last executing test programs: 2m56.773846692s ago: executing program 4 (id=2496): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000400)={0x13, 0x10, 0xfa00, {&(0x7f0000001580), r1, 0x1}}, 0x18) 2m56.600533328s ago: executing program 4 (id=2500): setns(0xc9, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000580)=ANY=[@ANYBLOB="12010002ff0000408c1059010100010203010902200001010080fa0904000002ff0000000705810200020007050202"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = socket$inet(0x2, 0x1, 0x0) ioctl(r0, 0x8914, &(0x7f0000000600)="63616e3000000000000000000000000001") 2m54.374986533s ago: executing program 4 (id=2519): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x2}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) 2m53.950559795s ago: executing program 4 (id=2524): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020267b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fffffff88500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 2m53.605239972s ago: executing program 4 (id=2527): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000740)="fbb9b35314b22f1f4cb47eace766", 0xe}], 0x1) 2m53.124802761s ago: executing program 4 (id=2529): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc_mnt\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc_mnt/kcore\x00', 0x0, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/72, 0x48}], 0x1) 2m37.67138679s ago: executing program 32 (id=2529): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc_mnt\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc_mnt/kcore\x00', 0x0, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/72, 0x48}], 0x1) 23.399109125s ago: executing program 0 (id=3702): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000480), 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x4}, 0x6) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 22.473649066s ago: executing program 0 (id=3708): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1400c, &(0x7f0000000380)={[{@nombcache}, {@data_err_ignore}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0xf2}}, {@stripe={'stripe', 0x3d, 0x5}}, {@lazytime}]}, 0x3, 0x476, &(0x7f0000000640)="$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") syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f0000001180)) symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') rename(&(0x7f0000000080)='.\x02\x00', &(0x7f0000000100)='.\x02/file0\x00') 22.004553609s ago: executing program 0 (id=3710): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 21.779222709s ago: executing program 0 (id=3712): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x21d000, 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140), 0x0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x230) 21.348581003s ago: executing program 0 (id=3717): mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x0, 0x0) pread64(r0, &(0x7f00000002c0)=""/267, 0x10b, 0x304) 20.431708044s ago: executing program 0 (id=3724): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000f40)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9dd0, 0x0, 0x513, 0xfff9, 0xfffd, 0x8, 0x3, 0xe5fc]}}]}]}]}, 0x44}}, 0x0) 19.684423344s ago: executing program 33 (id=3724): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000f40)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9dd0, 0x0, 0x513, 0xfff9, 0xfffd, 0x8, 0x3, 0xe5fc]}}]}]}]}, 0x44}}, 0x0) 8.233696044s ago: executing program 1 (id=3781): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xeeee0000, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f00000002c0)={0x0, 0x200, 0x0, 0x0}) 7.810856585s ago: executing program 1 (id=3784): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x7) wait4(r0, 0x0, 0x0, 0x0) setpriority(0x1, r0, 0x49a9b6bc) 7.746263374s ago: executing program 2 (id=3785): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x45}, 0xc400) 7.30200219s ago: executing program 1 (id=3789): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x558, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x488, 0xffffffff, 0xffffffff, 0x488, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62, 0x0, 0x5}, 0x0, 0x358, 0x398, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f4, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'macvlan0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5b8) 7.187921336s ago: executing program 2 (id=3790): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000000080)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x402) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000740)="e2", 0x1}], 0x1) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 6.120455835s ago: executing program 3 (id=3796): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8025000041000701fefffffffe"], 0x2580}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 5.988837423s ago: executing program 5 (id=3797): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x1, &(0x7f0000000080)=[0xee00]) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) 5.902261304s ago: executing program 1 (id=3798): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000072000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x10, 0x70, &(0x7f0000000400)="0000000005000000", &(0x7f0000000440)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5.878087025s ago: executing program 5 (id=3799): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$cramfs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[], 0x1, 0x152, &(0x7f0000000340)="$eJzszkFLKlEABeAzb2b0PZ++V2RgQSZENCTSOFKtWmgkCU1C4aaVUCMESpFQLouINu3aupCEVuJf0KyNoRD1J9q4C9rGdQbBVu473+6ee+7hbqx1NYQAGbb1o8LxiVUsWgehnbSZ3H1vNOIidwH4DUgY3Nv9ZhyY9wBNBehdACJ+9MHtzOXFuRcHNACJv0DuMG/psLsekfkBxSmLTJsDWpNqv2cMZf0vWDEnm1aAxP/BnpnLqVgQe+N2FgXwAaBUDtdrz9uddiqyeD8j4yoVnp2QhvOgdWMkp6regIyM9XSHRP/+bakdeflTr712O+ZW2nR3Y4axEtOjur7scz4MZdN7Cux923MhEFQywKUE3ErXKJV7D5J406p8pgv/VivO6/MzOQRIpfJ+NqBWs/6xX5A1SBiFOlKLiIiIiIiIiIiIiIiIiIh+iq8AAAD//0CnWuc=") chdir(&(0x7f0000000500)='./file0\x00') open(&(0x7f0000000200)='./file0\x00', 0x108943, 0x148) 5.542149129s ago: executing program 5 (id=3800): r0 = landlock_create_ruleset(&(0x7f0000000280)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x17) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$apparmor_current(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='changeprofile ://&'], 0x17) 4.69174734s ago: executing program 2 (id=3801): syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000180)='./file2\x00', 0x4000, &(0x7f0000000340)=ANY=[], 0x1, 0x1ff, &(0x7f00000005c0)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x691, 0x0, 0xb6, 0x0, &(0x7f00000007c0)) chdir(&(0x7f00000003c0)='./bus\x00') symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') 4.636039087s ago: executing program 1 (id=3802): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x201080a, &(0x7f0000000080)={[{@minixdf}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000d00)="$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") syz_mount_image$vfat(&(0x7f0000001180), &(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) rename(&(0x7f0000001300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001400)='./bus\x00') lsetxattr(&(0x7f00000015c0)='./file0\x00', &(0x7f0000000780)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0, 0x1) 4.555015015s ago: executing program 5 (id=3803): r0 = syz_open_procfs(0x0, &(0x7f0000000ac0)='net/if_inet6\x00') read$FUSE(r0, &(0x7f0000003bc0)={0x2020}, 