzd/jyvoKv6B/1TX0z39y38C39Y76Vf9y39m18W/+Eb+ef9O39U76Df9p39M/4Tv6vvrN/1nfxz/mu/nnfzXf3PfwLvqd/0ffyvX2C7+P7+pd8P9/fD/AD/SD/sh/sX/FD/Ks+0Q/1w/xrfrh/3Y/wb/iRfpQfHfOmH5N5iwwTfJKf6Cf5t/1k/46f4qf6aX66T/Yz/Ez/rp/lZ/s5/j0/17/v5/n5foFf6FP8B36RX+xT/Yd+if/Ip/mlmYvGfpVf7df4tX6dX+83+I1+k9/st/itfpvf7nf4nX6X/9jv9p/4PX6v3+c/9fv9Z/6A/9wf9F/4Q/5Ln+6/8of91/6I/8Yf9d/6Y/47f9yf8Cf99/6U/8Gf9mf8WX/On/c/+gv+J3+R/88aY4wxxtg/ZeKVpvj1yKXl/D6/EyN+sXFfALh2e/70X45nXFFuyHOp3V/E/7wc8XTvrg0zH9WqJSQkXN42TUJQeD5A5m+CMvz81YPL/aXQFp6EDtAGSv9u/v1F9/P0D+aP3g6Q4xcxGQll9q/M/zkAJvzO/I89MXpRufBs3H8x/3yAooWvxGSHK/2l0Pbn9ZU2UObv5J+31T/IP/sXSQCtfxGTE670r+RfCh6HZ6DDr7ZkjDHGGGOMMcYu6S8qds68/8z8xufv3Z/Hqysx2eBK/x/dnzPGGGOMMcYYY+zqe7Z7j6ce69ChTed/vVHlvxX1TzeawH9qZm78bsN7gMyfKAD4NycEyGjI/2Ib8UcfxdY/5YlKvPzW+duhFed8AP8zSvlHNK7yiYkxxhhjjDH2h7ty0f/rn6urlRBjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZYF/Rl/TuxqHyNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2tf2/AAAA//9BC/Sw") r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f00000053c0)=[{{&(0x7f00000001c0)=@caif, 0x80, 0x0}, 0x6}], 0x1, 0x10001, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000002100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8d}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) 438.05224ms ago: executing program 6 (id=1392): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000009180)="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", 0x2000, &(0x7f0000002140)={&(0x7f0000001580)={0x50, 0x0, 0xffffffffffffffff, {0x7, 0x29, 0x80, 0x508101, 0x0, 0x3, 0x8, 0xa7fff, 0x0, 0x0, 0x91, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000022c0)={0x20, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002300)="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", 0x2000, &(0x7f0000005540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005300)={0x1020, 0x0, 0xc, {0x3, 0x0, 0x7, 0x800}}, 0x0}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000008180)={0x0, "5e97461069416b3f42d9b02dc0c4e3bc"}) 432.354881ms ago: executing program 7 (id=1393): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x1484a8, 0x0, 0x21, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x100688d, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fadvise64(r0, 0xfffffffffffffffe, 0xffffffffffff7800, 0x2) 383.960453ms ago: executing program 7 (id=1394): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x7) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0xfffffffffffffffd) ioctl$TUNGETVNETLE(r0, 0x800454dd, 0x0) 349.560272ms ago: executing program 6 (id=1396): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x48, 0x10, 0x437, 0x70bd27, 0x3, {0x0, 0x0, 0x0, r2, 0x51b0b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x9261}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048804}, 0x4000010) sendto$packet(r0, &(0x7f0000000340)="6fffb2b9a89e496b7b091549b9e0219c8a9955a441c2b675612627f12af44704f3a932c3b796bd", 0x27, 0x54, &(0x7f0000000180)={0x11, 0x8100, r2, 0x1, 0xe9, 0x6, @local}, 0x14) 328.982898ms ago: executing program 8 (id=1376): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 325.905568ms ago: executing program 0 (id=1397): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 312.163751ms ago: executing program 8 (id=1398): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x100843, 0x9c) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108943, 0x148) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000a40)={0x2020}, 0x2020) 264.746844ms ago: executing program 8 (id=1399): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x3, 0x2, 0x0, 0x2000, &(0x7f0000166000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 264.176904ms ago: executing program 6 (id=1400): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047459, 0x0) 216.511126ms ago: executing program 6 (id=1401): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0xb25, 0xb}, 0x6, [0x9, 0x8, 0x5, 0x6, 0x6, 0x3, 0xafc, 0x32, 0xebc0, 0x9, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x10, 0x8001, 0x5, 0x2, 0xd4a, 0xffefe87a, 0x1, 0x8, 0x9, 0x9, 0x8, 0x9, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x80000001, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x2, 0xa45, 0x1df, 0xffff, 0x0, 0x2, 0x9, 0xf, 0x901, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x7f, 0x10000, 0x7, 0x4, 0x8, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x63, 0x0, 0x1, 0x200, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x3, 0x3, 0x2, 0x8, 0x6, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x0, 0x62, 0x7, 0x6, 0x4, 0x2006, 0xfff, 0x4], [0x1, 0x9, 0x6, 0x10000, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0x9, 0x74, 0x283, 0x2, 0x4d, 0x6, 0x4, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0x8, 0x0, 0x4, 0x2, 0x80008001, 0x9, 0x1, 0xffff, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x5, 0x80000001, 0x53c2, 0x4, 0x4, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x8000, 0x420, 0xfe6c, 0x2, 0x9], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x8, 0x3, 0x101, 0x4, 0x9, 0x7, 0xce, 0x2, 0x8001, 0x1, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x3, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x5, 0x5, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x2005, 0xe, 0xee6, 0x800, 0x7, 0x3, 0x1, 0x7, 0x3, 0x9, 0xc, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0xb, 0xf, 0x4, 0x6, 0x7, 0xd, 0x400]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x6, 0x101}, 0xfffffffd, [0x8, 0x0, 0x0, 0x4, 0x1, 0x0, 0x401, 0x0, 0x4, 0x20008001, 0x2000, 0x3, 0x0, 0x0, 0x80, 0x80001, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x77, 0x90, 0x801, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3, 0x0, 0x8, 0x0, 0x0, 0xfffffff9, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0xffff1e06, 0x3], [0xfffffffd, 0x3, 0x6, 0x6, 0x0, 0x2, 0x3, 0xff, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x6189fbdb, 0x0, 0x400000, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x9e2b, 0x0, 0xfffffffa, 0x5, 0x7aae62b1, 0x100000, 0x0, 0x40002, 0xffffffff, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, 0xfd5], [0x0, 0xfffffffc, 0x0, 0xd1, 0x0, 0x0, 0x0, 0xfa, 0x0, 0x0, 0x3, 0x7, 0x4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x3, 0x8000000, 0x4, 0x0, 0x0, 0x99, 0xfffffffd, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x836, 0x1, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdf, 0x4a92, 0xf152, 0x0, 0x10004, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9bf, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x8, 0x0, 0x735, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xb6, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) 216.094395ms ago: executing program 7 (id=1402): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r3, r1, 0x4, r0}, 0x10) 193.622521ms ago: executing program 0 (id=1403): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0x5}, {0x36, 0xb, 0x3, 0x5, 0x9, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x6}, {0x7}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200450c0}, 0x4880) 184.918204ms ago: executing program 7 (id=1404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/4, 0x4}], 0x3bc, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 180.676495ms ago: executing program 0 (id=1405): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x4, 0x300000000, 0x3, 0x8, 0x6, 0x5, 0x20000001000, 0x6, 0xfffffffd}) utime(0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) 172.064157ms ago: executing program 6 (id=1406): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xad5, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 157.94115ms ago: executing program 0 (id=1407): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) unshare(0x400) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000071180a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r2, r1}, 0xc) 121.191639ms ago: executing program 8 (id=1408): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e0000000300"/20, @ANYRES32=0x1], 0x50) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000100)={0x0, 0x7fffffffffffffff, 0x3}) sendmsg$nl_route(r0, 0x0, 0x0) 120.88985ms ago: executing program 0 (id=1409): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000016002507b9409b14ffff00000202be04200506050e130204430009003f0020480a0000f00d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e218d1ddf66ed538f25232", 0x77, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="03031b003000320006006300000000442fff00000000000000000000ffffac141419ff020000000000000000000000000001042088be"], 0x76) 120.69425ms ago: executing program 8 (id=1410): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000056, &(0x7f00000000c0)={[{@nouid32}, {@noinit_itable}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@inlinecrypt}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x1cb) lseek(r1, 0x1ff, 0x3) 120.2693ms ago: executing program 0 (id=1411): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x1, @local}, 0x4a, {0x2, 0x4e23, @dev}}) syz_clone(0x44000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) 104.116223ms ago: executing program 6 (id=1412): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x7, 0x0, 0x800000, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0x9, 0x3, 0xb, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x4) 0s ago: executing program 8 (id=1413): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x7) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0xfffffffffffffffd) ioctl$TUNGETVNETLE(r0, 0x800454dd, 0x0) kernel console output (not intermixed with test programs): 8.070580][ T1194] __should_failslab+0xac/0xf0 [ 38.075335][ T1194] should_failslab+0x9/0x20 [ 38.079827][ T1194] __kmem_cache_alloc_node+0x3d/0x2d0 [ 38.085189][ T1194] ? __request_module+0x2a7/0x910 [ 38.090197][ T1194] ? __request_module+0x2a7/0x910 [ 38.095202][ T1194] kmalloc_trace+0x29/0xb0 [ 38.099602][ T1194] ? inet_create+0x348/0xef0 [ 38.104266][ T1194] __request_module+0x2a7/0x910 [ 38.109104][ T1194] ? __cfi___request_module+0x10/0x10 [ 38.114459][ T1194] ? security_inode_alloc+0x33/0x120 [ 38.119735][ T1194] ? kasan_save_alloc_info+0x1f/0x30 [ 38.125000][ T1194] ? __kasan_slab_alloc+0x72/0x80 [ 38.130013][ T1194] ? __slab_alloc+0x6b/0xa0 [ 38.134506][ T1194] ? security_inode_alloc+0x33/0x120 [ 38.139781][ T1194] ? __kasan_check_write+0x14/0x20 [ 38.144879][ T1194] ? _raw_spin_lock+0x94/0xf0 [ 38.149551][ T1194] ? __cfi__raw_spin_lock+0x10/0x10 [ 38.154825][ T1194] inet_create+0x348/0xef0 [ 38.159229][ T1194] __sock_create+0x39e/0x7c0 [ 38.163812][ T1194] __sys_socket+0xcd/0x1a0 [ 38.168217][ T1194] __x64_sys_socket+0x7a/0x90 [ 38.172880][ T1194] x64_sys_call+0x449/0x9a0 [ 38.177400][ T1194] do_syscall_64+0x4c/0xa0 [ 38.181804][ T1194] ? clear_bhb_loop+0x30/0x80 [ 38.186463][ T1194] ? clear_bhb_loop+0x30/0x80 [ 38.191123][ T1194] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 38.196998][ T1194] RIP: 0033:0x7fb7bf39e159 [ 38.201397][ T1194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.220985][ T1194] RSP: 002b:00007fb7c02d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 38.229379][ T1194] RAX: ffffffffffffffda RBX: 00007fb7bf625fa0 RCX: 00007fb7bf39e159 [ 38.237335][ T1194] RDX: 0000000000000003 RSI: 0000000000000004 RDI: 0000000000000002 [ 38.245378][ T1194] RBP: 00007fb7bf43506b R08: 0000000000000000 R09: 0000000000000000 [ 38.253363][ T1194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.261324][ T1194] R13: 00007fb7bf626038 R14: 00007fb7bf625fa0 R15: 00007ffdcbc45fc8 [ 38.269296][ T1194] [ 38.297757][ T289] EXT4-fs (loop1): unmounting filesystem. [ 38.536571][ T28] audit: type=1326 audit(1790336854.749:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1209 comm="syz.0.371" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d3b9e159 code=0x7ffc0000 [ 38.598896][ T28] audit: type=1326 audit(1790336854.749:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1209 comm="syz.0.371" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d3b9e159 code=0x7ffc0000 [ 38.623002][ T1216] loop5: detected capacity change from 0 to 256 [ 38.683552][ T28] audit: type=1326 audit(1790336854.749:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1209 comm="syz.0.371" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d3b9e159 code=0x7ffc0000 [ 38.714667][ T28] audit: type=1326 audit(1790336854.749:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1209 comm="syz.0.371" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d3b9e159 code=0x7ffc0000 [ 38.777179][ T28] audit: type=1326 audit(1790336854.779:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1209 comm="syz.0.371" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f77d3b9e159 code=0x7ffc0000 [ 38.801793][ T28] audit: type=1326 audit(1790336854.799:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1209 comm="syz.0.371" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d3b9e159 code=0x7ffc0000 [ 38.848911][ T28] audit: type=1326 audit(1790336854.799:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1209 comm="syz.0.371" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d3b9e159 code=0x7ffc0000 [ 38.890556][ T28] audit: type=1326 audit(1790336854.799:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1209 comm="syz.0.371" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d3b9e159 code=0x7ffc0000 [ 38.948399][ T1226] Mass Storage Function, version: 2009/09/11 [ 38.977476][ T1226] LUN: removable file: (no medium) [ 38.990836][ T28] audit: type=1326 audit(1790336854.799:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1209 comm="syz.0.371" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d3b9e159 code=0x7ffc0000 [ 39.047593][ T1231] loop5: detected capacity change from 0 to 128 [ 39.087965][ T1207] loop1: detected capacity change from 0 to 131072 [ 39.105450][ T1231] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 39.116097][ T1207] F2FS-fs (loop1): invalid crc value [ 39.139039][ T1231] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 39.167730][ T1207] F2FS-fs (loop1): Found nat_bits in checkpoint [ 39.185314][ T493] EXT4-fs (loop5): unmounting filesystem. [ 39.250626][ T1207] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 39.521465][ T1212] loop3: detected capacity change from 0 to 131072 [ 39.540335][ T1212] F2FS-fs (loop3): invalid crc value [ 39.567901][ T1212] F2FS-fs (loop3): Found nat_bits in checkpoint [ 39.623395][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 39.637621][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 39.653256][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.658682][ T1212] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 39.674190][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 39.706149][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.728007][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.759774][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.768805][ T1212] ------------[ cut here ]------------ [ 39.768902][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.774308][ T1212] WARNING: CPU: 0 PID: 1212 at fs/inode.c:392 inc_nlink+0x123/0x130 [ 39.782693][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.790243][ T1212] Modules linked in: [ 39.790256][ T1212] CPU: 0 PID: 1212 Comm: syz.3.359 Not tainted syzkaller #0 [ 39.809368][ T1212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 39.819535][ T1212] RIP: 0010:inc_nlink+0x123/0x130 [ 39.824606][ T1212] Code: a3 f0 ff e9 37 ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 4c ff ff ff 48 89 df e8 17 a3 f0 ff e9 3f ff ff ff e8 9d 19 ab ff <0f> 0b eb 82 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 39.844231][ T1212] RSP: 0018:ffffc900077578c8 EFLAGS: 00010287 [ 39.850306][ T1212] RAX: ffffffff81c65223 RBX: ffff88813e550048 RCX: 0000000000080000 [ 39.858292][ T1212] RDX: ffffc900022cd000 RSI: 0000000000000cc4 RDI: 0000000000000cc5 [ 39.866281][ T1212] RBP: ffffc900077578f0 R08: ffff88813e552e67 R09: 1ffff11027caa5cc [ 39.874283][ T1212] R10: dffffc0000000000 R11: ffffed1027caa5cd R12: dffffc0000000000 [ 39.882278][ T1212] R13: 1ffff11027caa009 R14: ffff88813e550000 R15: 0000000000000000 [ 39.890249][ T1212] FS: 00007efc1a6cf6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 39.899215][ T1212] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.905812][ T1212] CR2: 00007f73ef793000 CR3: 000000011e501000 CR4: 00000000003506b0 [ 39.913798][ T1212] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.921778][ T1212] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.929750][ T1212] Call Trace: [ 39.933046][ T1212] [ 39.935974][ T1212] f2fs_update_parent_metadata+0xcb/0x2d0 [ 39.941737][ T1212] f2fs_add_inline_entry+0x681/0x870 [ 39.947032][ T1212] ? __cfi_f2fs_add_inline_entry+0x10/0x10 [ 39.952891][ T1212] ? fscrypt_setup_filename+0xa2/0xaa0 [ 39.958366][ T1212] ? f2fs_init_casefolded_name+0x7b/0x400 [ 39.964129][ T1212] f2fs_add_dentry+0x1f8/0x350 [ 39.968914][ T1212] ? __cfi_f2fs_add_dentry+0x10/0x10 [ 39.974242][ T1212] ? uplift_priority+0x18d/0x790 [ 39.979193][ T1212] f2fs_do_add_link+0x245/0x330 [ 39.984223][ T1212] ? __cfi_f2fs_do_add_link+0x10/0x10 [ 39.989612][ T1212] ? f2fs_get_link+0x120/0x120 [ 39.994413][ T1212] f2fs_mkdir+0x376/0x610 [ 39.998747][ T1212] ? show_sid+0x1d0/0x1d0 [ 40.003130][ T1212] ? __cfi_f2fs_mkdir+0x10/0x10 [ 40.007990][ T1212] ? selinux_inode_mkdir+0x22/0x30 [ 40.013138][ T1212] ? security_inode_mkdir+0xd2/0x120 [ 40.018448][ T1212] vfs_mkdir+0x39c/0x580 [ 40.022729][ T1212] do_mkdirat+0x174/0x4d0 [ 40.027062][ T1212] __x64_sys_mkdirat+0x89/0xa0 [ 40.031877][ T1212] x64_sys_call+0x73d/0x9a0 [ 40.036384][ T1212] do_syscall_64+0x4c/0xa0 [ 40.040842][ T1212] ? clear_bhb_loop+0x30/0x80 [ 40.045525][ T1212] ? clear_bhb_loop+0x30/0x80 [ 40.050207][ T1212] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 40.056131][ T1212] RIP: 0033:0x7efc1979cfc7 [ 40.060576][ T1212] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.080212][ T1212] RSP: 002b:00007efc1a6cee58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 40.088649][ T1212] RAX: ffffffffffffffda RBX: 00007efc1a6ceee0 RCX: 00007efc1979cfc7 [ 40.096700][ T1212] RDX: 00000000000001ff RSI: 00002000000002c0 RDI: 00000000ffffff9c [ 40.104691][ T1212] RBP: 0000200000000080 R08: 0000200000000080 R09: 0000000000000000 [ 40.112697][ T1212] R10: 0000200000000080 R11: 0000000000000246 R12: 00002000000002c0 [ 40.120692][ T1212] R13: 00007efc1a6ceea0 R14: 0000000000000000 R15: 0000000000000000 [ 40.128669][ T1212] [ 40.131742][ T1212] ---[ end trace 0000000000000000 ]--- [ 40.167005][ T1259] loop2: detected capacity change from 0 to 131072 [ 40.216130][ T1259] F2FS-fs (loop2): Found nat_bits in checkpoint [ 40.349952][ T1259] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 40.570589][ T39] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 40.750571][ T39] usb 6-1: Using ep0 maxpacket: 32 [ 40.756865][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.778272][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.798430][ T39] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 40.825855][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.845763][ T39] usb 6-1: config 0 descriptor?? [ 41.261845][ T39] savu 0003:1E7D:2D5A.0002: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 41.419880][ T1293] loop2: detected capacity change from 0 to 131072 [ 41.439637][ T1293] F2FS-fs (loop2): Test dummy encryption mode enabled [ 41.467309][ T1293] F2FS-fs (loop2): invalid crc value [ 41.484285][ T1293] F2FS-fs (loop2): Found nat_bits in checkpoint [ 41.552484][ T1293] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 41.573590][ T1293] F2FS-fs (loop2): Start checkpoint disabled! [ 41.590601][ T1293] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 41.603779][ T1293] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 41.906613][ T1324] mmap: syz.1.401 (1324) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 41.939700][ T1324] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 42.019896][ T1330] netlink: 'syz.1.403': attribute type 4 has an invalid length. [ 42.046214][ T6] usb 6-1: USB disconnect, device number 4 [ 42.061589][ T1330] netlink: 'syz.1.403': attribute type 4 has an invalid length. [ 42.107784][ T1311] loop3: detected capacity change from 0 to 131072 [ 42.150211][ T1311] F2FS-fs (loop3): invalid crc value [ 42.203020][ T1311] F2FS-fs (loop3): Found nat_bits in checkpoint [ 42.290815][ T1311] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 42.362613][ T1311] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 42.406450][ T1361] FAULT_INJECTION: forcing a failure. [ 42.406450][ T1361] name failslab, interval 1, probability 0, space 0, times 0 [ 42.445005][ T1359] SELinux: failed to load policy [ 42.456392][ T1361] CPU: 1 PID: 1361 Comm: syz.5.416 Tainted: G W syzkaller #0 [ 42.465216][ T1361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 42.475285][ T1361] Call Trace: [ 42.478571][ T1361] [ 42.481507][ T1361] __dump_stack+0x21/0x24 [ 42.485856][ T1361] dump_stack_lvl+0x110/0x170 [ 42.490550][ T1361] ? __cfi_dump_stack_lvl+0x8/0x8 [ 42.495588][ T1361] dump_stack+0x15/0x24 [ 42.499761][ T1361] should_fail_ex+0x3bf/0x510 [ 42.504451][ T1361] __should_failslab+0xac/0xf0 [ 42.509227][ T1361] should_failslab+0x9/0x20 [ 42.513743][ T1361] slab_pre_alloc_hook+0x30/0x1d0 [ 42.518786][ T1361] ? __cfi_selinux_socket_create+0x10/0x10 [ 42.524605][ T1361] kmem_cache_alloc_lru+0x49/0x280 [ 42.529727][ T1361] ? sock_alloc_inode+0x28/0xc0 [ 42.534584][ T1361] sock_alloc_inode+0x28/0xc0 [ 42.539268][ T1361] ? __cfi_sock_alloc_inode+0x10/0x10 [ 42.544646][ T1361] new_inode_pseudo+0x70/0x1f0 [ 42.549426][ T1361] sock_create_lite+0x8b/0x4f0 [ 42.554197][ T1361] __netlink_kernel_create+0x11c/0x930 [ 42.559672][ T1361] ? __netlink_kernel_create+0x819/0x930 [ 42.565320][ T1361] ? __cfi___netlink_kernel_create+0x10/0x10 [ 42.571311][ T1361] ? memcpy+0x56/0x70 [ 42.575302][ T1361] genl_pernet_init+0xb6/0x170 [ 42.580073][ T1361] ? __cfi_genl_pernet_init+0x10/0x10 [ 42.585448][ T1361] ? rtnetlink_net_init+0xbd/0x140 [ 42.590573][ T1361] ? __cfi_genl_rcv+0x10/0x10 [ 42.595259][ T1361] ? __cfi_genl_bind+0x10/0x10 [ 42.600038][ T1361] ? __cfi_rtnetlink_bind+0x10/0x10 [ 42.605241][ T1361] ? memset+0x35/0x40 [ 42.609232][ T1361] ? __mutex_init+0xcd/0x1a0 [ 42.613852][ T1361] ops_init+0x2ce/0x470 [ 42.618010][ T1361] setup_net+0x4b4/0xcd0 [ 42.622259][ T1361] ? copy_net_ns+0x5c0/0x5c0 [ 42.626860][ T1361] ? __kasan_kmalloc+0x95/0xb0 [ 42.631627][ T1361] ? copy_net_ns+0x185/0x5c0 [ 42.636308][ T1361] copy_net_ns+0x355/0x5c0 [ 42.640736][ T1361] create_new_namespaces+0x3a8/0x660 [ 42.646029][ T1361] unshare_nsproxy_namespaces+0x120/0x170 [ 42.651753][ T1361] ksys_unshare+0x4d5/0x850 [ 42.656275][ T1361] ? __cfi_ksys_unshare+0x10/0x10 [ 42.661313][ T1361] ? fpregs_restore_userregs+0x128/0x260 [ 42.666959][ T1361] __x64_sys_unshare+0x38/0x40 [ 42.671732][ T1361] x64_sys_call+0x767/0x9a0 [ 42.676248][ T1361] do_syscall_64+0x4c/0xa0 [ 42.680681][ T1361] ? clear_bhb_loop+0x30/0x80 [ 42.685370][ T1361] ? clear_bhb_loop+0x30/0x80 [ 42.690060][ T1361] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 42.695958][ T1361] RIP: 0033:0x7fb7bf39e159 [ 42.696160][ T1371] loop1: detected capacity change from 0 to 256 [ 42.700370][ T1361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.700388][ T1361] RSP: 002b:00007fb7c02d9028 EFLAGS: 00000246 [ 42.725274][ T1371] exfat: Unknown parameter '0xffffffffffffffff01777777777777777777777' [ 42.726199][ T1361] ORIG_RAX: 0000000000000110 [ 42.726210][ T1361] RAX: ffffffffffffffda RBX: 00007fb7bf625fa0 RCX: 00007fb7bf39e159 [ 42.753097][ T1361] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000600 [ 42.761075][ T1361] RBP: 00007fb7bf43506b R08: 0000000000000000 R09: 0000000000000000 [ 42.769043][ T1361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.776998][ T1361] R13: 00007fb7bf626038 R14: 00007fb7bf625fa0 R15: 00007ffdcbc45fc8 [ 42.784954][ T1361] [ 42.818517][ T1395] loop3: detected capacity change from 0 to 128 [ 43.090476][ T1428] bridge0: port 4(syz_tun) entered blocking state [ 43.097013][ T1428] bridge0: port 4(syz_tun) entered disabled state [ 43.111034][ T1428] device syz_tun entered promiscuous mode [ 43.138080][ T1428] bridge0: port 4(syz_tun) entered blocking state [ 43.144603][ T1428] bridge0: port 4(syz_tun) entered forwarding state [ 43.220874][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 43.220888][ T28] audit: type=1400 audit(1700000001.240:381): avc: denied { map } for pid=1440 comm="syz.5.446" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 43.253010][ T1447] loop5: detected capacity change from 0 to 128 [ 43.281922][ T1447] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 43.376755][ T415] kworker/u4:5: attempt to access beyond end of device [ 43.376755][ T415] loop5: rw=1, sector=156, nr_sectors = 1 limit=128 [ 43.423816][ T415] Buffer I/O error on dev loop5, logical block 156, lost async page write [ 43.450939][ T415] kworker/u4:5: attempt to access beyond end of device [ 43.450939][ T415] loop5: rw=1, sector=157, nr_sectors = 1 limit=128 [ 43.484688][ T415] Buffer I/O error on dev loop5, logical block 157, lost async page write [ 43.503784][ T415] kworker/u4:5: attempt to access beyond end of device [ 43.503784][ T415] loop5: rw=1, sector=158, nr_sectors = 1 limit=128 [ 43.530599][ T415] Buffer I/O error on dev loop5, logical block 158, lost async page write [ 43.549312][ T415] kworker/u4:5: attempt to access beyond end of device [ 43.549312][ T415] loop5: rw=1, sector=159, nr_sectors = 1 limit=128 [ 43.574353][ T28] audit: type=1400 audit(1700000001.590:382): avc: denied { write } for pid=1457 comm="syz.0.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.596206][ T415] Buffer I/O error on dev loop5, logical block 159, lost async page write [ 43.605017][ T415] kworker/u4:5: attempt to access beyond end of device [ 43.605017][ T415] loop5: rw=1, sector=160, nr_sectors = 1 limit=128 [ 43.623416][ T415] Buffer I/O error on dev loop5, logical block 160, lost async page write [ 43.637093][ T415] kworker/u4:5: attempt to access beyond end of device [ 43.637093][ T415] loop5: rw=1, sector=161, nr_sectors = 1 limit=128 [ 43.656317][ T415] Buffer I/O error on dev loop5, logical block 161, lost async page write [ 43.665604][ T415] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 43.680001][ T28] audit: type=1400 audit(1700000001.700:383): avc: denied { write } for pid=1463 comm="syz.0.457" path="socket:[20357]" dev="sockfs" ino=20357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.745763][ T1469] loop1: detected capacity change from 0 to 512 [ 43.823555][ T1469] EXT4-fs error (device loop1): ext4_iget_extra_inode:4765: inode #15: comm syz.1.458: corrupted in-inode xattr [ 43.846143][ T28] audit: type=1326 audit(1700000001.860:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1485 comm="syz.5.462" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb7bf39e159 code=0x0 [ 43.875397][ T1495] xt_hashlimit: size too large, truncated to 1048576 [ 43.885609][ T1469] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.458: couldn't read orphan inode 15 (err -117) [ 43.909037][ T1469] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 43.963500][ T28] audit: type=1400 audit(1700000001.980:385): avc: denied { mounton } for pid=1468 comm="syz.1.458" path="/83/file0" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.084219][ T1511] loop3: detected capacity change from 0 to 256 [ 44.099616][ T1511] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 44.112749][ T1509] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 44.144365][ T289] EXT4-fs (loop1): unmounting filesystem. [ 44.150611][ T28] audit: type=1400 audit(1700000002.160:386): avc: denied { write } for pid=1510 comm="syz.3.468" name="file1" dev="loop3" ino=1048617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.202220][ T28] audit: type=1400 audit(1700000002.200:387): avc: denied { remove_name } for pid=1510 comm="syz.3.468" name="file0" dev="loop3" ino=1048618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.248814][ T28] audit: type=1400 audit(1700000002.200:388): avc: denied { rmdir } for pid=1510 comm="syz.3.468" name="file0" dev="loop3" ino=1048618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.288832][ T1519] netlink: 20 bytes leftover after parsing attributes in process `syz.0.471'. [ 44.676596][ T1537] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 44.706787][ T1539] netlink: 'syz.5.476': attribute type 4 has an invalid length. [ 44.740030][ T1539] netlink: 'syz.5.476': attribute type 4 has an invalid length. [ 44.827414][ T1552] overlayfs: failed to clone upperpath [ 44.841600][ T1555] loop5: detected capacity change from 0 to 512 [ 44.877698][ T1555] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.931803][ T28] audit: type=1400 audit(1700000002.950:389): avc: denied { watch_reads } for pid=1563 comm="syz.2.490" path="/71" dev="tmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 44.970549][ T28] audit: type=1400 audit(1700000002.960:390): avc: denied { write } for pid=1562 comm="syz.0.