0x2020) pread64(r0, &(0x7f0000005c00)=""/30, 0x1e, 0x800000000040042) read$FUSE(r0, &(0x7f0000005c40)={0x2020}, 0x2020) 4.391695106s ago: executing program 5 (id=3804): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x19, 0x4, 0x4, 0x8}, 0x50) r0 = syz_usb_connect(0x2, 0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002ff000040cd06310100010102030109023c00010100a0320904000006ff00000007050102400000070502024000000705040240000007050602400000070581034000010705880240"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x88, 0xfffffffffffffebe, &(0x7f0000000580)="02c0e5db37065ae2a1e12a5d97536f0ec800ce5f58753f01a2da60238fdddfe68111cabeff08a03ebc3a5746f2c258f43bff13e494f8e527d18d984bfd8bd882952a13d60c9ed5fc0ceb3f5348c5e49ff7530ef44c8149c792f8c95ff944e5b384586e29ee432d34d71cd03b127428347545ebffe973cdbdf67c31c57df2fc6fa0d55e24c36a434d399615fe1ed5c19b87a44d6b5003c93c92") fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 4.350693898s ago: executing program 2 (id=3805): r0 = syz_io_uring_setup(0x108e, &(0x7f00000001c0)={0x0, 0x5b62, 0x1000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) r4 = socket(0x18, 0x6, 0x1) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_BIND=@ipv4={0x38, 0x0, 0x0, r4, 0x0, 0x0}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 4.106552348s ago: executing program 2 (id=3806): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000a80)={0xc0, 0x0, 0x10000}) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 4.089131099s ago: executing program 3 (id=3807): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000080050005000a000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000101c0)={0x50, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}}, 0x24000080) 4.025661573s ago: executing program 3 (id=3808): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaff0043ab004a08e444"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="114353012008ba00000037510800", 0x59f, 0x4008015, &(0x7f00000000c0)={0x11, 0xe5, r1, 0x1, 0x7}, 0x14) 3.955195209s ago: executing program 1 (id=3809): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==") mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2001, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4448, &(0x7f0000006ec0)="$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") 3.893569072s ago: executing program 3 (id=3810): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000001c0)={0x2, 0x0, @ioapic={0x58000, 0x101, 0x6b, 0x3, 0x0, [{0x7, 0xdd, 0x3, '\x00', 0x7}, {0x7, 0x2, 0xf, '\x00', 0x9e}, {0x2, 0x44, 0xf8}, {0xfa, 0x0, 0xf9, '\x00', 0x9}, {0xe, 0x80, 0x2, '\x00', 0x7}, {0x23, 0x0, 0x16, '\x00', 0x7}, {0x3, 0x3, 0xeb, '\x00', 0x3}, {0x6, 0x6, 0x10, '\x00', 0xc}, {0x9, 0x40, 0x9, '\x00', 0x5}, {0xa}, {0x7c, 0x81, 0xc7, '\x00', 0xe1}, {0xea, 0xf, 0xf8, '\x00', 0xe2}, {0x2, 0x6, 0x8, '\x00', 0x9}, {0x0, 0x2, 0x5, '\x00', 0xa}, {0x4, 0x1, 0x6, '\x00', 0x3}, {0x9, 0x9, 0x8, '\x00', 0x3}, {0x5, 0xfb, 0x1a}, {0x8, 0xd, 0x5, '\x00', 0x1}, {0x8, 0x2, 0x6, '\x00', 0x9}, {0xc4, 0x9, 0xae, '\x00', 0xf8}, {0x8, 0x6, 0x3, '\x00', 0x4}, {0xe, 0x3, 0x2, '\x00', 0xb}, {0x0, 0x9, 0x80, '\x00', 0x8}, {0x8, 0x6, 0x1, '\x00', 0x3}]}}) 3.321505585s ago: executing program 2 (id=3811): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000600)=ANY=[@ANYBLOB="64697361626c655f6578745f6964656e746966792c6673796e635f6d6f64653d7374726963742c6e6f636865636b706f696e745f6d657267652c6e6f657874656e745f63616368652c746573745f64756d6d795f656e6372797074696f6e2c00ca7f3b2f981996b7a00b17c2a1b3aa2a3e156ef54c8301c5808a0289acc8150d1456efcff6a1ad284947038ee7ebbae2a3343cc6974b8b89266c96dc9fdb0ec647e94616bce9b99dc61c3152a4a98da019eb6bf3f231707e05bb76742e3b67ca80224862c9aa07a11c57130ed13661ae753b267c11c000"/224], 0x1, 0x10598, &(0x7f0000031140)="$eJzs3F9rW2UcB/Bf2u7/nEW8EBQ8oEIrJizdH/RumxviWEdRd+GVpkkasiU5pUnb2CvBGy98AwNfife+GFEQBBFBUHKeU1mLgrUl1fbzgbPvOU9Ofuf3jHPznKQJ4NSaz37+qRJX4kJEzEbE5Yhiv1JuhVspXoqIVyNi5pmtUo7/OXA2Ii5GxJVJ8VSzUr705t2z9+8/vfPLl08ffPP9+JXXj2/WwHF7IyL662l/u58y76R8XI43trpF9q9vlZle6D8pj/OU2+3VosJ2Y/e8RpHXOun8fH1zOMm1XqM5yU53rRhfH6QLDrc6u3WKNzxubBTHrfZqkd1hXmRnJ/U1LnNnOEp1WmW9naJ8jEa7mcbb43aaz/qTIpuDUTme6uat9niSW2WWl4tm3msVfaz+6//m/7wH3cHmONtqbwy7+SC7Uau/XavfrNY38lZ71L5ebfRbN69nC53e5LTqqN3o3+rkeafXrjXz/mK20Gk2q/V6tnC3vdptDLJ6vXatdrV6Y7Hceyt77+GjrNfKFiZ5pzvYHHV7w2wt38jSOxazpdq1dxaz1+rZh8sr2coH9+4tn4uIjx/eXn7/3fKk7MZs7GkrW1i6urRUrV+tLtUXT9z8Vz765O6++e9r6wjn/2vlcO/nlHP/AByY9T8wTZd+TDnF9f/c1Nb/n1n/H9RpX/+e9vlbvnEobiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFPr0Xe3Xy525tPxpXL8uXLohfK4EhEzEfH7X5iNs3tqzpZ1zvzN+Wf29fBtJYoKk2ucK7eLEXGr3H57Pr0GAAAAHNzc1198nlbr6Z/5426IaUoPbWYuf3pE9SoRcWb+hyOoEuXDpnjx8F0lk/t7LsaHrLLbW/EA6/zhu0qKR25zR1XtH5ndE+efiUqKmam2AwAATMXelcB0VyEAAABM01fH3QDHo/g0s/wufvkF/nMpyg8EL+w5AgAAAP6H/Ek9AAAAnHzF+t/v/wEAAMDJln7/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAPdu4lNZUgCgPw8XX13huJhMxcjHHo3MyDK8gww0C2EdxNFiNkCUGDXRWIwUBCtd0g3wdtWa38ngYnp/oBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAp3W7m0/7z02NpznZXpp6jAQAAAI5ZbubT6s0kzf/n/eO86yrPOxHRjYhjvXsv/hxk9nLO4JvvD77U8BJRJex/Y5i3fxFxk7e3y/QZAAAA8Hur9WyRuvX0Mmm7IJqUFm26F3c15XUiYjB5rSEl8mJTXJdXlez/3/14KEz5qK1awBqVV5VUS279utJ+pHcwjD4NnTR0Gy0HAABoxGEn0GwXAgAAQJPu2y6AdlRnM/O1+PkC/mEa8gnBv3k2bqE4AAAAoBZuqQcAAIDzV/X/nv8HAAAA5y09/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBTWm7m09V6tijN2e7K1HM0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA7+/OOAiEQBmGwd31nMvc/rDRoampSBcLH3xgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG9+95f/E1PjTDL32lh6HknWTo2tU2Pv3Dj6w/j6NQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzszzsKhkAQhMH+n2q27P0PKw2aGgpCFQgfMwyyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8ESv48v7jE9jJPl22vh1PJP8u2osXTXWHjS2HsyLH427XgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7O3fsGzcVBgD82b67UBDCBCkDWUAMMEDTkA7HeFJZ2MJ/EKXXEnHlUBKhtipDxg4sMFZCZWSlfwH/QDfghq4dMtxQBHPQ89k5t4RCkWpfk99Pev6+WCf7e44U5fN7CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARNPBPM/iIZ/laXnut0e3tmOcPBGj8cNJHkfMkyaLfgElK21XAAAAwFmQVf19CGHzcLAaY5oX/X+3+kzs+e++Osurfv7Jvr+Klx7cyasxXr7+6/GN8tl94kWv7IyGFxqb4eJ77V8/0SmefPHuJSu+IeknB29Mu8XzTL65f//jXpEuNVEtAPB/nK9imVS/D8W43mZhAJwZnXKEWv+f5e3WBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCE6UF4pcqTEMKbnXkeTR7d2j4pXnpwJ6/GLz+/fbt+zXiJbgjhys5oeKHBuSy6vRs3P98ajYa7EolEcpy0/ZMJAIDTpluO2NdvHg5W47lkOYSjHx7v/9+t5aHW79/s/XP///XdwU/1e9X7//XGZrj41vavfbm2d2Ppg51rW1eHV4dfrPcv9i9u9D/a6K8V70rWnvmNSfr8qgUAAOBF1CtHvf9Pl/++/v9yLQ//cf2/c/vox/mdzoVM/3+CozKOhrt7LZcCAABwxr3+1p+/JyecT3q9cH1rf393PR6z+dcfzo4tlPrMlspR7/+z5barAgAAAJowPUgeW/+/XMvDU9b/xw8neTXufbbRrV8zK3YBzNb/z2+PR5ebm85Ca+LPidueIwAAAO06V476+n+32P+fHm95SEMI770zy8t/A/jU/f+x94/xj81vv6rfq77/f6O5KS6kdGX2PIq4EkJnpe2KAAAAOM1eKkds9j89HKze+/7973r2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MX+3NsmDIRxHH59SZS4TUZIbyUwAw0VghH4kJAseQYGYCEaKlqLRWAFkOBc0xmK52n+v+KKewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABe3uXhi7eIKCJ1mSKNNz+n94j4iLRt29HnLYvd+dh83XO2P0xyfsf0t4yIMoo+zgEA6F3VbY7Vul7+5f3PO8g7zFvNm3rxzE8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABXduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgrAAD//xHgTlo=") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x820008, 0x0, 0xda, 0x0, &(0x7f0000000280)) 3.312329324s ago: executing program 3 (id=3812): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000006a00)={0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000000200)='c', 0x1}], 