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 45.006137][ T1573] netlink: 276 bytes leftover after parsing attributes in process `syz.0.494'. [ 45.038814][ T1573] netlink: 276 bytes leftover after parsing attributes in process `syz.0.494'. [ 45.133749][ T1591] device pim6reg1 entered promiscuous mode [ 45.459639][ T1542] loop3: detected capacity change from 0 to 131072 [ 45.494549][ T1542] F2FS-fs (loop3): Test dummy encryption mode enabled [ 45.518928][ T1542] F2FS-fs (loop3): invalid crc value [ 45.571666][ T1542] F2FS-fs (loop3): Found nat_bits in checkpoint [ 45.628254][ T1639] loop1: detected capacity change from 0 to 512 [ 45.655911][ T1542] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 45.666086][ T1639] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 45.695890][ T1542] F2FS-fs (loop3): Start checkpoint disabled! [ 45.706501][ T1639] EXT4-fs (loop1): 1 truncate cleaned up [ 45.730721][ T1639] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 45.739184][ T1542] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 45.820403][ T1542] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 45.899744][ T289] EXT4-fs (loop1): unmounting filesystem. [ 46.162331][ T1629] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 46.198058][ T1629] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 46.260408][ T1629] F2FS-fs (loop5): invalid crc value [ 46.283317][ T1629] F2FS-fs (loop5): Found nat_bits in checkpoint [ 46.358977][ T1620] F2FS-fs (loop2): invalid crc value [ 46.392371][ T1620] F2FS-fs (loop2): Found nat_bits in checkpoint [ 46.400549][ T1629] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 46.417774][ T1629] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 46.478409][ T1620] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 47.050373][ T309] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 47.231413][ T309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.245644][ T309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.260204][ T309] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 47.276331][ T309] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 47.285641][ T309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.296786][ T309] usb 3-1: config 0 descriptor?? [ 47.408990][ T1721] netlink: 28 bytes leftover after parsing attributes in process `syz.0.552'. [ 47.608202][ T1729] set_capacity_and_notify: 2 callbacks suppressed [ 47.608221][ T1729] loop3: detected capacity change from 0 to 40427 [ 47.631620][ T1729] F2FS-fs (loop3): invalid crc value [ 47.647817][ T1729] F2FS-fs (loop3): Found nat_bits in checkpoint [ 47.691743][ T1729] F2FS-fs (loop3): Start checkpoint disabled! [ 47.707858][ T309] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 47.718928][ T1729] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 47.730975][ T309] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 47.736867][ T1743] device ip6gre1 entered promiscuous mode [ 47.750465][ T1729] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 47.779628][ T1745] random: crng reseeded on system resumption [ 47.786359][ T1745] FAULT_INJECTION: forcing a failure. [ 47.786359][ T1745] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 47.803086][ T1745] CPU: 1 PID: 1745 Comm: syz.1.562 Tainted: G W syzkaller #0 [ 47.811868][ T1745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 47.819187][ T1729] syz.3.556: attempt to access beyond end of device [ 47.819187][ T1729] loop3: rw=0, sector=49152, nr_sectors = 8 limit=40427 [ 47.821922][ T1745] Call Trace: [ 47.821930][ T1745] [ 47.821938][ T1745] __dump_stack+0x21/0x24 [ 47.845807][ T1745] dump_stack_lvl+0x110/0x170 [ 47.847358][ T1729] syz.3.556: attempt to access beyond end of device [ 47.847358][ T1729] loop3: rw=524288, sector=49152, nr_sectors = 8 limit=40427 [ 47.850505][ T1745] ? __cfi_dump_stack_lvl+0x8/0x8 [ 47.850539][ T1745] dump_stack+0x15/0x24 [ 47.873459][ T1745] should_fail_ex+0x3bf/0x510 [ 47.874934][ T1729] syz.3.556: attempt to access beyond end of device [ 47.874934][ T1729] loop3: rw=0, sector=49152, nr_sectors = 8 limit=40427 [ 47.878138][ T1745] should_fail_alloc_page+0x61/0x90 [ 47.896658][ T1745] prepare_alloc_pages+0x131/0x570 [ 47.898762][ T1746] syz.0.561 (1746) used greatest stack depth: 18728 bytes left [ 47.901777][ T1745] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 47.901805][ T1745] ? __alloc_pages+0x610/0x610 [ 47.901826][ T1745] __alloc_pages+0x15b/0x610 [ 47.918901][ T309] usb 3-1: USB disconnect, device number 2 [ 47.919260][ T1745] ? __cfi___alloc_pages+0x10/0x10 [ 47.934715][ T1745] ? __alloc_pages+0x1fa/0x610 [ 47.939490][ T1745] get_zeroed_page+0x19/0x40 [ 47.944166][ T1745] get_image_page+0x46/0x360 [ 47.948767][ T1745] alloc_rtree_node+0xea/0x150 [ 47.953548][ T1745] memory_bm_create+0x4d7/0x950 [ 47.958411][ T1745] create_basic_memory_bitmaps+0x97/0x420 [ 47.964146][ T1745] snapshot_open+0x1bc/0x290 [ 47.968734][ T1745] ? __cfi_snapshot_open+0x10/0x10 [ 47.973846][ T1745] misc_open+0x337/0x3b0 [ 47.978095][ T1745] chrdev_open+0x593/0x600 [ 47.982510][ T1745] ? __cfi_chrdev_open+0x10/0x10 [ 47.987445][ T1745] ? fsnotify_perm+0x3e9/0x5b0 [ 47.992215][ T1745] do_dentry_open+0x885/0x11f0 [ 47.997011][ T1745] ? __cfi_chrdev_open+0x10/0x10 [ 48.001949][ T1745] vfs_open+0x73/0x80 [ 48.005934][ T1745] path_openat+0x2699/0x2f30 [ 48.010526][ T1745] ? slab_post_alloc_hook+0x4f/0x2d0 [ 48.015822][ T1745] ? kmem_cache_alloc+0x166/0x320 [ 48.020857][ T1745] ? getname_flags+0xba/0x510 [ 48.025536][ T1745] ? do_sys_openat2+0xeb/0x820 [ 48.030290][ T1745] ? do_filp_open+0x420/0x420 [ 48.034959][ T1745] do_filp_open+0x1ee/0x420 [ 48.039462][ T1745] ? __cfi_do_filp_open+0x10/0x10 [ 48.044469][ T1745] ? alloc_fd+0x4c1/0x570 [ 48.048784][ T1745] do_sys_openat2+0x15e/0x820 [ 48.053441][ T1745] ? __se_sys_futex+0x136/0x310 [ 48.058269][ T1745] ? do_sys_open+0xe0/0xe0 [ 48.062665][ T1745] ? __this_cpu_preempt_check+0x13/0x20 [ 48.068194][ T1745] ? xfd_validate_state+0x70/0x150 [ 48.073299][ T1745] __x64_sys_openat+0x136/0x160 [ 48.078129][ T1745] x64_sys_call+0x783/0x9a0 [ 48.082616][ T1745] do_syscall_64+0x4c/0xa0 [ 48.087014][ T1745] ? clear_bhb_loop+0x30/0x80 [ 48.091667][ T1745] ? clear_bhb_loop+0x30/0x80 [ 48.096320][ T1745] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 48.102189][ T1745] RIP: 0033:0x7f9c0a99e159 [ 48.106583][ T1745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.126167][ T1745] RSP: 002b:00007f9c0b8b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 48.134559][ T1745] RAX: ffffffffffffffda RBX: 00007f9c0ac25fa0 RCX: 00007f9c0a99e159 [ 48.142513][ T1745] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 48.150567][ T1745] RBP: 00007f9c0aa3506b R08: 0000000000000000 R09: 0000000000000000 [ 48.158517][ T1745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.166468][ T1745] R13: 00007f9c0ac26038 R14: 00007f9c0ac25fa0 R15: 00007ffe0675b688 [ 48.174422][ T1745] [ 48.209139][ T1748] fido_id[1748]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 48.213518][ T10] kworker/u4:1: attempt to access beyond end of device [ 48.213518][ T10] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 48.340039][ T1757] loop3: detected capacity change from 0 to 256 [ 48.351699][ T1757] exfat: Unknown parameter '0xffffffffffffffff01777777777777777777777' [ 48.706884][ T1771] loop2: detected capacity change from 0 to 512 [ 48.722300][ T1771] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 48.740814][ T1771] EXT4-fs (loop2): 1 truncate cleaned up [ 48.746500][ T1771] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 48.806684][ T290] EXT4-fs (loop2): unmounting filesystem. [ 48.860195][ T1688] Bluetooth: hci0: command 0x1003 tx timeout [ 48.860203][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 49.004083][ T1788] loop2: detected capacity change from 0 to 1024 [ 49.023693][ T1788] EXT4-fs: Ignoring removed orlov option [ 49.037000][ T1792] loop5: detected capacity change from 0 to 1024 [ 49.061862][ T1792] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 49.078094][ T1788] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 49.109608][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 49.109622][ T28] audit: type=1400 audit(1700000007.120:399): avc: denied { setattr } for pid=1787 comm="syz.2.578" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.148664][ T493] EXT4-fs (loop5): unmounting filesystem. [ 49.149101][ T290] EXT4-fs (loop2): unmounting filesystem. [ 49.619416][ T28] audit: type=1400 audit(1700000007.630:400): avc: denied { write } for pid=1849 comm="syz.1.598" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 49.886207][ T28] audit: type=1400 audit(1700000007.900:401): avc: denied { read } for pid=1873 comm="syz.1.609" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 49.938365][ T28] audit: type=1400 audit(1700000007.900:402): avc: denied { open } for pid=1873 comm="syz.1.609" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 49.988407][ T1878] loop3: detected capacity change from 0 to 256 [ 50.287906][ T28] audit: type=1400 audit(1700000008.300:403): avc: denied { mount } for pid=1886 comm="syz.2.617" name="/" dev="ramfs" ino=22145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 50.811849][ T1915] loop1: detected capacity change from 0 to 1024 [ 50.881006][ T1915] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 50.961336][ T289] EXT4-fs (loop1): unmounting filesystem. [ 50.966097][ T1912] loop5: detected capacity change from 0 to 40427 [ 50.977166][ T1912] F2FS-fs (loop5): invalid crc value [ 51.000687][ T1912] F2FS-fs (loop5): Found nat_bits in checkpoint [ 51.055140][ T1912] F2FS-fs (loop5): Start checkpoint disabled! [ 51.065937][ T1912] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 51.083708][ T1912] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 51.180074][ T309] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 51.214461][ T1912] syz.5.627: attempt to access beyond end of device [ 51.214461][ T1912] loop5: rw=0, sector=49152, nr_sectors = 8 limit=40427 [ 51.251967][ T1912] syz.5.627: attempt to access beyond end of device [ 51.251967][ T1912] loop5: rw=524288, sector=49152, nr_sectors = 8 limit=40427 [ 51.286474][ T1912] syz.5.627: attempt to access beyond end of device [ 51.286474][ T1912] loop5: rw=0, sector=49152, nr_sectors = 8 limit=40427 [ 51.356495][ T10] kworker/u4:1: attempt to access beyond end of device [ 51.356495][ T10] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 51.371127][ T309] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.389930][ T309] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 51.434559][ T309] usb 3-1: config 0 interface 0 has no altsetting 0 [ 51.452520][ T309] usb 3-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 51.476367][ T309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.500292][ T309] usb 3-1: config 0 descriptor?? [ 51.707438][ T28] audit: type=1400 audit(1700000009.720:404): avc: denied { search } for pid=1945 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.742437][ T1919] loop3: detected capacity change from 0 to 131072 [ 51.759516][ T1919] F2FS-fs (loop3): invalid crc value [ 51.779239][ T28] audit: type=1400 audit(1700000009.720:405): avc: denied { read } for pid=1947 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.782008][ T1954] loop1: detected capacity change from 0 to 256 [ 51.832364][ T1919] F2FS-fs (loop3): Found nat_bits in checkpoint [ 51.869992][ T28] audit: type=1400 audit(1700000009.720:406): avc: denied { open } for pid=1947 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.933337][ T309] wacom 0003:056A:00BB.0004: Unknown device_type for 'HID 056a:00bb'. Assuming pen. [ 51.938624][ T28] audit: type=1400 audit(1700000009.720:407): avc: denied { getattr } for pid=1947 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.953621][ T309] wacom 0003:056A:00BB.0004: hidraw0: USB HID v0.00 Device [HID 056a:00bb] on usb-dummy_hcd.2-1/input0 [ 51.996410][ T1919] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 51.998933][ T1973] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 52.036867][ T309] input: Wacom Intuos4 12x19 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00BB.0004/input/input9 [ 52.055328][ T28] audit: type=1400 audit(1700000009.720:408): avc: denied { getattr } for pid=1947 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=503 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.198949][ T1982] xt_hashlimit: size too large, truncated to 1048576 [ 52.212773][ T60] usb 3-1: USB disconnect, device number 3 [ 52.220704][ T309] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 52.409999][ T309] usb 6-1: Using ep0 maxpacket: 32 [ 52.421830][ T309] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 52.445661][ T309] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 7 [ 52.472798][ T309] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 52.491626][ T309] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.518411][ T309] usb 6-1: Product: syz [ 52.526587][ T309] usb 6-1: Manufacturer: syz [ 52.534522][ T309] usb 6-1: SerialNumber: syz [ 52.583664][ T2017] FAT-fs (loop3): error, clusters badly computed (0 != 128) [ 52.601940][ T2017] FAT-fs (loop3): Filesystem has been set read-only [ 52.612893][ T2017] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 52.623812][ T2017] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 52.712108][ T2034] set_capacity_and_notify: 2 callbacks suppressed [ 52.712157][ T2034] loop3: detected capacity change from 0 to 4096 [ 52.743496][ T2034] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.760503][ T2034] EXT4-fs (loop3): Test dummy encryption mode enabled [ 52.764604][ T309] usb 6-1: Can't get UAC3 power state for id 10 [ 52.780259][ T2034] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 52.785732][ T309] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 52.808635][ T2034] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 52.821247][ T2034] fscrypt: AES-256-XTS using blk-crypto-fallback [ 52.843995][ T309] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 52.864803][ T309] usb 6-1: USB disconnect, device number 5 [ 52.872565][ T287] EXT4-fs (loop3): unmounting filesystem. [ 52.876521][ T2051] loop1: detected capacity change from 0 to 2048 [ 52.886368][ T2051] ext4: Unknown parameter 'uid>00000000000000000000' [ 53.063730][ T2087] loop2: detected capacity change from 0 to 256 [ 53.083578][ T2087] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 53.271638][ T2099] loop5: detected capacity change from 0 to 256 [ 53.317848][ T2101] kvm [2100]: vcpu0, guest rIP: 0x9143 Unhandled WRMSR(0x11e) = 0xbe702111 [ 53.329979][ T309] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 53.509876][ T309] usb 2-1: Using ep0 maxpacket: 32 [ 53.516167][ T309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.531507][ T309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.545704][ T309] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 53.559188][ T309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.571233][ T309] usb 2-1: config 0 descriptor?? [ 53.681200][ T2114] loop5: detected capacity change from 0 to 1024 [ 53.719625][ T2114] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 53.728518][ T2114] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.752994][ T2114] EXT4-fs error (device loop5): ext4_free_blocks:6220: comm syz.5.680: Freeing blocks not in datazone - block = 0, count = 16 [ 53.773956][ T493] EXT4-fs (loop5): unmounting filesystem. [ 53.947164][ T2129] loop5: detected capacity change from 0 to 1024 [ 53.975962][ T2131] loop3: detected capacity change from 0 to 128 [ 53.984397][ T309] savu 0003:1E7D:2D5A.0005: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 53.996219][ T307] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 54.003844][ T2131] EXT4-fs (loop3): Test dummy encryption mode enabled [ 54.007580][ T2129] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 54.025470][ T2131] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 54.026152][ T2129] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 54.047137][ T2131] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 54.047178][ T2129] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 54.067619][ T2131] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 54.075251][ T2129] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 54.090833][ T287] EXT4-fs (loop3): unmounting filesystem. [ 54.163034][ T2147] FAULT_INJECTION: forcing a failure. [ 54.163034][ T2147] name failslab, interval 1, probability 0, space 0, times 0 [ 54.175876][ T2147] CPU: 0 PID: 2147 Comm: syz.3.692 Tainted: G W syzkaller #0 [ 54.184655][ T2147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 54.192872][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 54.192887][ T28] audit: type=1400 audit(1700000012.210:436): avc: denied { lock } for pid=2150 comm="syz.5.693" path="socket:[21472]" dev="sockfs" ino=21472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 54.194726][ T2147] Call Trace: [ 54.194734][ T2147] [ 54.230517][ T2147] __dump_stack+0x21/0x24 [ 54.234841][ T2147] dump_stack_lvl+0x110/0x170 [ 54.239515][ T2147] ? __cfi_dump_stack_lvl+0x8/0x8 [ 54.244524][ T2147] dump_stack+0x15/0x24 [ 54.248675][ T2147] should_fail_ex+0x3bf/0x510 [ 54.253340][ T2147] __should_failslab+0xac/0xf0 [ 54.258096][ T2147] should_failslab+0x9/0x20 [ 54.262584][ T2147] __kmem_cache_alloc_node+0x3d/0x2d0 [ 54.267940][ T2147] ? sk_prot_alloc+0xed/0x320 [ 54.272607][ T2147] ? __cfi_selinux_socket_post_create+0x10/0x10 [ 54.278843][ T2147] ? sk_prot_alloc+0xed/0x320 [ 54.283500][ T2147] __kmalloc+0xa4/0x1e0 [ 54.287654][ T2147] sk_prot_alloc+0xed/0x320 [ 54.292148][ T2147] sk_alloc+0x3b/0x460 [ 54.296204][ T2147] ? sock_create_lite+0x2f1/0x4f0 [ 54.301213][ T2147] __netlink_kernel_create+0x18c/0x930 [ 54.306654][ T2147] ? __cfi___netlink_kernel_create+0x10/0x10 [ 