0x1}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40010) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0) 2.960690286s ago: executing program 3 (id=3813): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bb000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) 0s ago: executing program 5 (id=3814): r0 = socket$unix(0x1, 0x1, 0x0) r1 = fsopen(&(0x7f0000000380)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000003c0)='crush_location\x00', &(0x7f0000000440)='rack:foo\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 582] EXT4-fs: Mount option(s) incompatible with ext3 [ 465.450392][ T33] audit: type=1800 audit(1793631605.621:1056): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15605 res=0 errno=-22 [ 465.552196][ T32] tipc: Node number set to 0 [ 465.552328][ T32] tipc: Failed to bind to 0,0,0 [ 465.692554][ T32] tipc: Node number set to 0 [ 465.692756][ T32] tipc: Failed to bind to 0,0,0 [ 465.727038][T14584] loop3: detected capacity change from 0 to 32768 [ 465.754995][T14584] (syz.3.3318,14584,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 465.771017][T14584] (syz.3.3318,14584,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 465.833297][ T32] tipc: Node number set to 0 [ 465.833416][ T32] tipc: Failed to bind to 0,0,0 [ 465.846545][ T33] audit: type=1800 audit(1793631606.031:1057): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15359 res=0 errno=-22 [ 465.931799][T14584] JBD2: Ignoring recovery information on journal [ 465.974918][ T32] tipc: Node number set to 0 [ 465.975050][ T32] tipc: Failed to bind to 0,0,0 [ 466.114092][ T32] tipc: Node number set to 0 [ 466.114224][ T32] tipc: Failed to bind to 0,0,0 [ 466.139141][T14584] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 466.252702][ T32] tipc: Node number set to 0 [ 466.254978][ T32] tipc: Failed to bind to 0,0,0 [ 466.392600][ T32] tipc: Node number set to 0 [ 466.392727][ T32] tipc: Failed to bind to 0,0,0 [ 466.532165][ T32] tipc: Node number set to 0 [ 466.532293][ T32] tipc: Failed to bind to 0,0,0 [ 466.672306][ T32] tipc: Node number set to 0 [ 466.672428][ T32] tipc: Failed to bind to 0,0,0 [ 466.750906][ T5645] ocfs2: Unmounting device (7,3) on (node local) [ 466.820353][ T32] tipc: Node number set to 0 [ 466.820490][ T32] tipc: Failed to bind to 0,0,0 [ 466.953676][ T27] tipc: Node number set to 0 [ 466.953813][ T27] tipc: Failed to bind to 0,0,0 [ 466.955219][ T33] audit: type=1800 audit(1793631607.131:1058): pid=14605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3327" name="delay_use" dev="sysfs" ino=59976 res=0 errno=-22 [ 467.092388][ T27] tipc: Node number set to 0 [ 467.092513][ T27] tipc: Failed to bind to 0,0,0 [ 467.158059][T14611] loop2: detected capacity change from 0 to 164 [ 467.183047][ T33] audit: type=1800 audit(1793631607.361:1059): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15236 res=0 errno=-22 [ 467.232372][ T27] tipc: Node number set to 0 [ 467.232495][ T27] tipc: Failed to bind to 0,0,0 [ 467.356380][T14615] loop5: detected capacity change from 0 to 512 [ 467.368548][T14615] EXT4-fs (loop5): Test dummy encryption mode enabled [ 467.373640][ T27] tipc: Node number set to 0 [ 467.373942][ T27] tipc: Failed to bind to 0,0,0 [ 467.398476][ T33] audit: type=1800 audit(1793631607.571:1060): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15605 res=0 errno=-22 [ 467.398919][T14615] EXT4-fs error (device loop5): ext4_iget_extra_inode:6027: inode #15: comm syz.5.3333: corrupted in-inode xattr: invalid ea_ino [ 467.398952][T14615] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 467.419383][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 467.419412][ C0] EXT4-fs (loop5): initial error at time 1793631607: ext4_iget_extra_inode:6027: inode 15 [ 467.419450][ C0] EXT4-fs (loop5): last error at time 1793631607: ext4_iget_extra_inode:6027: inode 15 [ 467.422621][T14615] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.3333: couldn't read orphan inode 15 (err -117) [ 467.422656][T14615] loop5: lost filesystem error report for type 5 error -117 [ 467.495578][T14615] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.524686][ T27] tipc: Node number set to 0 [ 467.524819][ T27] tipc: Failed to bind to 0,0,0 [ 467.559662][T14615] EXT4-fs: Ignoring sb option on remount [ 467.559910][T14615] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 467.580531][T14615] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 467.671270][T12867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.719660][T14602] loop1: detected capacity change from 0 to 40427 [ 467.730016][T14602] f2fs: Unknown parameter '0177777777777777777777700000000000000000000000' [ 467.771590][T14619] pim6reg: entered allmulticast mode [ 467.771968][ T27] tipc: Node number set to 0 [ 467.772340][ T27] tipc: Failed to bind to 0,0,0 [ 467.793089][ T27] tipc: Node number set to 0 [ 467.793229][ T27] tipc: Failed to bind to 0,0,0 [ 467.816611][ T33] audit: type=1800 audit(1793631607.991:1061): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15113 res=0 errno=-22 [ 467.951747][ T32] tipc: Node number set to 0 [ 467.952010][ T32] tipc: Failed to bind to 0,0,0 [ 468.018144][T14627] loop5: detected capacity change from 0 to 512 [ 468.032274][T14627] EXT4-fs (loop5): Test dummy encryption mode enabled [ 468.032299][T14627] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 468.032313][T14627] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 468.071531][ T33] audit: type=1800 audit(1793631608.241:1062): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15605 res=0 errno=-22 [ 468.073041][ T32] tipc: Node number set to 0 [ 468.073369][ T32] tipc: Failed to bind to 0,0,0 [ 468.103055][T14627] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.3335: bad orphan inode 131083 [ 468.103164][T14627] loop5: lost filesystem error report for type 5 error -117 [ 468.112225][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 468.112307][ C1] EXT4-fs (loop5): initial error at time 1793631608: ext4_orphan_get:1430 [ 468.112380][ C1] EXT4-fs (loop5): last error at time 1793631608: ext4_orphan_get:1430 [ 468.177020][T14627] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.212350][ T32] tipc: Node number set to 0 [ 468.212474][ T32] tipc: Failed to bind to 0,0,0 [ 468.255122][T14627] EXT4-fs (loop5): shut down requested (2) [ 468.352286][ T32] tipc: Node number set to 0 [ 468.352406][ T32] tipc: Failed to bind to 0,0,0 [ 468.440809][T12867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.493461][ T32] tipc: Node number set to 0 [ 468.493574][ T32] tipc: Failed to bind to 0,0,0 [ 468.633050][ T32] tipc: Node number set to 0 [ 468.633293][ T32] tipc: Failed to bind to 0,0,0 [ 468.772370][ T32] tipc: Node number set to 0 [ 468.772938][ T32] tipc: Failed to bind to 0,0,0 [ 468.870931][T14647] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3345'. [ 468.912221][ T32] tipc: Node number set to 0 [ 468.912353][ T32] tipc: Failed to bind to 0,0,0 [ 469.053373][ T32] tipc: Node number set to 0 [ 469.053504][ T32] tipc: Failed to bind to 0,0,0 [ 469.195283][ T32] tipc: Node number set to 0 [ 469.195409][ T32] tipc: Failed to bind to 0,0,0 [ 469.332838][ T32] tipc: Node number set to 0 [ 469.332989][ T32] tipc: Failed to bind to 0,0,0 [ 469.426119][ T33] audit: type=1800 audit(1793631609.601:1063): pid=14664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3353" name="nx_huge_pages" dev="sysfs" ino=54050 res=0 errno=-22 [ 469.476447][ T32] tipc: Node number set to 0 [ 469.476566][ T32] tipc: Failed to bind to 0,0,0 [ 469.613028][ T32] tipc: Node number set to 0 [ 469.613145][ T32] tipc: Failed to bind to 0,0,0 [ 469.692476][ T11] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 469.757605][ T32] tipc: Node number set to 0 [ 469.757725][ T32] tipc: Failed to bind to 0,0,0 [ 469.852197][ T11] usb 2-1: Using ep0 maxpacket: 8 [ 469.853321][ T11] usb 2-1: New USB device found: idVendor=054c, idProduct=042f, bcdDevice=0.00 [ 469.855565][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.855599][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.855652][ T11] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 469.855777][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.889398][ T11] usb 2-1: config 0 descriptor?? [ 469.896019][ T32] tipc: Node number set to 0 [ 469.896332][ T32] tipc: Failed to bind to 0,0,0 [ 469.899301][ T33] audit: type=1800 audit(1793631610.071:1064): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=226003 res=0 errno=-22 [ 469.968402][ T33] audit: type=1800 audit(1793631610.141:1065): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=226032 res=0 errno=-22 [ 469.968457][ T33] audit: type=1800 audit(1793631610.141:1066): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=226010 res=0 errno=-22 [ 469.968505][ T33] audit: type=1800 audit(1793631610.141:1067): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=226011 res=0 errno=-22 [ 469.999004][ T27] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 470.055668][ T5771] tipc: Node number set to 0 [ 470.055790][ T5771] tipc: Failed to bind to 0,0,0 [ 470.155213][ T27] usb 6-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 470.172520][ T974] tipc: Node number set to 0 [ 470.172638][ T974] tipc: Failed to bind to 0,0,0 [ 470.183820][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.183911][ T27] usb 6-1: Product: syz [ 470.183961][ T27] usb 6-1: Manufacturer: syz [ 470.184015][ T27] usb 6-1: SerialNumber: syz [ 470.312280][ T974] tipc: Node number set to 0 [ 470.312414][ T974] tipc: Failed to bind to 0,0,0 [ 470.453470][ T974] tipc: Node number set to 0 [ 470.453598][ T974] tipc: Failed to bind to 0,0,0 [ 470.455663][ T5652] Bluetooth: hci5: unknown advertising packet type: 0xff [ 470.455703][ T5652] Bluetooth: hci5: unknown advertising packet type: 0xfa [ 470.455747][ T5652] Bluetooth: hci5: unknown advertising packet type: 0x09 [ 470.455763][ T5652] Bluetooth: hci5: unknown advertising packet type: 0x05 [ 470.455786][ T5652] Bluetooth: hci5: Dropping invalid advertising data [ 470.455800][ T5652] Bluetooth: hci5: Malformed LE Event: 0x02 [ 470.592797][ T974] tipc: Node number set to 0 [ 470.594014][ T974] tipc: Failed to bind to 0,0,0 [ 470.625864][T14683] loop3: detected capacity change from 0 to 128 [ 470.667876][ T27] rtl8150 6-1:1.0: couldn't reset the device [ 470.668214][ T27] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 470.713912][T14683] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 470.713951][T14683] hpfs: filesystem error: improperly stopped [ 470.713968][T14683] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 470.713984][T14683] hpfs: You really don't want any checks? You are crazy... [ 470.714023][T14683] hpfs: Code page index out of array [ 470.714032][T14683] hpfs: code page support is disabled [ 470.714261][T14683] hpfs: hpfs_map_4sectors(): unaligned read [ 470.714538][T14683] hpfs: hpfs_map_4sectors(): unaligned read [ 470.714551][T14683] hpfs: filesystem error: unable to find root dir [ 470.736795][ T974] tipc: Node number set to 0 [ 470.737195][ T974] tipc: Failed to bind to 0,0,0 [ 470.739713][ T27] usb 6-1: USB disconnect, device number 7 [ 470.840963][T14683] hpfs: hpfs_map_4sectors(): unaligned read [ 470.841633][T14683] hpfs: hpfs_map_sector(): read error [ 470.872792][ T974] tipc: Node number set to 0 [ 470.872917][ T974] tipc: Failed to bind to 0,0,0 [ 470.919682][ T11] sony 0003:054C:042F.0016: can't set operational mode: step 1 [ 470.919883][ T11] sony 0003:054C:042F.0016: Failed to set controller into operational mode [ 470.956999][ T11] sony 0003:054C:042F.0016: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.1-1/input0 [ 470.957039][ T11] sony 0003:054C:042F.0016: failed to claim input [ 471.019423][ T11] usb 2-1: USB disconnect, device number 31 [ 471.021276][ T974] tipc: Node number set to 0 [ 471.021387][ T974] tipc: Failed to bind to 0,0,0 [ 471.154296][ T32] tipc: Node number set to 0 [ 471.154419][ T32] tipc: Failed to bind to 0,0,0 [ 471.164691][T14686] fido_id[14686]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 471.292733][ T974] tipc: Node number set to 0 [ 471.292868][ T974] tipc: Failed to bind to 0,0,0 [ 471.300849][T14688] tun0: tun_chr_ioctl cmd 1074025680 [ 471.433215][ T974] tipc: Node number set to 0 [ 471.433363][ T974] tipc: Failed to bind to 0,0,0 [ 471.572916][ T974] tipc: Node number set to 0 [ 471.573034][ T974] tipc: Failed to bind to 0,0,0 [ 471.619474][T14699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3368'. [ 471.619632][T14699] netlink: 'syz.2.3368': attribute type 30 has an invalid length. [ 471.676067][T14701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3368'. [ 471.676108][T14701] netlink: 'syz.2.3368': attribute type 30 has an invalid length. [ 471.713922][ T974] tipc: Node number set to 0 [ 471.714041][ T974] tipc: Failed to bind to 0,0,0 [ 471.714953][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.715115][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.715263][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.715391][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.852690][ T974] tipc: Node number set to 0 [ 471.854611][ T974] tipc: Failed to bind to 0,0,0 [ 471.932483][ T11] kernel read not supported for file /dsp1 (pid: 11 comm: kworker/0:1) [ 472.032001][ T974] tipc: Node number set to 0 [ 472.032274][ T974] tipc: Failed to bind to 0,0,0 [ 472.132217][ T974] tipc: Node number set to 0 [ 472.132344][ T974] tipc: Failed to bind to 0,0,0 [ 472.272579][ T32] tipc: Node number set to 0 [ 472.272710][ T32] tipc: Failed to bind to 0,0,0 [ 472.412521][ T32] tipc: Node number set to 0 [ 472.413428][ T32] tipc: Failed to bind to 0,0,0 [ 472.506217][T14724] netlink: 'syz.1.3378': attribute type 2 has an invalid length. [ 472.554097][ T32] tipc: Node number set to 0 [ 472.554215][ T32] tipc: Failed to bind to 0,0,0 [ 472.692201][ T32] tipc: Node number set to 0 [ 472.692323][ T32] tipc: Failed to bind to 0,0,0 [ 472.834494][ T32] tipc: Node number set to 0 [ 472.834635][ T32] tipc: Failed to bind to 0,0,0 [ 472.972198][ T32] tipc: Node number set to 0 [ 472.972330][ T32] tipc: Failed to bind to 0,0,0 [ 473.113132][ T32] tipc: Node number set to 0 [ 473.113249][ T32] tipc: Failed to bind to 0,0,0 [ 473.253253][ T32] tipc: Node number set to 0 [ 473.253380][ T32] tipc: Failed to bind to 0,0,0 [ 473.393632][ T32] tipc: Node number set to 0 [ 473.393755][ T32] tipc: Failed to bind to 0,0,0 [ 473.539311][ T32] tipc: Node number set to 0 [ 473.539435][ T32] tipc: Failed to bind to 0,0,0 [ 473.613910][ T5369] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 473.649416][T14752] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 473.672599][ T32] tipc: Node number set to 0 [ 473.672725][ T32] tipc: Failed to bind to 0,0,0 [ 473.769954][T14754] loop1: detected capacity