54.312624][ T2147] ? memcpy+0x56/0x70 [ 54.316594][ T2147] audit_net_init+0x106/0x230 [ 54.321261][ T2147] ? __cfi_audit_net_init+0x10/0x10 [ 54.326455][ T2147] ? __cfi_audit_receive+0x10/0x10 [ 54.331555][ T2147] ? __cfi_audit_multicast_bind+0x10/0x10 [ 54.337343][ T2147] ? __cfi_audit_multicast_unbind+0x10/0x10 [ 54.343223][ T2147] ? kasan_save_alloc_info+0x1f/0x30 [ 54.348510][ T2147] ? __kasan_kmalloc+0x95/0xb0 [ 54.353261][ T2147] ? ops_init+0x88/0x470 [ 54.357488][ T2147] ? __kmalloc+0xb4/0x1e0 [ 54.361798][ T2147] ops_init+0x2ce/0x470 [ 54.365932][ T2147] setup_net+0x4b4/0xcd0 [ 54.370252][ T2147] ? copy_net_ns+0x5c0/0x5c0 [ 54.374853][ T2147] ? __kasan_kmalloc+0x95/0xb0 [ 54.379615][ T2147] ? copy_net_ns+0x185/0x5c0 [ 54.384211][ T2147] copy_net_ns+0x355/0x5c0 [ 54.388623][ T2147] create_new_namespaces+0x3a8/0x660 [ 54.393899][ T2147] unshare_nsproxy_namespaces+0x120/0x170 [ 54.399606][ T2147] ksys_unshare+0x4d5/0x850 [ 54.404095][ T2147] ? __cfi_ksys_unshare+0x10/0x10 [ 54.409107][ T2147] ? fpregs_restore_userregs+0x128/0x260 [ 54.414725][ T2147] __x64_sys_unshare+0x38/0x40 [ 54.419473][ T2147] x64_sys_call+0x767/0x9a0 [ 54.423958][ T2147] do_syscall_64+0x4c/0xa0 [ 54.428361][ T2147] ? clear_bhb_loop+0x30/0x80 [ 54.433033][ T2147] ? clear_bhb_loop+0x30/0x80 [ 54.437692][ T2147] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 54.443564][ T2147] RIP: 0033:0x7efc1979e159 [ 54.447963][ T2147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.467552][ T2147] RSP: 002b:00007efc1a6cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 54.475955][ T2147] RAX: ffffffffffffffda RBX: 00007efc19a25fa0 RCX: 00007efc1979e159 [ 54.483914][ T2147] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 54.491866][ T2147] RBP: 00007efc1983506b R08: 0000000000000000 R09: 0000000000000000 [ 54.499821][ T2147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.507778][ T2147] R13: 00007efc19a26038 R14: 00007efc19a25fa0 R15: 00007fffd72ce318 [ 54.515735][ T2147] [ 54.519839][ T2147] audit: cannot initialize netlink socket in namespace [ 54.530243][ T307] usb 3-1: unable to get BOS descriptor or descriptor too short [ 54.538699][ T307] usb 3-1: config 129 has an invalid interface number: 80 but max is 0 [ 54.547032][ T307] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 54.555293][ T307] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 54.564465][ T307] usb 3-1: config 129 has no interface number 0 [ 54.570778][ T307] usb 3-1: config 129 has no interface number 1 [ 54.577064][ T307] usb 3-1: config 129 interface 80 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 54.590352][ T307] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 54.601251][ T307] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 54.608857][ T2155] Source file dentry negative [ 54.614441][ T307] usb 3-1: config 129 interface 80 has no altsetting 0 [ 54.625987][ T307] usb 3-1: config 129 interface 5 has no altsetting 0 [ 54.647687][ T307] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 54.651264][ T28] audit: type=1400 audit(1700000012.670:437): avc: denied { mounton } for pid=2158 comm="syz.3.696" path="/135/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 54.656844][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.687112][ T307] usb 3-1: SerialNumber: syz [ 54.896615][ T307] usb 3-1: MIDIStreaming interface descriptor not found [ 54.907496][ T307] usb 3-1: USB disconnect, device number 4 [ 54.917824][ T601] udevd[601]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:129.5/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.034996][ T2164] loop5: detected capacity change from 0 to 16 [ 55.041739][ T2164] erofs: (device loop5): mounted with root inode @ nid 36. [ 55.050018][ T2164] overlayfs: upper fs is r/o, try multi-lower layers mount [ 55.104461][ T24] usb 2-1: USB disconnect, device number 3 [ 55.121196][ T2169] netlink: 20 bytes leftover after parsing attributes in process `syz.1.700'. [ 55.146751][ T28] audit: type=1400 audit(1700000013.160:438): avc: denied { setopt } for pid=2170 comm="syz.1.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.186436][ T28] audit: type=1400 audit(1700000013.200:439): avc: denied { set_context_mgr } for pid=2174 comm="syz.1.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 55.433324][ T2184] loop2: detected capacity change from 0 to 512 [ 55.440694][ T2184] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 55.580372][ T2205] 9pnet: p9_errstr2errno: server reported unknown error ��n$Ž[ [ 55.580372][ T2205] Q&|xù6 [ 55.611580][ T2206] raw_sendmsg: syz.2.714 forgot to set AF_INET. Fix it! [ 55.668411][ T2212] loop3: detected capacity change from 0 to 1024 [ 55.699117][ T2212] EXT4-fs: Ignoring removed orlov option [ 55.725500][ T2212] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 55.897031][ T2212] EXT4-fs (loop3): shut down requested (1) [ 55.916258][ T287] EXT4-fs (loop3): unmounting filesystem. [ 55.928962][ T28] audit: type=1400 audit(1700000013.940:440): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 55.952013][ T28] audit: type=1400 audit(1700000013.940:441): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.977655][ T28] audit: type=1400 audit(1700000013.940:442): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.016278][ T28] audit: type=1400 audit(1700000013.940:443): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.036966][ T28] audit: type=1400 audit(1700000013.940:444): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.061545][ T2235] kvm [2234]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 56.099722][ T60] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 56.232433][ T2243] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 56.241082][ T2243] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.266592][ T2243] EXT4-fs error (device loop1): ext4_free_blocks:6220: comm syz.1.731: Freeing blocks not in datazone - block = 0, count = 16 [ 56.288516][ T289] EXT4-fs (loop1): unmounting filesystem. [ 56.296865][ T60] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.316852][ T60] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 56.332159][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.340273][ T60] usb 3-1: Product: syz [ 56.344470][ T60] usb 3-1: Manufacturer: syz [ 56.345834][ T2266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.743'. [ 56.349058][ T60] usb 3-1: SerialNumber: syz [ 56.431087][ T2278] device bridge0 entered promiscuous mode [ 56.541082][ T2284] kvm: apic: phys broadcast and lowest prio [ 56.603954][ T2287] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001043e, chksum : 0xb50cf9ee, utbl_chksum : 0xe619d30d) [ 56.616624][ T2287] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00000005) bogus content (0x0008ffff) [ 56.627167][ T2287] exFAT-fs (loop1): failed to initialize root inode [ 56.884837][ T2295] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 56.901947][ T2297] netem: incorrect ge model size [ 56.907534][ T2297] netem: change failed [ 56.917052][ T2295] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 56.920070][ T2293] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 56.925767][ T2295] System zones: 1-12 [ 56.934180][ T2293] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.938345][ T2295] EXT4-fs (loop1): orphan cleanup on readonly fs [ 56.969955][ T2295] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.754: attempt to clear invalid blocks 1024 len 1 [ 56.983057][ T2293] EXT4-fs error (device loop3): ext4_free_blocks:6220: comm syz.3.752: Freeing blocks not in datazone - block = 0, count = 16 [ 56.983401][ T2295] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.754: bg 0: block 361: padding at end of block bitmap is not set [ 57.012029][ T2295] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 57.017256][ T287] EXT4-fs (loop3): unmounting filesystem. [ 57.027887][ T2295] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.754: invalid indirect mapped block 1811939328 (level 0) [ 57.046456][ T2295] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.754: invalid indirect mapped block 2 (level 2) [ 57.062699][ T2295] EXT4-fs (loop1): 1 truncate cleaned up [ 57.068629][ T2295] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 57.116904][ T289] EXT4-fs (loop1): unmounting filesystem. [ 57.164950][ T2317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.764'. [ 57.255130][ T2328] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 57.319915][ T2336] EXT4-fs: Ignoring removed orlov option [ 57.345036][ T2336] EXT4-fs (loop1): Test dummy encryption mode enabled [ 57.372806][ T2336] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 57.381852][ T60] cdc_ncm 3-1:1.0: failed to get mac address [ 57.438899][ T289] EXT4-fs (loop1): unmounting filesystem. [ 57.582817][ T60] cdc_ncm 3-1:1.0: bind() failure [ 57.589901][ T60] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 57.607181][ T60] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 57.637409][ T60] usb 3-1: USB disconnect, device number 5 [ 57.881076][ T2341] set_capacity_and_notify: 5 callbacks suppressed [ 57.881089][ T2341] loop1: detected capacity change from 0 to 131072 [ 57.896796][ T2341] F2FS-fs (loop1): Test dummy encryption mode enabled [ 57.904130][ T2341] F2FS-fs (loop1): invalid crc value [ 57.911029][ T2341] F2FS-fs (loop1): Found nat_bits in checkpoint [ 57.938842][ T2341] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 58.229604][ T307] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 58.429586][ T307] usb 2-1: Using ep0 maxpacket: 32 [ 58.436229][ T307] usb 2-1: unable to get BOS descriptor or descriptor too short [ 58.446974][ T307] usb 2-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 58.457173][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.465999][ T307] usb 2-1: Product: syz [ 58.470639][ T307] usb 2-1: Manufacturer: syz [ 58.475759][ T307] usb 2-1: SerialNumber: syz [ 58.612029][ T2424] loop2: detected capacity change from 0 to 256 [ 58.620989][ T2421] SELinux: failed to load policy [ 58.636636][ T2424] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 58.653469][ T2424] FAT-fs (loop2): Filesystem has been set read-only [ 58.689124][ T307] usb 2-1: MIDIStreaming interface descriptor not found [ 58.691432][ T307] usb 2-1: USB disconnect, device number 4 [ 58.930301][ T2459] loop2: detected capacity change from 0 to 512 [ 58.961535][ T2459] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 58.970823][ T2459] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.028840][ T290] EXT4-fs (loop2): unmounting filesystem. [ 59.082897][ T2479] loop2: detected capacity change from 0 to 512 [ 59.136519][ T2479] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 59.149722][ T2479] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.202288][ T2479] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #18: comm syz.2.828: corrupted inode contents [ 59.216785][ T2479] EXT4-fs (loop2): Remounting filesystem read-only [ 59.228544][ T2479] EXT4-fs error (device loop2): ext4_dirty_inode:6158: inode #18: comm syz.2.828: mark_inode_dirty error [ 59.243596][ T2479] EXT4-fs (loop2): Remounting filesystem read-only [ 59.250620][ T2479] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #18: comm syz.2.828: corrupted inode contents [ 59.262649][ T2479] EXT4-fs (loop2): Remounting filesystem read-only [ 59.269305][ T2479] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2947: inode #18: comm syz.2.828: mark_inode_dirty error [ 59.283458][ T2479] EXT4-fs (loop2): Remounting filesystem read-only [ 59.290226][ T2479] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2950: inode #18: comm syz.2.828: mark inode dirty (error -117) [ 59.302836][ T2479] EXT4-fs (loop2): Remounting filesystem read-only [ 59.309378][ T2479] EXT4-fs warning (device loop2): ext4_evict_inode:301: xattr delete (err -117) [ 59.332239][ T290] EXT4-fs (loop2): unmounting filesystem. [ 59.459864][ T28] kauditd_printk_skb: 405 callbacks suppressed [ 59.459880][ T28] audit: type=1326 audit(1700000017.481:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2493 comm="syz.2.835" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f719e159 code=0x7ffc0000 [ 59.521366][ T28] audit: type=1326 audit(1700000017.481:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2493 comm="syz.2.835" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f719e159 code=0x7ffc0000 [ 59.556022][ T2501] loop1: detected capacity change from 0 to 512 [ 59.578507][ T28] audit: type=1326 audit(1700000017.511:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2493 comm="syz.2.835" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f719e159 code=0x7ffc0000 [ 59.603692][ T28] audit: type=1326 audit(1700000017.511:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2493 comm="syz.2.835" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f719e159 code=0x7ffc0000 [ 59.629068][ T28] audit: type=1326 audit(1700000017.511:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2493 comm="syz.2.835" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f73f719e159 code=0x7ffc0000 [ 59.655525][ T28] audit: type=1326 audit(1700000017.511:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2493 comm="syz.2.835" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f719e159 code=0x7ffc0000 [ 59.693289][ T2501] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 59.712716][ T28] audit: type=1326 audit(1700000017.511:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2493 comm="syz.2.835" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f719e159 code=0x7ffc0000 [ 59.720364][ T2501] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.737410][ T28] audit: type=1326 audit(1700000017.511:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2493 comm="syz.2.835" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f719e159 code=0x7ffc0000 [ 59.773292][ T28] audit: type=1326 audit(1700000017.511:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2493 comm="syz.2.835" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f719e159 code=0x7ffc0000 [ 59.798632][ T28] audit: type=1326 audit(1700000017.511:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2493 comm="syz.2.835" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f73f719e159 code=0x7ffc0000 [ 59.864048][ T289] EXT4-fs (loop1): unmounting filesystem. [ 59.900978][ T2526] input: syz1 as /devices/virtual/input/input12 [ 60.077790][ T2546] loop3: detected capacity change from 0 to 512 [ 60.123896][ T2541] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.131490][ T2541] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.139300][ T2546] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 60.148623][ T2541] device bridge_slave_0 entered promiscuous mode [ 60.155335][ T2546] ext4 filesystem being mounted at /167/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.166487][ T2541] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.176976][ T2541] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.192836][ T2541] device bridge_slave_1 entered promiscuous mode [ 60.212667][ T287] EXT4-fs (loop3): unmounting filesystem. [ 60.267240][ T2541] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.274336][ T2541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.281730][ T2541] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.288760][ T2541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.289783][ T2555] loop3: detected capacity change from 0 to 512 [ 60.314241][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.331801][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.340107][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.340637][ T2555] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 60.357592][ T2555] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.374126][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.393509][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.400608][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.426936][ T287] EXT4-fs (loop3): unmounting filesystem. [ 60.433540][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.453816][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.460885][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.483771][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.494575][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.512713][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.533196][ T2572] loop3: detected capacity change from 0 to 512 [ 60.537853][ T2541] device veth0_vlan entered promiscuous mode [ 60.549418][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.557862][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.565549][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.567240][ T2572] EXT4-fs (loop3): 1 orphan inode deleted [ 60.573574][ T2574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.866'. [ 60.578810][ T2572] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 60.596571][ T43] EXT4-fs error (device loop3): ext4_release_dquot:6864: comm kworker/u4:2: Failed to release dquot type 1 [ 60.596630][ T2572] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.635550][ T2541] device veth1_macvtap entered promiscuous mode [ 60.643200][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.654392][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.663970][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.672291][ T2572] loop3: detected capacity change from 512 to 0 [ 60.684011][ C1] I/O error, dev loop3, sector 296 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 60.695924][ C1] I/O error, dev loop3, sector 96 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 60.706655][ T2572] EXT4-fs error (device loop3): ext4_write_dquot:6808: comm syz.3.865: Failed to commit dquot type 1 [ 60.718086][ T10] loop: Write error at byte offset 9223372036854775807, length 4096. [ 60.733699][ C1] I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 60.743221][ C1] I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 60.752689][ C1] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 60.764488][ T2572] EXT4-fs (loop3): I/O error while writing superblock [ 60.775886][ C1] I/O error, dev loop3, sector 272 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 60.785510][ C1] I/O error, dev loop3, sector 280 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 60.792343][ T2590] ip_tables: iptables: counters copy to user failed while replacing table [ 60.795859][ T2572] EXT4-fs error (device loop3): ext4_get_inode_loc:4660: inode #16: block 34: comm syz.3.865: unable to read itable block [ 60.818671][ T1836] loop: Write error at byte offset 9223372036854775807, length 4096. [ 60.827152][ C0] I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 60.836674][ C0] I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 60.846157][ C0] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 60.854693][ T2572] EXT4-fs (loop3): I/O error while writing superblock [ 60.861936][ T2572] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5954: IO failure [ 60.873252][ T1836] loop: Write error at byte offset 9223372036854775807, length 4096. [ 60.883198][ C0] I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 60.892718][ C0] I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 60.902180][ C0] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 60.915113][ T2572] EXT4-fs (loop3): I/O error while writing superblock [ 60.921906][ T2603] device gre1 entered promiscuous mode [ 60.937670][ T2572] EXT4-fs error (device loop3): ext4_dirty_inode:6158: inode #16: comm syz.3.865: mark_inode_dirty error [ 60.952326][ T1836] loop: Write error at byte offset 9223372036854775807, length 4096. [ 60.963314][ C0] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 60.971921][ T2572] EXT4-fs (loop3): I/O error while writing superblock [ 60.988147][ T2572] EXT4-fs error (device loop3): ext4_wait_block_bitmap:573: comm syz.3.865: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 61.002624][ T1836] loop: Write error at byte offset 9223372036854775807, length 4096. [ 61.013003][ C0] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 61.021847][ T2572] EXT4-fs (loop3): I/O error while writing superblock [ 61.036230][ T2572] EXT4-fs error (device loop3): ext4_write_dquot:6808: comm syz.3.865: Failed to commit dquot type 1 [ 61.051623][ T1836] loop: Write error at byte offset 9223372036854775807, length 4096. [ 61.063496][ C1] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 61.071770][ T2572] EXT4-fs (loop3): I/O error while writing superblock [ 61.093127][ T2572] EXT4-fs error (device loop3): ext4_get_inode_loc:4660: inode #16: block 34: comm syz.3.865: unable to read itable block [ 61.112247][ T10] loop: Write error at byte offset 9223372036854775807, length 4096. [ 61.125155][ C0] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 61.138023][ T2572] EXT4-fs (loop3): I/O error while writing superblock [ 61.144851][ T2572] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5954: IO failure [ 61.161434][ T43] loop: Write error at byte offset 9223372036854775807, length 4096. [ 61.181598][ C1] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 61.189886][ T2572] EXT4-fs (loop3): I/O error while writing superblock [ 61.196821][ T2572] EXT4-fs error (device loop3): ext4_dirty_inode:6158: inode #16: comm syz.3.865: mark_inode_dirty error [ 61.218590][ T43] loop: Write error at byte offset 9223372036854775807, length 4096. [ 61.230024][ C1] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 61.238297][ T2572] EXT4-fs (loop3): I/O error while writing superblock [ 61.250088][ T43] loop: Write error at byte offset 9223372036854775807, length 4096. [ 61.261142][ C0] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 61.297107][ T2632] loop5: detected capacity change from 0 to 256 [ 61.305888][ T2631] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 61.328163][ T2631] bridge0: port 3(vlan2) entered blocking state [ 61.334475][ T2631] bridge0: port 3(vlan2) entered forwarding state [ 61.389299][ T2637] synth uevent: /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:00: unknown uevent action string [ 61.413532][ T2637] acpi device:00: uevent: failed to send synthetic uevent: -22 [ 61.421790][ T318] tipc: Disabling bearer [ 61.427278][ T318] tipc: Left network mode [ 61.654761][ T2669] netlink: 'syz.5.909': attribute type 4 has an invalid length. [ 61.692376][ T2673] SELinux: failed to load policy [ 61.705519][ T2662] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.714128][ T2662] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.723961][ T2662] device bridge_slave_0 entered promiscuous mode [ 61.732869][ T2662] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.739968][ T2662] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.747416][ T2662] device bridge_slave_1 entered promiscuous mode [ 61.751629][ T2683] overlayfs: failed to clone upperpath [ 61.806703][ T2662] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.813756][ T2662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.821039][ T2662] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.828059][ T2662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.853671][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.861542][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.868748][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.877694][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.886090][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.894431][ T415] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.901493][ T415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.910534][ T2433] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 61.923233][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.931909][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.947067][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.954155][ T415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.961624][ T39] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 61.962402][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.977345][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.985475][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.993762][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.014749][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.027015][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.043722][ T2662] device veth0_vlan entered promiscuous mode [ 62.055237][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.073513][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.087940][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.096683][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.115544][ T318] device bridge_slave_1 left promiscuous mode [ 62.119369][ T2433] usb 2-1: Using ep0 maxpacket: 32 [ 62.123267][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.135037][ T318] device bridge_slave_0 left promiscuous mode [ 62.142051][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.149402][ T39] usb 7-1: Using ep0 maxpacket: 32 [ 62.149440][ T2433] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.155941][ T39] usb 7-1: unable to get BOS descriptor or descriptor too short [ 62.165651][ T2433] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.183513][ T318] device veth1_macvtap left promiscuous mode [ 62.184925][ T39] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.193621][ T2433] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 62.208734][ T318] device veth0_vlan left promiscuous mode [ 62.216400][ T39] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 62.225638][ T2433] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.227651][ T39] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 62.242455][ T2433] usb 2-1: config 0 descriptor?? [ 62.243386][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.256049][ T39] usb 7-1: Product: syz [ 62.260563][ T39] usb 7-1: Manufacturer: syz [ 62.266224][ T2433] hub 2-1:0.0: USB hub found [ 62.267195][ T39] usb 7-1: SerialNumber: syz [ 62.281087][ T39] usb 7-1: selecting invalid altsetting 1 [ 62.337623][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.346072][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.357647][ T2662] device veth1_macvtap entered promiscuous mode [ 62.370407][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.378226][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.386901][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.398505][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.407103][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.465821][ T2433] hub 2-1:0.0: 1 port detected [ 62.480364][ T2671] netlink: 12 bytes leftover after parsing attributes in process `syz.6.912'. [ 62.489865][ T2671] netlink: 44 bytes leftover after parsing attributes in process `syz.6.912'. [ 62.498792][ T2671] netlink: 43 bytes leftover after parsing attributes in process `syz.6.912'. [ 62.507693][ T2671] netlink: 'syz.6.912': attribute type 5 has an invalid length. [ 62.515523][ T2671] netlink: 43 bytes leftover after parsing attributes in process `syz.6.912'. [ 62.526414][ T39] usb 7-1: 6:0: failed to get current value for ch 0 (-71) [ 62.544516][ T39] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 62.554049][ T39] usb 7-1: USB disconnect, device number 2 [ 62.707484][ T2727] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.718275][ T2727] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 62.728034][ T2727] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 62.760559][ T600] udevd[600]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 62.964048][ T2757] netlink: 12 bytes leftover after parsing attributes in process `syz.5.946'. [ 62.972985][ T2757] netlink: 12 bytes leftover after parsing attributes in process `syz.5.946'. [ 63.064286][ T2763] set_capacity_and_notify: 1 callbacks suppressed [ 63.064303][ T2763] loop5: detected capacity change from 0 to 512 [ 63.077692][ T2763] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 63.088835][ T19] hub 2-1:0.0: activate --> -90 [ 63.099405][ T2433] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 63.119792][ T2763] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 63.129845][ T2763] FAT-fs (loop5): Filesystem has been set read-only [ 63.136869][ T2763] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 63.145299][ T2763] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 63.172448][ T318] device bridge_slave_1 left promiscuous mode [ 63.186880][ T2778] loop5: detected capacity change from 0 to 256 [ 63.188960][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.197050][ T2778] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 63.211092][ T318] device bridge_slave_0 left promiscuous mode [ 63.211674][ T2778] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 63.218092][ T2776] loop6: detected capacity change from 0 to 4096 [ 63.228061][ T2778] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 63.232382][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.257289][ T2776] EXT4-fs: Ignoring removed orlov option [ 63.267971][ T318] device veth1_macvtap left promiscuous mode [ 63.274681][ T318] device veth0_vlan left promiscuous mode [ 63.281307][ T2776] EXT4-fs (loop6): Test dummy encryption mode enabled [ 63.290809][ T2433] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 63.324917][ T2776] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 63.335324][ T2433] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 63.377101][ T2541] EXT4-fs (loop6): unmounting filesystem. [ 63.382909][ T2433] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 63.396111][ T2433] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 63.405722][ T2433] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.417934][ T2433] usb 8-1: config 0 descriptor?? [ 63.425305][ T2739] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 63.493126][ T19] usb 2-1-port1: cannot disable (err = -71) [ 63.504396][ T10] usb 2-1: Failed to suspend device, error -71 [ 63.510846][ T19] usb 2-1: USB disconnect, device number 5 [ 63.646186][ T2807] loop6: detected capacity change from 0 to 1024 [ 63.677768][ T2807] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 2: comm syz.6.968: lblock 2 mapped to illegal pblock 2 (length 1) [ 63.694079][ T2807] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 48: comm syz.6.968: lblock 0 mapped to illegal pblock 48 (length 1) [ 63.709250][ T2807] EXT4-fs error (device loop6): ext4_acquire_dquot:6828: comm syz.6.968: Failed to acquire dquot type 0 [ 63.721375][ T2807] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 63.732285][ T2807] EXT4-fs error (device loop6): ext4_evict_inode:281: inode #11: comm syz.6.968: mark_inode_dirty error [ 63.745631][ T2807] EXT4-fs warning (device loop6): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 63.763677][ T2807] EXT4-fs (loop6): 1 orphan inode deleted [ 63.769546][ T2807] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 63.782297][ T43] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 63.786967][ T2807] netlink: 'syz.6.968': attribute type 1 has an invalid length. [ 63.804052][ T43] EXT4-fs error (device loop6): ext4_release_dquot:6864: comm kworker/u4:2: Failed to release dquot type 0 [ 63.816992][ T2807] netlink: 8 bytes leftover after parsing attributes in process `syz.6.968'. [ 