change from 0 to 512 [ 473.779429][ T5369] usb 3-1: New USB device found: idVendor=0eef, idProduct=72c4, bcdDevice=0.00 [ 473.780730][ T5369] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.780763][ T5369] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 473.780791][ T5369] usb 3-1: config 0 interface 0 has no altsetting 0 [ 473.780826][ T5369] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.818326][ T32] tipc: Node number set to 0 [ 473.819399][ T32] tipc: Failed to bind to 0,0,0 [ 473.843612][ T5369] usb 3-1: config 0 descriptor?? [ 473.860060][T14754] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 473.860081][T14754] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 473.904734][T14754] EXT4-fs (loop1): 1 truncate cleaned up [ 473.906376][T14757] input: syz0 as /devices/virtual/input/input57 [ 473.928018][T14754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.954184][ T32] tipc: Node number set to 0 [ 473.954315][ T32] tipc: Failed to bind to 0,0,0 [ 473.966329][ T33] kauditd_printk_skb: 13 callbacks suppressed [ 473.966349][ T33] audit: type=1800 audit(1793631614.141:1081): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15113 res=0 errno=-22 [ 473.999772][ T33] audit: type=1800 audit(1793631614.171:1082): pid=6480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=226523 res=0 errno=-22 [ 474.037341][ T33] audit: type=1800 audit(1793631614.211:1083): pid=6480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=226552 res=0 errno=-22 [ 474.037409][ T33] audit: type=1800 audit(1793631614.211:1084): pid=6480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=226530 res=0 errno=-22 [ 474.055462][T14754] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 217 vs 220 free clusters [ 474.096424][ T974] tipc: Node number set to 0 [ 474.096721][ T974] tipc: Failed to bind to 0,0,0 [ 474.102406][ T33] audit: type=1800 audit(1793631614.271:1085): pid=6480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=226531 res=0 errno=-22 [ 474.117216][ T33] audit: type=1800 audit(1793631614.281:1086): pid=6480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=226532 res=0 errno=-22 [ 474.178288][ T33] audit: type=1800 audit(1793631614.351:1087): pid=6480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=226572 res=0 errno=-22 [ 474.232346][ T974] tipc: Node number set to 0 [ 474.232452][ T974] tipc: Failed to bind to 0,0,0 [ 474.319363][ T5647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.337391][T14762] netlink: 67 bytes leftover after parsing attributes in process `syz.5.3397'. [ 474.337480][T14762] IPv6: NLM_F_REPLACE set, but no existing node found! [ 474.374428][ T5369] hid-multitouch 0003:0EEF:72C4.0017: unknown main item tag 0x0 [ 474.374465][ T5369] hid-multitouch 0003:0EEF:72C4.0017: unknown main item tag 0x0 [ 474.381723][ T974] tipc: Node number set to 0 [ 474.381839][ T974] tipc: Failed to bind to 0,0,0 [ 474.407955][ T33] audit: type=1800 audit(1793631614.571:1088): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=226681 res=0 errno=-22 [ 474.437884][ T33] audit: type=1800 audit(1793631614.611:1089): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=226703 res=0 errno=-22 [ 474.464433][ T5369] hid-multitouch 0003:0EEF:72C4.0017: hiddev0,hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.2-1/input0 [ 474.506033][ T33] audit: type=1800 audit(1793631614.681:1090): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=226717 res=0 errno=-22 [ 474.513529][ T27] tipc: Node number set to 0 [ 474.518526][ T27] tipc: Failed to bind to 0,0,0 [ 474.584669][ T5369] usb 3-1: USB disconnect, device number 23 [ 474.652196][ T27] tipc: Node number set to 0 [ 474.652326][ T27] tipc: Failed to bind to 0,0,0 [ 474.792533][ T27] tipc: Node number set to 0 [ 474.792654][ T27] tipc: Failed to bind to 0,0,0 [ 474.924738][T14764] fido_id[14764]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 474.932489][ T27] tipc: Node number set to 0 [ 474.932793][ T27] tipc: Failed to bind to 0,0,0 [ 475.072204][ T27] tipc: Node number set to 0 [ 475.072324][ T27] tipc: Failed to bind to 0,0,0 [ 475.213707][ T27] tipc: Node number set to 0 [ 475.213826][ T27] tipc: Failed to bind to 0,0,0 [ 475.352608][ T974] tipc: Node number set to 0 [ 475.352792][ T974] tipc: Failed to bind to 0,0,0 [ 475.459050][T14782] loop2: detected capacity change from 0 to 4096 [ 475.493540][ T974] tipc: Node number set to 0 [ 475.493663][ T974] tipc: Failed to bind to 0,0,0 [ 475.546893][T14787] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 475.633216][ T27] tipc: Node number set to 0 [ 475.633340][ T27] tipc: Failed to bind to 0,0,0 [ 475.773438][ T27] tipc: Node number set to 0 [ 475.773562][ T27] tipc: Failed to bind to 0,0,0 [ 475.813065][ T974] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 475.912494][ T27] tipc: Node number set to 0 [ 475.912610][ T27] tipc: Failed to bind to 0,0,0 [ 475.965478][ T974] usb 4-1: New USB device found: idVendor=046d, idProduct=c539, bcdDevice=0.00 [ 475.971186][ T974] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 475.971221][ T974] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 475.971250][ T974] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 475.971281][ T974] usb 4-1: config 0 interface 0 has no altsetting 0 [ 475.971317][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.030063][ T974] usb 4-1: config 0 descriptor?? [ 476.035844][T14784] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 476.076518][ T27] tipc: Node number set to 0 [ 476.076703][ T27] tipc: Failed to bind to 0,0,0 [ 476.192408][ T27] tipc: Node number set to 0 [ 476.192544][ T27] tipc: Failed to bind to 0,0,0 [ 476.254190][T14796] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3412'. [ 476.254229][T14796] netlink: 'syz.5.3412': attribute type 6 has an invalid length. [ 476.332226][ T32] tipc: Node number set to 0 [ 476.332358][ T32] tipc: Failed to bind to 0,0,0 [ 476.473814][ T32] tipc: Node number set to 0 [ 476.473963][ T32] tipc: Failed to bind to 0,0,0 [ 476.612251][ T32] tipc: Node number set to 0 [ 476.612368][ T32] tipc: Failed to bind to 0,0,0 [ 476.616945][ T974] logitech-djreceiver 0003:046D:C539.0018: hidraw0: USB HID v0.00 Keyboard [HID 046d:c539] on usb-dummy_hcd.3-1/input0 [ 476.753603][ T974] tipc: Node number set to 0 [ 476.753725][ T974] tipc: Failed to bind to 0,0,0 [ 476.780979][ T974] usb 4-1: USB disconnect, device number 28 [ 476.892304][ T32] tipc: Node number set to 0 [ 476.892436][ T32] tipc: Failed to bind to 0,0,0 [ 476.898586][T14803] fido_id[14803]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 476.990425][T14809] loop2: detected capacity change from 0 to 256 [ 477.034004][ T32] tipc: Node number set to 0 [ 477.034123][ T32] tipc: Failed to bind to 0,0,0 [ 477.088783][T14809] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 477.172545][ T32] tipc: Node number set to 0 [ 477.172956][ T32] tipc: Failed to bind to 0,0,0 [ 477.312633][ T974] tipc: Node number set to 0 [ 477.312752][ T974] tipc: Failed to bind to 0,0,0 [ 477.452226][ T32] tipc: Node number set to 0 [ 477.452345][ T32] tipc: Failed to bind to 0,0,0 [ 477.593991][ T974] tipc: Node number set to 0 [ 477.594109][ T974] tipc: Failed to bind to 0,0,0 [ 477.732508][ T974] tipc: Node number set to 0 [ 477.732681][ T974] tipc: Failed to bind to 0,0,0 [ 477.872546][ T974] tipc: Node number set to 0 [ 477.872956][ T974] tipc: Failed to bind to 0,0,0 [ 478.012223][ T974] tipc: Node number set to 0 [ 478.012352][ T974] tipc: Failed to bind to 0,0,0 [ 478.152286][ T974] tipc: Node number set to 0 [ 478.152412][ T974] tipc: Failed to bind to 0,0,0 [ 478.292354][ T974] tipc: Node number set to 0 [ 478.292471][ T974] tipc: Failed to bind to 0,0,0 [ 478.432275][ T32] tipc: Node number set to 0 [ 478.432408][ T32] tipc: Failed to bind to 0,0,0 [ 478.572524][ T974] tipc: Node number set to 0 [ 478.572645][ T974] tipc: Failed to bind to 0,0,0 [ 478.713380][ T974] tipc: Node number set to 0 [ 478.713502][ T974] tipc: Failed to bind to 0,0,0 [ 478.818559][T14818] loop1: detected capacity change from 0 to 32768 [ 478.837299][T14818] (syz.1.3423,14818,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 478.840221][T14818] (syz.1.3423,14818,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 478.853133][ T974] tipc: Node number set to 0 [ 478.853448][ T974] tipc: Failed to bind to 0,0,0 [ 478.926555][T14818] JBD2: Ignoring recovery information on journal [ 478.994482][ T974] tipc: Node number set to 0 [ 478.994594][ T974] tipc: Failed to bind to 0,0,0 [ 479.136712][ T974] tipc: Node number set to 0 [ 479.136858][ T974] tipc: Failed to bind to 0,0,0 [ 479.162298][T14818] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 479.228942][ T33] kauditd_printk_skb: 14 callbacks suppressed [ 479.228963][ T33] audit: type=1800 audit(1793631619.411:1105): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15113 res=0 errno=-22 [ 479.272507][ T974] tipc: Node number set to 0 [ 479.272628][ T974] tipc: Failed to bind to 0,0,0 [ 479.366012][ T33] audit: type=1800 audit(1793631619.541:1106): pid=14842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3432" name="algorithm_params" dev="sysfs" ino=21074 res=0 errno=-13 [ 479.421059][ T974] tipc: Node number set to 0 [ 479.421180][ T974] tipc: Failed to bind to 0,0,0 [ 479.553199][ T32] tipc: Node number set to 0 [ 479.553316][ T32] tipc: Failed to bind to 0,0,0 [ 479.695857][ T32] tipc: Node number set to 0 [ 479.695971][ T32] tipc: Failed to bind to 0,0,0 [ 479.713454][ T5647] ocfs2: Unmounting device (7,1) on (node local) [ 479.818642][ T33] audit: type=1800 audit(1793631619.991:1107): pid=14849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3436" name="control" dev="sysfs" ino=4935 res=0 errno=-22 [ 479.834085][ T974] tipc: Node number set to 0 [ 479.834376][ T974] tipc: Failed to bind to 0,0,0 [ 479.878835][ T33] audit: type=1800 audit(1793631620.051:1108): pid=14850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3434" name="gro_flush_timeout" dev="sysfs" ino=98586 res=0 errno=-22 [ 479.972672][ T974] tipc: Node number set to 0 [ 479.974089][ T974] tipc: Failed to bind to 0,0,0 [ 480.051318][T14856] netlink: 87 bytes leftover after parsing attributes in process `syz.3.3440'. [ 480.112444][ T974] tipc: Node number set to 0 [ 480.112564][ T974] tipc: Failed to bind to 0,0,0 [ 480.252152][ T11] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 480.252215][ T974] tipc: Node number set to 0 [ 480.252367][ T974] tipc: Failed to bind to 0,0,0 [ 480.336407][T14854] loop2: detected capacity change from 0 to 4096 [ 480.360565][T14854] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 480.392324][ T974] tipc: Node number set to 0 [ 480.392442][ T974] tipc: Failed to bind to 0,0,0 [ 480.424462][ T11] usb 1-1: New USB device found: idVendor=0596, idProduct=0001, bcdDevice=5.f5 [ 480.425178][ T11] usb 1-1: config 0 has no interfaces? [ 480.427085][ T11] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 480.427112][ T11] usb 1-1: Manufacturer: syz [ 480.427128][ T11] usb 1-1: SerialNumber: syz [ 480.465571][ T11] usb 1-1: config 0 descriptor?? [ 480.486425][ T33] audit: type=1800 audit(1793631620.661:1109): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15236 res=0 errno=-22 [ 480.519892][ T33] audit: type=1800 audit(1793631620.691:1110): pid=6387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=227122 res=0 errno=-22 [ 480.535526][ T974] tipc: Node number set to 0 [ 480.535843][ T974] tipc: Failed to bind to 0,0,0 [ 480.566353][ T33] audit: type=1800 audit(1793631620.721:1111): pid=6387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=227153 res=0 errno=-22 [ 480.566408][ T33] audit: type=1800 audit(1793631620.741:1112): pid=6387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=227129 res=0 errno=-22 [ 480.566452][ T33] audit: type=1800 audit(1793631620.741:1113): pid=6387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=227130 res=0 errno=-22 [ 480.566495][ T33] audit: type=1800 audit(1793631620.741:1114): pid=6387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=227151 res=0 errno=-22 [ 480.672205][ T32] tipc: Node number set to 0 [ 480.672306][ T32] tipc: Failed to bind to 0,0,0 [ 480.695901][T14862] random: crng reseeded on system resumption [ 480.748268][ T32] usb 1-1: USB disconnect, device number 30 [ 480.774306][T14854] ntfs3(loop2): ino=19, mi_enum_attr [ 480.774369][T14854] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 480.811755][T14854] ntfs3(loop2): ino=1a, mi_enum_attr [ 480.811986][T14854] ntfs3(loop2): ino=1a, mi_enum_attr [ 480.812668][T14854] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 480.815410][ T974] tipc: Node number set to 0 [ 480.815763][ T974] tipc: Failed to bind to 0,0,0 [ 480.952393][ T974] tipc: Node number set to 0 [ 480.952515][ T974] tipc: Failed to bind to 0,0,0 [ 481.093505][ T32] tipc: Node number set to 0 [ 481.093627][ T32] tipc: Failed to bind to 0,0,0 [ 481.232252][ T32] tipc: Node number set to 0 [ 481.232372][ T32] tipc: Failed to bind to 0,0,0 [ 481.372234][ T32] tipc: Node number set to 0 [ 481.372357][ T32] tipc: Failed to bind to 0,0,0 [ 481.459900][T14882] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3450'. [ 481.459935][T14882] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3450'. [ 481.460486][T14882] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3450'. [ 481.460513][T14882] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3450'. [ 481.512903][ T32] tipc: Node number set to 0 [ 481.513033][ T32] tipc: Failed to bind to 0,0,0 [ 481.652499][ T974] tipc: Node number set to 0 [ 481.652619][ T974] tipc: Failed to bind to 0,0,0 [ 481.792287][ T974] tipc: Node number set to 0 [ 481.792408][ T974] tipc: Failed to bind to 0,0,0 [ 481.796292][T14890] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 481.842178][ T11] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 481.932352][ T974] tipc: Node number set to 0 [ 481.932471][ T974] tipc: Failed to bind to 0,0,0 [ 481.993234][ T11] usb 4-1: New USB device found: idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 481.996237][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.996273][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.996313][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.000591][ T11] usb 4-1: config 0 descriptor?? [ 482.072478][ T974] tipc: Node number set to 0 [ 482.072596][ T974] tipc: Failed to bind to 0,0,0 [ 482.214995][ T974] tipc: Node number set to 0 [ 482.215128][ T974] tipc: Failed to bind to 0,0,0 [ 482.306576][T14897] loop2: detected capacity change from 0 to 512 [ 482.329436][T14897] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 482.329459][T14897] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 482.353290][ T974] tipc: Node number set to 0 [ 482.353583][ T974] tipc: Failed to bind to 0,0,0 [ 