63.841512][ T2433] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 63.849846][ T2433] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 63.859698][ T2433] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 64.011966][ T2815] loop1: detected capacity change from 0 to 512 [ 64.028926][ T2817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.972'. [ 64.091914][ T2821] ip_tables: iptables: counters copy to user failed while replacing table [ 64.116668][ T39] usb 8-1: USB disconnect, device number 2 [ 64.252355][ T2839] loop1: detected capacity change from 0 to 256 [ 64.277847][ T2839] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 64.409580][ T2852] loop1: detected capacity change from 0 to 1024 [ 64.424573][ T2852] EXT4-fs: Ignoring removed bh option [ 64.437972][ T2541] EXT4-fs (loop6): unmounting filesystem. [ 64.448417][ T2541] EXT4-fs error (device loop6): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 64.462515][ T2541] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 64.472170][ T2541] EXT4-fs error (device loop6): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error [ 64.509773][ T2852] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 64.518313][ T2852] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.534493][ T2852] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: block 3: comm syz.1.989: lblock 3 mapped to illegal pblock 3 (length 3) [ 64.565032][ T2852] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 64.577582][ T2852] EXT4-fs (loop1): This should not happen!! Data will be lost [ 64.577582][ T2852] [ 64.605671][ T2858] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: block 3: comm syz.1.989: lblock 3 mapped to illegal pblock 3 (length 1) [ 64.653723][ T2858] EXT4-fs error (device loop1): ext4_ext_remove_space:2945: inode #15: comm syz.1.989: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 64.691072][ T2867] netlink: 96 bytes leftover after parsing attributes in process `syz.5.994'. [ 64.700834][ T2852] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: block 3: comm syz.1.989: lblock 3 mapped to illegal pblock 3 (length 1) [ 64.730286][ T2858] EXT4-fs error (device loop1) in ext4_setattr:5697: Corrupt filesystem [ 64.748690][ T2870] loop7: detected capacity change from 0 to 256 [ 64.784117][ T2870] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 64.796174][ T289] EXT4-fs (loop1): unmounting filesystem. [ 64.971995][ T28] kauditd_printk_skb: 80 callbacks suppressed [ 64.972009][ T28] audit: type=1400 audit(1700000022.991:934): avc: denied { execute } for pid=2894 comm="syz.1.1006" path="/186/cgroup.kill" dev="tmpfs" ino=1006 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 65.067444][ T28] audit: type=1400 audit(1700000023.051:935): avc: denied { read write } for pid=2898 comm="syz.5.1007" name="usbmon9" dev="devtmpfs" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 65.119849][ T28] audit: type=1400 audit(1700000023.051:936): avc: denied { open } for pid=2898 comm="syz.5.1007" path="/dev/usbmon9" dev="devtmpfs" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 65.164098][ T28] audit: type=1400 audit(1700000023.171:937): avc: denied { sys_admin } for pid=2905 comm="syz.6.1011" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 65.383203][ T2933] loop5: detected capacity change from 0 to 512 [ 65.417295][ T2933] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 65.444985][ T2933] EXT4-fs (loop5): 1 truncate cleaned up [ 65.453930][ T2933] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 65.519642][ T493] EXT4-fs (loop5): unmounting filesystem. [ 65.609455][ T2959] loop1: detected capacity change from 0 to 256 [ 65.635424][ T2959] exfat: Deprecated parameter 'namecase' [ 65.646581][ T2959] exfat: Deprecated parameter 'namecase' [ 65.661174][ T2959] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 67.178974][ C0] sched: RT throttling activated [ 67.178974][ C1] sched: RT throttling activated [ 67.468103][ T3003] overlayfs: failed to clone upperpath [ 67.474694][ T2963] F2FS-fs (loop5): invalid crc value [ 67.482004][ T2963] F2FS-fs (loop5): Found nat_bits in checkpoint [ 67.524510][ T2963] F2FS-fs (loop5): Start checkpoint disabled! [ 67.548591][ T2963] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 67.556268][ T2963] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 67.585072][ T3011] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 67.619546][ T2963] syz.5.1034: attempt to access beyond end of device [ 67.619546][ T2963] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 67.633387][ T28] audit: type=1400 audit(1700000025.641:938): avc: denied { execute_no_trans } for pid=3009 comm="syz.6.1050" path="/28/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.658189][ T2541] EXT4-fs (loop6): unmounting filesystem. [ 67.678159][ T2963] syz.5.1034: attempt to access beyond end of device [ 67.678159][ T2963] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 67.696264][ T28] audit: type=1400 audit(1700000025.711:939): avc: denied { execute_no_trans } for pid=3025 comm="syz.6.1055" path="/29/file1" dev="tmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.701245][ T3024] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 67.722341][ T2963] syz.5.1034: attempt to access beyond end of device [ 67.722341][ T2963] loop5: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 67.781182][ T3024] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 67.788045][ T3039] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1060'. [ 67.790326][ T3024] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1052: invalid indirect mapped block 2683928664 (level 1) [ 67.808085][ T28] audit: type=1400 audit(1700000025.811:940): avc: denied { setopt } for pid=3035 comm="syz.0.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.812769][ T3024] EXT4-fs (loop7): 1 truncate cleaned up [ 67.839976][ T3024] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 67.879781][ T1836] kworker/u4:6: attempt to access beyond end of device [ 67.879781][ T1836] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 68.011694][ T2662] EXT4-fs (loop7): unmounting filesystem. [ 68.058379][ T3059] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1061'. [ 68.075915][ T3059] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1061'. [ 68.211487][ T3071] set_capacity_and_notify: 4 callbacks suppressed [ 68.211504][ T3071] loop1: detected capacity change from 0 to 256 [ 68.225222][ T28] audit: type=1400 audit(1700000026.241:941): avc: denied { read } for pid=3073 comm="syz.7.1076" name="/" dev="configfs" ino=14255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 68.258944][ T2433] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 68.289281][ T3071] FAT-fs (loop1): Unrecognized mount option "shortnam" or missing value [ 68.296762][ T28] audit: type=1400 audit(1700000026.241:942): avc: denied { open } for pid=3073 comm="syz.7.1076" path="/" dev="configfs" ino=14255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 68.382849][ T3082] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 68.430500][ T3086] loop7: detected capacity change from 0 to 1024 [ 68.447826][ T3086] EXT4-fs: Ignoring removed bh option [ 68.461101][ T2433] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.479617][ T2433] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.499713][ T3086] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 68.508921][ T2433] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.518800][ T3086] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.528896][ T2433] usb 7-1: config 0 interface 0 has no altsetting 0 [ 68.538657][ T2433] usb 7-1: New USB device found, idVendor=1b96, idProduct=0011, bcdDevice= 0.00 [ 68.548311][ T2433] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.558671][ T2433] usb 7-1: config 0 descriptor?? [ 68.581653][ T3086] EXT4-fs error (device loop7): ext4_map_blocks:747: inode #15: block 3: comm syz.7.1082: lblock 3 mapped to illegal pblock 3 (length 3) [ 68.599252][ T3086] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 68.612326][ T3086] EXT4-fs (loop7): This should not happen!! Data will be lost [ 68.612326][ T3086] [ 68.625979][ T3086] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #15: block 3: comm syz.7.1082: lblock 3 mapped to illegal pblock 3 (length 1) [ 68.648953][ T3086] EXT4-fs error (device loop7): ext4_ext_remove_space:2945: inode #15: comm syz.7.1082: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 68.679419][ T3086] EXT4-fs error (device loop7) in ext4_setattr:5697: Corrupt filesystem [ 68.688999][ T3093] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #15: block 3: comm syz.7.1082: lblock 3 mapped to illegal pblock 3 (length 1) [ 68.722270][ T2662] EXT4-fs (loop7): unmounting filesystem. [ 68.761536][ T3095] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1085'. [ 68.789085][ T3095] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.796259][ T3095] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.827460][ T3092] loop5: detected capacity change from 0 to 40427 [ 68.838976][ T3092] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 68.846950][ T3092] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 68.858293][ T3092] F2FS-fs (loop5): invalid crc value [ 68.880690][ T3092] F2FS-fs (loop5): Found nat_bits in checkpoint [ 68.949493][ T3092] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 68.956577][ T3092] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 68.974986][ T2433] input: HID 1b96:0011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:1B96:0011.0007/input/input14 [ 69.001071][ T28] audit: type=1400 audit(1700000027.021:943): avc: denied { create } for pid=3091 comm="syz.5.1084" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 69.001453][ T3092] syz.5.1084: attempt to access beyond end of device [ 69.001453][ T3092] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 69.063551][ T2433] ntrig 0003:1B96:0011.0007: input,hidraw0: USB HID v0.04 Joystick [HID 1b96:0011] on usb-dummy_hcd.6-1/input0 [ 69.180080][ T2433] usb 7-1: USB disconnect, device number 3 [ 69.239303][ T3111] fido_id[3111]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 69.461213][ T3151] mtrr: base(0x69662f2e000) is not aligned on a size(0x30656c000) boundary [ 69.583756][ T3179] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1112'. [ 69.594193][ T3179] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1112'. [ 69.968439][ T3186] loop6: detected capacity change from 0 to 40427 [ 69.989157][ T3186] F2FS-fs (loop6): invalid crc value [ 69.998490][ T3186] F2FS-fs (loop6): Found nat_bits in checkpoint [ 70.037648][ T3186] F2FS-fs (loop6): Start checkpoint disabled! [ 70.044973][ T3186] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 70.058898][ T3186] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 70.107112][ T3177] loop5: detected capacity change from 0 to 131072 [ 70.124235][ T3177] F2FS-fs (loop5): Test dummy encryption mode enabled [ 70.131864][ T3177] F2FS-fs (loop5): invalid crc value [ 70.162757][ T3177] F2FS-fs (loop5): Found nat_bits in checkpoint [ 70.173420][ T3186] F2FS-fs (loop6): ino:10, start:0, end:2048, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 70.240074][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 70.240088][ T28] audit: type=1400 audit(1700000028.261:956): avc: denied { link } for pid=3185 comm="syz.6.1116" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 70.246202][ T3177] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 70.276065][ T415] kworker/u4:5: attempt to access beyond end of device [ 70.276065][ T415] loop6: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 70.296911][ T3181] loop7: detected capacity change from 0 to 131072 [ 70.309660][ T3181] F2FS-fs (loop7): Test dummy encryption mode enabled [ 70.348498][ T3181] F2FS-fs (loop7): invalid crc value [ 70.364703][ T3181] F2FS-fs (loop7): Found nat_bits in checkpoint [ 70.453348][ T3181] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 70.463145][ T3206] xt_hashlimit: size too large, truncated to 1048576 [ 70.515088][ T28] audit: type=1326 audit(1700000028.531:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3183 comm="syz.0.1115" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f77d3b9e159 code=0x7fc00000 [ 70.718795][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 70.827715][ T3218] program syz.5.1127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.847344][ T3218] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 70.883636][ T3226] netlink: 'syz.1.1130': attribute type 16 has an invalid length. [ 70.891609][ T3226] netlink: 'syz.1.1130': attribute type 17 has an invalid length. [ 70.904267][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 70.908831][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 70.912079][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 70.929312][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.930679][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 70.948367][ T3226] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 70.961802][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.990708][ T24] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 71.014978][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.036033][ T3248] loop1: detected capacity change from 0 to 512 [ 71.042021][ T24] usb 7-1: config 0 descriptor?? [ 71.055826][ T3248] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.061734][ T24] hub 7-1:0.0: USB hub found [ 71.095583][ T3255] loop1: detected capacity change from 0 to 512 [ 71.117709][ T3255] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 71.126782][ T3255] ext4 filesystem being mounted at /216/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.158284][ T3262] device sit0 entered promiscuous mode [ 71.167653][ T3262] netlink: 'syz.0.1145': attribute type 1 has an invalid length. [ 71.175625][ T3262] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1145'. [ 71.176419][ T289] EXT4-fs (loop1): unmounting filesystem. [ 71.221059][ T3269] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1147'. [ 71.256528][ T24] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 71.302590][ T3282] loop5: detected capacity change from 0 to 512 [ 71.318890][ T310] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 71.329440][ T3282] EXT4-fs (loop5): 1 truncate cleaned up [ 71.340925][ T3282] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 71.361926][ T3286] loop1: detected capacity change from 0 to 1024 [ 71.369130][ T493] EXT4-fs (loop5): unmounting filesystem. [ 71.370672][ T3286] EXT4-fs: Ignoring removed orlov option [ 71.390938][ T3286] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 71.467401][ T24] hid-generic 0003:046D:C31C.0008: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.6-1/input0 [ 71.471336][ T3292] binder: 3291:3292 ioctl c0306201 200000000480 returned -14 [ 71.481749][ T28] audit: type=1400 audit(1700000029.501:958): avc: denied { rename } for pid=3285 comm="syz.1.1154" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 71.521607][ T289] EXT4-fs (loop1): unmounting filesystem. [ 71.529808][ T310] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.548717][ T310] usb 8-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 71.558458][ T310] usb 8-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 71.580217][ T310] usb 8-1: New USB device found, idVendor=574c, idProduct=56aa, bcdDevice= 1.00 [ 71.591760][ T310] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.600029][ T310] usb 8-1: Product: syz [ 71.604260][ T310] usb 8-1: Manufacturer: syz [ 71.608911][ T310] usb 8-1: SerialNumber: syz [ 71.615096][ T310] usb-storage 8-1:1.0: USB Mass Storage device detected [ 71.622984][ T310] scsi host1: usb-storage 8-1:1.0 [ 71.673292][ T3310] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 71.682363][ T3310] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.695542][ T3310] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 71.710558][ T3310] EXT4-fs (loop1): Remounting filesystem read-only [ 71.727404][ T289] EXT4-fs (loop1): unmounting filesystem. [ 71.788827][ T310] usb 7-1: USB disconnect, device number 4 [ 71.817085][ T310] usb 8-1: USB disconnect, device number 3 [ 71.951081][ T3326] F2FS-fs (loop1): invalid crc value [ 71.957326][ T3326] F2FS-fs (loop1): Found nat_bits in checkpoint [ 71.984056][ T3326] F2FS-fs (loop1): Start checkpoint disabled! [ 71.991498][ T3326] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 71.999292][ T3326] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 72.037162][ T3326] F2FS-fs (loop1): ino:10, start:0, end:2048, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 72.080080][ T415] kworker/u4:5: attempt to access beyond end of device [ 72.080080][ T415] loop1: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 72.266992][ T3350] device vlan0 entered promiscuous mode [ 72.272975][ T3349] device vlan0 left promiscuous mode [ 72.471505][ T28] audit: type=1400 audit(1700000030.491:959): avc: denied { remount } for pid=3360 comm="syz.6.1180" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 72.476817][ T3343] F2FS-fs (loop1): Test dummy encryption mode enabled [ 72.501029][ T28] audit: type=1400 audit(1700000030.521:960): avc: denied { unmount } for pid=2541 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 72.519883][ T3343] F2FS-fs (loop1): invalid crc value [ 72.529387][ T3343] F2FS-fs (loop1): Found nat_bits in checkpoint [ 72.535298][ T3368] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1181'. [ 72.566681][ T3370] FAULT_INJECTION: forcing a failure. [ 72.566681][ T3370] name failslab, interval 1, probability 0, space 0, times 0 [ 72.567813][ T3343] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 72.579327][ T3370] CPU: 0 PID: 3370 Comm: syz.6.1182 Tainted: G W syzkaller #0 [ 72.579349][ T3370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 72.579373][ T3370] Call Trace: [ 72.609052][ T3370] [ 72.611990][ T3370] __dump_stack+0x21/0x24 [ 72.616352][ T3370] dump_stack_lvl+0x110/0x170 [ 72.621058][ T3370] ? __cfi_dump_stack_lvl+0x8/0x8 [ 72.626130][ T3370] dump_stack+0x15/0x24 [ 72.630320][ T3370] should_fail_ex+0x3bf/0x510 [ 72.635007][ T3370] ? vm_area_dup+0x65/0x280 [ 72.639523][ T3370] __should_failslab+0xac/0xf0 [ 72.644304][ T3370] should_failslab+0x9/0x20 [ 72.648817][ T3370] kmem_cache_alloc+0x3b/0x320 [ 72.653596][ T3370] vm_area_dup+0x65/0x280 [ 72.657944][ T3370] __split_vma+0x1c6/0x980 [ 72.662381][ T3370] split_vma+0x7c/0xd0 [ 72.666466][ T3370] mprotect_fixup+0x4ce/0x940 [ 72.671162][ T3370] ? __cfi_mprotect_fixup+0x10/0x10 [ 72.676371][ T3370] ? security_file_mprotect+0x95/0xc0 [ 72.681761][ T3370] do_mprotect_pkey+0x80a/0xbe0 [ 72.686691][ T3370] ? prot_none_test+0x10/0x10 [ 72.691390][ T3370] ? __this_cpu_preempt_check+0x13/0x20 [ 72.696929][ T3370] ? xfd_validate_state+0x70/0x150 [ 72.702052][ T3370] ? fpregs_restore_userregs+0x128/0x260 [ 72.707673][ T3370] __x64_sys_mprotect+0x80/0x90 [ 72.712515][ T3370] x64_sys_call+0x997/0x9a0 [ 72.717035][ T3370] do_syscall_64+0x4c/0xa0 [ 72.721440][ T3370] ? clear_bhb_loop+0x30/0x80 [ 72.726100][ T3370] ? clear_bhb_loop+0x30/0x80 [ 72.730761][ T3370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 72.736671][ T3370] RIP: 0033:0x7f4bdcd9e159 [ 72.741069][ T3370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.760658][ T3370] RSP: 002b:00007f4bddca6028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 72.769053][ T3370] RAX: ffffffffffffffda RBX: 00007f4bdd025fa0 RCX: 00007f4bdcd9e159 [ 72.777009][ T3370] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 72.785058][ T3370] RBP: 00007f4bdce3506b R08: 0000000000000000 R09: 0000000000000000 [ 72.793008][ T3370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.800966][ T3370] R13: 00007f4bdd026038 R14: 00007f4bdd025fa0 R15: 00007ffc1ac1cca8 [ 72.808961][ T3370] [ 72.892219][ T3385] EXT4-fs: Ignoring removed orlov option [ 72.919406][ T3385] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 73.003448][ T3394] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 73.012649][ T3394] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.040375][ T2541] EXT4-fs (loop6): unmounting filesystem. [ 73.095034][ T289] EXT4-fs (loop1): unmounting filesystem. [ 73.110806][ T3412] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 73.122278][ T3412] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.152055][ T3412] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 73.159517][ T3423] tipc: Started in network mode [ 73.167041][ T3412] EXT4-fs (loop6): Remounting filesystem read-only [ 73.171547][ T3423] tipc: Node identity 1001001, cluster identity 4711 [ 73.189515][ T3423] tipc: Node number set to 16781313 [ 73.198822][ T3426] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1201'. [ 73.215660][ T3423] tipc: Enabled bearer , priority 0 [ 73.223817][ T2541] EXT4-fs (loop6): unmounting filesystem. [ 73.237567][ T3428] set_capacity_and_notify: 6 callbacks suppressed [ 73.237580][ T3428] loop1: detected capacity change from 0 to 16 [ 73.266173][ T3428] erofs: (device loop1): mounted with root inode @ nid 36. [ 73.289528][ T3428] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=46 [ 73.298734][ T3428] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=46 [ 73.343011][ T3436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1206'. [ 73.406356][ T28] audit: type=1400 audit(1700000031.421:961): avc: denied { write } for pid=3445 comm="syz.6.1215" name="file0" dev="tmpfs" ino=321 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 73.428904][ T28] audit: type=1400 audit(1700000031.421:962): avc: denied { open } for pid=3445 comm="syz.6.1215" path="/56/file0" dev="tmpfs" ino=321 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 73.516977][ T3464] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1222'. [ 73.896152][ T3495] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1237'. [ 73.950523][ T3503] loop5: detected capacity change from 0 to 512 [ 73.957998][ T3503] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 73.974438][ T3503] EXT4-fs (loop5): 1 truncate cleaned up [ 73.980319][ T3503] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 74.011248][ T493] EXT4-fs (loop5): unmounting filesystem. [ 74.130858][ T3517] FAULT_INJECTION: forcing a failure. [ 74.130858][ T3517] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 74.144080][ T3517] CPU: 0 PID: 3517 Comm: syz.7.1247 Tainted: G W syzkaller #0 [ 74.152943][ T3517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 74.162984][ T3517] Call Trace: [ 74.166267][ T3517] [ 74.169189][ T3517] __dump_stack+0x21/0x24 [ 74.173507][ T3517] dump_stack_lvl+0x110/0x170 [ 74.178173][ T3517] ? __cfi_dump_stack_lvl+0x8/0x8 [ 74.183187][ T3517] ? vfs_write+0xa51/0xd00 [ 74.187589][ T3517] dump_stack+0x15/0x24 [ 74.191732][ T3517] should_fail_ex+0x3bf/0x510 [ 74.196396][ T3517] should_fail+0xb/0x10 [ 74.200539][ T3517] should_fail_usercopy+0x1a/0x20 [ 74.205549][ T3517] _copy_from_user+0x1e/0xc0 [ 74.210130][ T3517] __sys_connect+0x16d/0x460 [ 74.214712][ T3517] ? __cfi___sys_connect+0x10/0x10 [ 74.219838][ T3517] ? fpregs_restore_userregs+0x128/0x260 [ 74.225456][ T3517] __x64_sys_connect+0x7a/0x90 [ 74.230204][ T3517] x64_sys_call+0x88d/0x9a0 [ 74.234691][ T3517] do_syscall_64+0x4c/0xa0 [ 74.239100][ T3517] ? clear_bhb_loop+0x30/0x80 [ 74.243760][ T3517] ? clear_bhb_loop+0x30/0x80 [ 74.248420][ T3517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 74.254299][ T3517] RIP: 0033:0x7f996839e159 [ 74.258693][ T3517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.278282][ T3517] RSP: 002b:00007f996919d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 74.286719][ T3517] RAX: ffffffffffffffda RBX: 00007f9968625fa0 RCX: 00007f996839e159 [ 74.294676][ T3517] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 74.302630][ T3517] RBP: 00007f996843506b R08: 0000000000000000 R09: 0000000000000000 [ 74.310584][ T3517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.318542][ T3517] R13: 00007f9968626038 R14: 00007f9968625fa0 R15: 00007ffcd78e5788 [ 74.326508][ T3517] [ 74.553054][ T28] audit: type=1400 audit(1700000032.572:963): avc: denied { ioctl } for pid=3543 comm="syz.6.1258" path="socket:[27926]" dev="sockfs" ino=27926 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.684257][ T3542] loop7: detected capacity change from 0 to 40427 [ 74.693770][ T3542] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 74.701728][ T3542] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 74.711655][ T3542] F2FS-fs (loop7): invalid crc value [ 74.718037][ T3561] overlayfs: failed to clone upperpath [ 74.732797][ T3542] F2FS-fs (loop7): Found nat_bits in checkpoint [ 74.774043][ T3542] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 74.781340][ T3542] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 74.820919][ T28] audit: type=1400 audit(1700000032.842:964): avc: denied { map } for pid=3541 comm="syz.7.1256" path="/42/file0/file1" dev="loop7" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 74.844990][ T2662] syz-executor: attempt to access beyond end of device [ 74.844990][ T2662] loop7: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 74.846475][ T28] audit: type=1400 audit(1700000032.842:965): avc: denied { execute } for pid=3541 comm="syz.7.1256" path="/42/file0/file1" dev="loop7" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 74.921213][ T3559] loop6: detected capacity change from 0 to 40427 [ 74.946515][ T3559] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 74.954759][ T3559] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 74.964154][ T3559] F2FS-fs (loop6): invalid crc value [ 74.999237][ T3559] F2FS-fs (loop6): Found nat_bits in checkpoint [ 75.006210][ T3584] xt_hashlimit: size too large, truncated to 1048576 [ 75.033228][ T3559] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 75.040407][ T3559] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 75.093465][ T3592] loop7: detected capacity change from 0 to 512 [ 75.123114][ T318] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 75.132964][ T3592] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 75.142154][ T318] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 75.152156][ T3592] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.203500][ T2662] EXT4-fs (loop7): unmounting filesystem. [ 75.224051][ T3598] ip_tables: iptables: counters copy to user failed while replacing table [ 75.419786][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 75.419800][ T28] audit: type=1400 audit(1700000033.442:971): avc: denied { read } for pid=3623 comm="syz.6.1289" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.468494][ T28] audit: type=1400 audit(1700000033.442:972): avc: denied { ioctl } for pid=3623 comm="syz.6.1289" path="/dev/rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.568852][ T28] audit: type=1400 audit(1700000033.592:973): avc: denied { remount } for pid=3639 comm="syz.7.1295" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 75.643932][ T28] audit: type=1400 audit(1700000033.662:974): avc: denied { append } for pid=3652 comm="syz.1.1301" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 75.781073][ T3667] xt_hashlimit: size too large, truncated to 1048576 [ 75.818657][ T3634] loop5: detected capacity change from 0 to 40427 [ 75.832700][ T3634] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 75.840685][ T3634] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 75.879523][ T3634] F2FS-fs (loop5): Found nat_bits in checkpoint [ 75.934491][ T3634] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 75.941683][ T3634] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 76.027988][ T3677] loop1: detected capacity change from 0 to 256 [ 76.041893][ T3677] FAT-fs (loop1): Directory bread(block 1285) failed [ 76.048845][ T3677] FAT-fs (loop1): Directory bread(block 1286) failed [ 76.055931][ T3677] FAT-fs (loop1): Directory bread(block 1287) failed [ 76.063093][ T3677] FAT-fs (loop1): Directory bread(block 1288) failed [ 76.073798][ T3677] FAT-fs (loop1): Directory bread(block 1285) failed [ 76.080669][ T3677] FAT-fs (loop1): Directory bread(block 1286) failed [ 76.087491][ T3677] FAT-fs (loop1): Directory bread(block 1287) failed [ 76.094300][ T3677] FAT-fs (loop1): Directory bread(block 1288) failed [ 76.102966][ T3677] FAT-fs (loop1): Directory bread(block 1285) failed [ 76.109893][ T3677] FAT-fs (loop1): Directory bread(block 1286) failed [ 76.184319][ T310] kernel write not supported for file /vcs (pid: 310 comm: kworker/1:3) [ 76.300411][ T3693] kvm [3692]: vcpu0, guest rIP: 0x9143 Unhandled WRMSR(0x11e) = 0xbe702111 [ 76.353638][ T28] audit: type=1400 audit(1700000034.372:975): avc: denied { connect } for pid=3696 comm="syz.1.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.371533][ T3700] loop1: detected capacity change from 0 to 1024 [ 76.379633][ T28] audit: type=1400 audit(1700000034.372:976): avc: denied { ioctl } for pid=3696 comm="syz.1.1311" path="socket:[28958]" dev="sockfs" ino=28958 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.425643][ T3700] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 76.459878][ T289] EXT4-fs (loop1): unmounting filesystem. [ 76.506865][ T3718] xt_hashlimit: size too large, truncated to 1048576 [ 76.682423][ T3740] loop5: detected capacity change from 0 to 1024 [ 76.717672][ T3740] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 76.743390][ T493] EXT4-fs (loop5): unmounting filesystem. [ 76.892106][ T3752] loop5: detected capacity change from 0 to 40427 [ 76.901452][ T3752] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 76.914186][ T3752] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 76.923428][ T3752] F2FS-fs (loop5): invalid crc value [ 76.939585][ T3752] F2FS-fs (loop5): Found nat_bits in checkpoint [ 76.978048][ T3752] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 76.985396][ T3752] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 77.061067][ T318] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 77.073196][ T318] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 77.349212][ T3772] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.1337: inode has both inline data and extents flags [ 77.369047][ T3772] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.1337: couldn't read orphan inode 15 (err -117) [ 77.388454][ T3772] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 77.415244][ T493] EXT4-fs (loop5): unmounting filesystem. [ 77.502365][ T28] audit: type=1400 audit(1700000035.522:977): avc: denied { unmount } for pid=493 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 77.709276][ T3793] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 77.730886][ T289] EXT4-fs (loop1): unmounting filesystem. [ 77.975325][ T3828] netlink: 'syz.1.1365': attribute type 1 has an invalid length. [ 77.997951][ T28] audit: type=1400 audit(1700000036.012:978): avc: denied { ioctl } for pid=3831 comm="syz.6.1367" path="/dev/usbmon7" dev="devtmpfs" ino=180 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 78.109356][ T3839] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 78.117878][ T3839] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.128481][ T307] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 78.139670][ T3839] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: block 3: comm syz.1.1369: lblock 3 mapped to illegal pblock 3 (length 3) [ 78.153914][ T3839] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 78.166381][ T3839] EXT4-fs (loop1): This should not happen!! Data will be lost [ 78.166381][ T3839] [ 78.181952][ T3839] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: block 3: comm syz.1.1369: lblock 3 mapped to illegal pblock 3 (length 3) [ 78.204611][ T3848] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1372'. [ 78.213893][ T415] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 78.228537][ T415] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 78.240888][ T415] EXT4-fs (loop1): This should not happen!! Data will be lost [ 78.240888][ T415] [ 78.251399][ T289] EXT4-fs (loop1): unmounting filesystem. [ 78.266382][ T3850] set_capacity_and_notify: 3 callbacks suppressed [ 78.266396][ T3850] loop1: detected capacity change from 0 to 512 [ 78.289667][ T3850] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 78.298739][ T3850] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.319335][ T307] usb 6-1: config 127 has an invalid interface number: 57 but max is 0 [ 78.325419][ T289] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 78.327618][ T307] usb 6-1: config 127 has no interface number 0 [ 78.346483][ T307] usb 6-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 78.349712][ T289] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 78.364439][ T307] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 78.379886][ T307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.387924][ T307] usb 6-1: Product: syz [ 78.392255][ T307] usb 6-1: Manufacturer: syz [ 78.396864][ T307] usb 6-1: SerialNumber: syz [ 78.401568][ T3853] tipc: Resetting bearer [ 78.402702][ T3810] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 78.417821][ T3853] tipc: Disabling bearer [ 78.450375][ T415] tipc: Left network mode [ 78.451500][ T3853] EXT4-fs (loop1): unmounting filesystem. [ 78.566184][ T28] audit: type=1326 audit(1700000036.582:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3861 comm="syz.0.1380" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77d3b9e159 code=0x0 [ 78.633069][ T3864] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.640753][ T3864] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.648298][ T3864] device bridge_slave_0 entered promiscuous mode [ 78.670195][ T3864] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.677253][ T3864] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.684890][ T3864] device bridge_slave_1 entered promiscuous mode [ 78.688541][ T3870] kvm [3869]: vcpu0, guest rIP: 0x9143 Unhandled WRMSR(0x11e) = 0xbe702111 [ 78.745573][ T3873] loop6: detected capacity change from 0 to 512 [ 78.757982][ T3864] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.765079][ T3864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.769799][ T3873] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 78.772370][ T3864] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.781454][ T3873] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.788158][ T3864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.819203][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.825349][ T3873] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 78.826548][ T3810] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 78.835642][ T28] audit: type=1400 audit(1700000036.842:980): avc: denied { relabelto } for pid=3872 comm="syz.6.1382" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 78.868098][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.883822][ T2541] EXT4-fs (loop6): unmounting filesystem. [ 78.890163][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.897934][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.914571][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.923089][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.931672][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.938750][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.947112][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.955833][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.964491][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.967159][ T310] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 78.971553][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.975508][ T3883] input: syz1 as /devices/virtual/input/input15 [ 78.991134][ T3881] loop6: detected capacity change from 0 to 4096 [ 79.001917][ T310] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 79.005164][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.033209][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.041857][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.050082][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.060472][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.069144][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.078727][ T3155] blk_print_req_error: 52 callbacks suppressed [ 79.078740][ T3155] I/O error, dev loop6, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 79.094951][ T307] asix 6-1:127.57 (unnamed net_device) (uninitialized): invalid hw address, using random [ 79.108569][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.116769][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.125840][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.134075][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.146956][ T3864] device veth0_vlan entered promiscuous mode [ 79.177091][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.185912][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.195770][ T3864] device veth1_macvtap entered promiscuous mode [ 79.206902][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.221132][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.222524][ T3894] loop7: detected capacity change from 0 to 256 [ 79.229721][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.236455][ T3894] exfat: Deprecated parameter 'utf8' [ 79.253286][ T3894] exfat: Deprecated parameter 'utf8' [ 79.259260][ T3894] exfat: Deprecated parameter 'namecase' [ 79.265167][ T2092] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.273128][ T3894] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0ab4ecf1, utbl_chksum : 0xe619d30d) [ 79.297855][ T307] asix 6-1:127.57 (unnamed net_device) (uninitialized): invalid PHY address: 33 [ 79.299926][ T2092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.323465][ T415] device bridge_slave_1 left promiscuous mode [ 79.332616][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.340673][ T415] device bridge_slave_0 left promiscuous mode [ 79.347153][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.362676][ T415] device veth1_macvtap left promiscuous mode [ 79.368750][ T415] device veth0_vlan left promiscuous mode [ 79.456642][ T3908] device gre1 entered promiscuous mode [ 79.477791][ T3903] tun0: tun_chr_ioctl cmd 1074025675 [ 79.483836][ T3903] tun0: persist enabled [ 79.494075][ T3903] tun0: tun_chr_ioctl cmd 1074025675 [ 79.528713][ T3903] tun0: persist enabled [ 79.538935][ T3903] tun0: tun_chr_ioctl cmd 2147767517 [ 79.571116][ T3922] input: syz1 as /devices/virtual/input/input16 [ 79.575251][ T39] usb 6-1: USB disconnect, device number 6 [ 79.666556][ T3941] loop8: detected capacity change from 0 to 1024 [ 79.692347][ T3941] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 79.701164][ T3941] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.717763][ T3941] EXT4-fs error (device loop8): ext4_map_blocks:747: inode #15: block 3: comm syz.8.1410: lblock 3 mapped to illegal pblock 3 (length 3) [ 79.732795][ T3941] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 79.745218][ T3941] EXT4-fs (loop8): This should not happen!! Data will be lost [ 79.745218][ T3941] [ 79.758031][ T3941] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #15: block 3: comm syz.8.1410: lblock 3 mapped to illegal pblock 3 (length 3) [ 79.772288][ C0] ================================================================== [ 79.780349][ C0] BUG: KASAN: use-after-free in rcu_cblist_dequeue+0x6c/0xb0 [ 79.787708][ C0] Read of size 8 at addr ffff88813db08590 by task kworker/0:1/19 [ 79.795406][ C0] [ 79.797721][ C0] CPU: 0 PID: 19 Comm: kworker/0:1 Tainted: G W syzkaller #0 [ 79.806460][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 79.816500][ C0] Workqueue: mld mld_ifc_work [ 79.821262][ C0] Call Trace: [ 79.824529][ C0] [ 79.827354][ C0] __dump_stack+0x21/0x24 [ 79.831676][ C0] dump_stack_lvl+0x110/0x170 [ 79.836387][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 79.841429][ C0] ? debug_smp_processor_id+0x17/0x20 [ 79.846811][ C0] ? rcu_cblist_dequeue+0x6c/0xb0 [ 79.851824][ C0] print_address_description+0x71/0x200 [ 79.857358][ C0] print_report+0x4a/0x60 [ 79.861681][ C0] kasan_report+0x122/0x150 [ 79.866187][ C0] ? rcu_cblist_dequeue+0x6c/0xb0 [ 79.871192][ C0] __asan_report_load8_noabort+0x14/0x20 [ 79.876818][ C0] rcu_cblist_dequeue+0x6c/0xb0 [ 79.881649][ C0] rcu_do_batch+0x4bc/0xc30 [ 79.886138][ C0] ? rcu_core+0xf00/0xf00 [ 79.890486][ C0] ? swake_up_one_online+0x66/0x110 [ 79.895676][ C0] ? rcu_report_qs_rnp+0x37b/0x390 [ 79.900773][ C0] rcu_core+0x486/0xf00 [ 79.904909][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 79.910088][ C0] ? irqtime_account_irq+0x75/0x240 [ 79.915270][ C0] rcu_core_si+0x9/0x10 [ 79.919416][ C0] handle_softirqs+0x1d7/0x600 [ 79.924172][ C0] __do_softirq+0xb/0xd [ 79.928308][ C0] do_softirq+0xdc/0x130 [ 79.932532][ C0] [ 79.935442][ C0] [ 79.938352][ C0] ? __cfi_do_softirq+0x10/0x10 [ 79.943181][ C0] __local_bh_enable_ip+0x75/0x80 [ 79.948191][ C0] _raw_read_unlock_bh+0x29/0x30 [ 79.953124][ C0] ipv6_get_lladdr+0x1b9/0x200 [ 79.957867][ C0] mld_newpack+0x2f8/0xa30 [ 79.962271][ C0] ? mld_sendpack+0xda0/0xda0 [ 79.966958][ C0] ? __switch_to+0x56f/0x1070 [ 79.971638][ C0] add_grec+0xf26/0x13f0 [ 79.975868][ C0] ? __kasan_check_write+0x14/0x20 [ 79.980961][ C0] ? mutex_lock+0x93/0x1b0 [ 79.985364][ C0] ? __cfi_mutex_lock+0x10/0x10 [ 79.990196][ C0] mld_ifc_work+0x782/0xc20 [ 79.994781][ C0] process_one_work+0x717/0xc30 [ 79.999614][ C0] worker_thread+0xa4d/0x11d0 [ 80.004276][ C0] kthread+0x281/0x320 [ 80.008331][ C0] ? __cfi_worker_thread+0x10/0x10 [ 80.013420][ C0] ? __cfi_kthread+0x10/0x10 [ 80.018013][ C0] ret_from_fork+0x1f/0x30 [ 80.022413][ C0] [ 80.025414][ C0] [ 80.027715][ C0] Allocated by task 3919: [ 80.032018][ C0] kasan_set_track+0x4b/0x70 [ 80.036593][ C0] kasan_save_alloc_info+0x1f/0x30 [ 80.041680][ C0] __kasan_kmalloc+0x95/0xb0 [ 80.046249][ C0] __kmalloc+0xb4/0x1e0 [ 80.050387][ C0] l2tp_session_create+0x38/0xbd0 [ 80.055390][ C0] pppol2tp_connect+0xbf5/0x1640 [ 80.060307][ C0] __sys_connect+0x3da/0x460 [ 80.064892][ C0] __x64_sys_connect+0x7a/0x90 [ 80.069635][ C0] x64_sys_call+0x88d/0x9a0 [ 80.074124][ C0] do_syscall_64+0x4c/0xa0 [ 80.078520][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 80.084391][ C0] [ 80.086692][ C0] Freed by task 415: [ 80.090559][ C0] kasan_set_track+0x4b/0x70 [ 80.095214][ C0] kasan_save_free_info+0x2b/0x40 [ 80.100215][ C0] ____kasan_slab_free+0x132/0x180 [ 80.105306][ C0] __kasan_slab_free+0x11/0x20 [ 80.110049][ C0] slab_free_freelist_hook+0xc2/0x190 [ 80.115415][ C0] __kmem_cache_free+0xb7/0x1b0 [ 80.120244][ C0] kfree+0x6f/0xf0 [ 80.123945][ C0] l2tp_session_put+0xaf/0x1a0 [ 80.128690][ C0] l2tp_session_delete+0x3df/0x4d0 [ 80.133781][ C0] l2tp_tunnel_del_work+0x199/0x410 [ 80.138997][ C0] process_one_work+0x717/0xc30 [ 80.143826][ C0] worker_thread+0xa4d/0x11d0 [ 80.148479][ C0] kthread+0x281/0x320 [ 80.152529][ C0] ret_from_fork+0x1f/0x30 [ 80.156927][ C0] [ 80.159228][ C0] Last potentially related work creation: [ 80.164914][ C0] kasan_save_stack+0x3a/0x60 [ 80.169567][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 80.174912][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 80.180696][ C0] call_rcu+0xcf/0xf50 [ 80.184746][ C0] pppol2tp_release+0x1e3/0x2b0 [ 80.189576][ C0] sock_close+0xc9/0x220 [ 80.193796][ C0] __fput+0x1fd/0x8f0 [ 80.197757][ C0] ____fput+0x15/0x20 [ 80.201716][ C0] task_work_run+0x1e1/0x250 [ 80.206292][ C0] do_exit+0xb0d/0x29f0 [ 80.210427][ C0] __cfi___ia32_sys_exit+0x0/0x10 [ 80.215486][ C0] x64_sys_call+0x67/0x9a0 [ 80.219881][ C0] do_syscall_64+0x4c/0xa0 [ 80.224290][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 80.230162][ C0] [ 80.232467][ C0] The buggy address belongs to the object at ffff88813db08400 [ 80.232467][ C0] which belongs to the cache kmalloc-512 of size 512 [ 80.246492][ C0] The buggy address is located 400 bytes inside of [ 80.246492][ C0] 512-byte region [ffff88813db08400, ffff88813db08600) [ 80.259741][ C0] [ 80.262045][ C0] The buggy address belongs to the physical page: [ 80.268431][ C0] page:ffffea0004f6c200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x13db08 [ 80.278672][ C0] head:ffffea0004f6c200 order:2 compound_mapcount:0 compound_pincount:0 [ 80.286976][ C0] flags: 0x4000000000010200(slab|head|zone=1) [ 80.293045][ C0] raw: 4000000000010200 ffffea0004f6ea00 dead000000000002 ffff888100042f00 [ 80.301701][ C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 80.310277][ C0] page dumped because: kasan: bad access detected [ 80.316665][ C0] page_owner tracks the page as allocated [ 80.322364][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 493, tgid 493 (syz-executor), ts 27984072606, free_ts 0 [ 80.344070][ C0] post_alloc_hook+0x1f5/0x210 [ 80.348835][ C0] prep_new_page+0x1c/0x110 [ 80.353322][ C0] get_page_from_freelist+0x2ca9/0x2d20 [ 80.358850][ C0] __alloc_pages+0x1fa/0x610 [ 80.363420][ C0] alloc_slab_page+0x6e/0xf0 [ 80.367987][ C0] new_slab+0x98/0x3e0 [ 80.372033][ C0] ___slab_alloc+0x70f/0xb70 [ 80.376616][ C0] __slab_alloc+0x5e/0xa0 [ 80.380928][ C0] __kmem_cache_alloc_node+0x204/0x2d0 [ 80.386370][ C0] __kmalloc_node_track_caller+0xa1/0x1e0 [ 80.392068][ C0] __alloc_skb+0x226/0x4a0 [ 80.396464][ C0] netlink_ack+0x373/0x1160 [ 80.400947][ C0] netlink_rcv_skb+0x27e/0x450 [ 80.405691][ C0] rtnetlink_rcv+0x1c/0x20 [ 80.410081][ C0] netlink_unicast+0x8c1/0xa60 [ 80.414841][ C0] netlink_sendmsg+0x8b9/0xbd0 [ 80.419595][ C0] page_owner free stack trace missing [ 80.424937][ C0] [ 80.427238][ C0] Memory state around the buggy address: [ 80.432842][ C0] ffff88813db08480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 80.440882][ C0] ffff88813db08500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 80.448923][ C0] >ffff88813db08580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 80.456956][ C0] ^ [ 80.461541][ C0] ffff88813db08600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 80.469581][ C0] ffff88813db08680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 80.477614][ C0] ================================================================== [ 80.485705][ C0] Disabling lock debugging due to kernel taint [ 80.492462][ T415] EXT4-fs error (device loop8): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 80.512097][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 80.512111][ T28] audit: type=1400 audit(1700000038.532:983): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.513475][ T415] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 80.551901][ T415] EXT4-fs (loop8): This should not happen!! Data will be lost [ 80.551901][ T415] [ 80.562826][ T3864] EXT4-fs (loop8): unmounting filesystem. [ 80.579906][ T3953] tun0: tun_chr_ioctl cmd 1074025675 [ 80.585244][ T3953] tun0: persist enabled [ 80.589984][ T3953] tun0: tun_chr_ioctl cmd 1074025675 [ 80.595298][ T3953] tun0: persist enabled [ 80.600087][ T3953] tun0: tun_chr_ioctl cmd 2147767517