482.382693][T14897] EXT4-fs (loop2): 1 truncate cleaned up [ 482.388732][T14871] loop5: detected capacity change from 0 to 32768 [ 482.389937][T14897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.437744][T14871] (syz.5.3445,14871,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 482.438120][T14871] (syz.5.3445,14871,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 482.492204][ T974] tipc: Node number set to 0 [ 482.492328][ T974] tipc: Failed to bind to 0,0,0 [ 482.514145][ T11] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 482.514183][ T11] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 482.514212][ T11] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 482.514241][ T11] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 482.514268][ T11] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 482.521503][ T11] playstation 0003:054C:0DF2.0019: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 482.554891][T14871] JBD2: Ignoring recovery information on journal [ 482.632218][ T32] tipc: Node number set to 0 [ 482.632338][ T32] tipc: Failed to bind to 0,0,0 [ 482.711405][ T11] playstation 0003:054C:0DF2.0019: Invalid reportID received, expected 9 got 0 [ 482.711465][ T11] playstation 0003:054C:0DF2.0019: Failed to retrieve DualSense pairing info: -22 [ 482.711524][ T11] playstation 0003:054C:0DF2.0019: Failed to get MAC address from DualSense [ 482.711541][ T11] playstation 0003:054C:0DF2.0019: Failed to create dualsense. [ 482.750208][ T11] playstation 0003:054C:0DF2.0019: probe with driver playstation failed with error -22 [ 482.772714][ T974] tipc: Node number set to 0 [ 482.772847][ T974] tipc: Failed to bind to 0,0,0 [ 482.858863][T14871] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 482.914244][ T974] tipc: Node number set to 0 [ 482.914373][ T974] tipc: Failed to bind to 0,0,0 [ 483.019989][ T974] usb 4-1: USB disconnect, device number 29 [ 483.060625][ T32] tipc: Node number set to 0 [ 483.060744][ T32] tipc: Failed to bind to 0,0,0 [ 483.207515][ T27] tipc: Node number set to 0 [ 483.207626][ T27] tipc: Failed to bind to 0,0,0 [ 483.257721][T12867] ocfs2: Unmounting device (7,5) on (node local) [ 483.332210][ T974] tipc: Node number set to 0 [ 483.332361][ T974] tipc: Failed to bind to 0,0,0 [ 483.480222][ T974] tipc: Node number set to 0 [ 483.480327][ T974] tipc: Failed to bind to 0,0,0 [ 483.617009][ T974] tipc: Node number set to 0 [ 483.617130][ T974] tipc: Failed to bind to 0,0,0 [ 483.641236][ T5640] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.755215][ T974] tipc: Node number set to 0 [ 483.755335][ T974] tipc: Failed to bind to 0,0,0 [ 483.893480][ T974] tipc: Node number set to 0 [ 483.893589][ T974] tipc: Failed to bind to 0,0,0 [ 483.973531][T14918] overlayfs: workdir and upperdir must reside under the same mount [ 484.032695][ T974] tipc: Node number set to 0 [ 484.032819][ T974] tipc: Failed to bind to 0,0,0 [ 484.172660][ T974] tipc: Node number set to 0 [ 484.173701][ T974] tipc: Failed to bind to 0,0,0 [ 484.312220][ T974] tipc: Node number set to 0 [ 484.312346][ T974] tipc: Failed to bind to 0,0,0 [ 484.452227][ T27] tipc: Node number set to 0 [ 484.452354][ T27] tipc: Failed to bind to 0,0,0 [ 484.592168][ T974] tipc: Node number set to 0 [ 484.592298][ T974] tipc: Failed to bind to 0,0,0 [ 484.732356][ T32] tipc: Node number set to 0 [ 484.732468][ T32] tipc: Failed to bind to 0,0,0 [ 484.794586][ T27] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 484.872596][ T974] tipc: Node number set to 0 [ 484.872714][ T974] tipc: Failed to bind to 0,0,0 [ 484.943028][ T27] usb 6-1: Using ep0 maxpacket: 8 [ 484.946633][ T27] usb 6-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 484.970362][ T27] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 484.970420][ T27] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 484.970449][ T27] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 484.970476][ T27] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 484.970504][ T27] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 484.970530][ T27] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 484.970574][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.017575][ T974] tipc: Node number set to 0 [ 485.017874][ T974] tipc: Failed to bind to 0,0,0 [ 485.075308][ T33] kauditd_printk_skb: 16 callbacks suppressed [ 485.075328][ T33] audit: type=1800 audit(1793631625.251:1131): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=227410 res=0 errno=-22 [ 485.122530][ T33] audit: type=1800 audit(1793631625.291:1132): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=227439 res=0 errno=-22 [ 485.140263][ T33] audit: type=1800 audit(1793631625.311:1133): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=227417 res=0 errno=-22 [ 485.152277][ T974] tipc: Node number set to 0 [ 485.152412][ T974] tipc: Failed to bind to 0,0,0 [ 485.185094][ T33] audit: type=1800 audit(1793631625.361:1134): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=227418 res=0 errno=-22 [ 485.213751][ T33] audit: type=1800 audit(1793631625.391:1135): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=227419 res=0 errno=-22 [ 485.249834][ T33] audit: type=1800 audit(1793631625.421:1136): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=227459 res=0 errno=-22 [ 485.292340][ T974] tipc: Node number set to 0 [ 485.292494][ T974] tipc: Failed to bind to 0,0,0 [ 485.334625][ T27] usb 6-1: GET_CAPABILITIES returned 0 [ 485.334682][ T27] usbtmc 6-1:16.0: can't read capabilities [ 485.363083][ T33] audit: type=1800 audit(1793631625.531:1137): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=227476 res=0 errno=-22 [ 485.432980][ T27] tipc: Node number set to 0 [ 485.433109][ T27] tipc: Failed to bind to 0,0,0 [ 485.572328][ T27] tipc: Node number set to 0 [ 485.572454][ T27] tipc: Failed to bind to 0,0,0 [ 485.586204][ T27] usb 6-1: USB disconnect, device number 8 [ 485.712757][ T32] tipc: Node number set to 0 [ 485.712890][ T32] tipc: Failed to bind to 0,0,0 [ 485.777826][T14945] loop1: detected capacity change from 0 to 4096 [ 485.808396][ T33] audit: type=1800 audit(1793631625.981:1138): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15113 res=0 errno=-22 [ 485.858870][ T32] tipc: Node number set to 0 [ 485.859012][ T32] tipc: Failed to bind to 0,0,0 [ 485.942421][T14945] NILFS (loop1): invalid segment: Checksum error in segment payload [ 485.942452][T14945] NILFS (loop1): trying rollback from an earlier position [ 485.992945][ T32] tipc: Node number set to 0 [ 485.993123][ T32] tipc: Failed to bind to 0,0,0 [ 486.034666][T14945] NILFS (loop1): recovery complete [ 486.045990][T14956] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 486.133963][ T32] tipc: Node number set to 0 [ 486.134085][ T32] tipc: Failed to bind to 0,0,0 [ 486.177401][T14945] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 32 already freed [ 486.203176][T14945] NILFS (loop1): nilfs_sufile_do_free: segment 13 is already clean [ 486.273097][ T32] tipc: Node number set to 0 [ 486.273218][ T32] tipc: Failed to bind to 0,0,0 [ 486.408172][ T33] audit: type=1800 audit(1793631626.581:1139): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=227598 res=0 errno=-22 [ 486.413681][ T32] tipc: Node number set to 0 [ 486.413798][ T32] tipc: Failed to bind to 0,0,0 [ 486.437468][ T33] audit: type=1800 audit(1793631626.611:1140): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=227613 res=0 errno=-22 [ 486.558506][ T32] tipc: Node number set to 0 [ 486.558627][ T32] tipc: Failed to bind to 0,0,0 [ 486.636200][T14958] loop3: detected capacity change from 0 to 32768 [ 486.807077][ T32] tipc: Node number set to 0 [ 486.807201][ T32] tipc: Failed to bind to 0,0,0 [ 486.832136][ T27] tipc: Node number set to 0 [ 486.832257][ T27] tipc: Failed to bind to 0,0,0 [ 486.922976][T14958] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 486.979203][ T32] tipc: Node number set to 0 [ 486.979325][ T32] tipc: Failed to bind to 0,0,0 [ 487.056312][T14958] XFS (loop3): Ending clean mount [ 487.079665][T14981] loop2: detected capacity change from 0 to 512 [ 487.234025][T14981] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 487.234051][T14981] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 487.234151][T14981] System zones: 0-1, 15-15, 18-18, 34-34 [ 487.234454][T14981] EXT4-fs (loop2): orphan cleanup on readonly fs [ 487.234596][T14981] EXT4-fs warning (device loop2): ext4_enable_quotas:7355: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 487.234637][T14981] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 487.241797][T14981] EXT4-fs (loop2): 1 truncate cleaned up [ 487.267744][ T27] tipc: Node number set to 0 [ 487.267865][ T27] tipc: Failed to bind to 0,0,0 [ 487.300000][T14981] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 487.346185][T14981] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 487.395600][ T27] tipc: Node number set to 0 [ 487.395724][ T27] tipc: Failed to bind to 0,0,0 [ 487.416170][ T5645] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 487.626138][ T5640] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.745837][ T27] tipc: Node number set to 0 [ 487.745952][ T27] tipc: Failed to bind to 0,0,0 [ 487.746004][ T27] tipc: Node number set to 0 [ 487.746099][ T27] tipc: Failed to bind to 0,0,0 [ 487.812575][ T27] tipc: Node number set to 0 [ 487.813867][ T27] tipc: Failed to bind to 0,0,0 [ 487.954299][ T27] tipc: Node number set to 0 [ 487.954413][ T27] tipc: Failed to bind to 0,0,0 [ 488.093216][ T27] tipc: Node number set to 0 [ 488.093347][ T27] tipc: Failed to bind to 0,0,0 [ 488.232477][ T27] tipc: Node number set to 0 [ 488.232598][ T27] tipc: Failed to bind to 0,0,0 [ 488.263913][T14997] loop5: detected capacity change from 0 to 764 [ 488.380306][ T27] tipc: Node number set to 0 [ 488.380421][ T27] tipc: Failed to bind to 0,0,0 [ 488.514538][ T27] tipc: Node number set to 0 [ 488.514657][ T27] tipc: Failed to bind to 0,0,0 [ 488.653104][ T27] tipc: Node number set to 0 [ 488.653858][ T27] tipc: Failed to bind to 0,0,0 [ 488.794276][ T27] tipc: Node number set to 0 [ 488.794393][ T27] tipc: Failed to bind to 0,0,0 [ 488.932268][ T27] tipc: Node number set to 0 [ 488.932390][ T27] tipc: Failed to bind to 0,0,0 [ 489.072498][ T32] tipc: Node number set to 0 [ 489.073389][ T32] tipc: Failed to bind to 0,0,0 [ 489.228279][T15025] vlan2: entered promiscuous mode [ 489.228309][T15025] macvlan0: entered promiscuous mode [ 489.388164][ T27] tipc: Node number set to 0 [ 489.388283][ T27] tipc: Failed to bind to 0,0,0 [ 489.388336][ T27] tipc: Node number set to 0 [ 489.388471][ T27] tipc: Failed to bind to 0,0,0 [ 489.493072][ T27] tipc: Node number set to 0 [ 489.493191][ T27] tipc: Failed to bind to 0,0,0 [ 489.632205][ T27] tipc: Node number set to 0 [ 489.632323][ T27] tipc: Failed to bind to 0,0,0 [ 489.772228][ T27] tipc: Node number set to 0 [ 489.772356][ T27] tipc: Failed to bind to 0,0,0 [ 489.773647][T15037] Falling back ldisc for ptm0. [ 489.915167][ T27] tipc: Node number set to 0 [ 489.915286][ T27] tipc: Failed to bind to 0,0,0 [ 490.039726][ T34] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 490.054170][ T27] tipc: Node number set to 0 [ 490.054289][ T27] tipc: Failed to bind to 0,0,0 [ 490.192184][ T32] tipc: Node number set to 0 [ 490.192300][ T32] tipc: Failed to bind to 0,0,0 [ 490.333465][ T32] tipc: Node number set to 0 [ 490.333580][ T32] tipc: Failed to bind to 0,0,0 [ 490.478259][ T32] tipc: Node number set to 0 [ 490.478381][ T32] tipc: Failed to bind to 0,0,0 [ 490.615703][ T27] tipc: Node number set to 0 [ 490.615828][ T27] tipc: Failed to bind to 0,0,0 [ 490.752678][ T27] tipc: Node number set to 0 [ 490.752799][ T27] tipc: Failed to bind to 0,0,0 [ 490.892270][ T27] tipc: Node number set to 0 [ 490.892394][ T27] tipc: Failed to bind to 0,0,0 [ 490.980598][ T33] kauditd_printk_skb: 9 callbacks suppressed [ 490.980618][ T33] audit: type=1800 audit(1793631631.151:1149): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=227881 res=0 errno=-22 [ 491.033433][ T32] tipc: Node number set to 0 [ 491.033555][ T32] tipc: Failed to bind to 0,0,0 [ 491.172193][ T32] tipc: Node number set to 0 [ 491.172321][ T32] tipc: Failed to bind to 0,0,0 [ 491.286040][T15085] ip_tables: iptables: counters copy to user failed while replacing table [ 491.312199][ T32] tipc: Node number set to 0 [ 491.312328][ T32] tipc: Failed to bind to 0,0,0 [ 491.462631][T15092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3539'. [ 491.560199][ T27] tipc: Node number set to 0 [ 491.560342][ T27] tipc: Failed to bind to 0,0,0 [ 491.584355][T15096] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 491.698575][ T32] tipc: Node number set to 0 [ 491.698696][ T32] tipc: Failed to bind to 0,0,0 [ 491.741846][ T32] tipc: Node number set to 0 [ 491.741964][ T32] tipc: Failed to bind to 0,0,0 [ 491.874377][ T27] tipc: Node number set to 0 [ 491.874497][ T27] tipc: Failed to bind to 0,0,0 [ 492.013516][ T27] tipc: Node number set to 0 [ 492.013639][ T27] tipc: Failed to bind to 0,0,0 [ 492.152620][ T32] tipc: Node number set to 0 [ 492.152744][ T32] tipc: Failed to bind to 0,0,0 [ 492.183156][T15116] loop2: detected capacity change from 0 to 256 [ 492.194786][T15116] vfat: Unknown parameter 'iocharse' [ 492.277157][ T33] audit: type=1800 audit(1793631632.451:1150): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15236 res=0 errno=-22 [ 492.295113][ T32] tipc: Node number set to 0 [ 492.297169][ T32] tipc: Failed to bind to 0,0,0 [ 492.432240][ T32] tipc: Node number set to 0 [ 492.432356][ T32] tipc: Failed to bind to 0,0,0 [ 492.574616][ T32] tipc: Node number set to 0 [ 492.574740][ T32] tipc: Failed to bind to 0,0,0 [ 492.712963][ T27] tipc: Node number set to 0 [ 492.713076][ T27] tipc: Failed to bind to 0,0,0 [ 492.866150][T15135] ip6gretap0: entered promiscuous mode [ 492.869071][T15135] batadv0: entered promiscuous mode [ 492.883441][T15135] debugfs: 'hsr1' already exists in 'hsr' [ 492.883466][T15135] Cannot create hsr debugfs directory [ 492.906802][ T974] tipc: Node number set to 0 [ 492.906926][ T974] tipc: Failed to bind to 0,0,0 [ 492.942268][ T32] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 492.994203][ T974] tipc: Node number set to 0 [ 492.994321][ T974] tipc: Failed to bind to 0,0,0 [ 493.093108][ T32] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 493.098893][ T32] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 493.098957][ T32] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 493.124673][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.124756][ T32] usb 2-1: Product: syz [ 493.124798][ T32] usb 2-1: Manufacturer: syz [ 493.124840][ T32] usb 2-1: SerialNumber: syz [ 493.156957][ T974] tipc: Node number set to 0 [ 493.157086][ T974] tipc: Failed to bind to 0,0,0 [ 493.174191][ T33] audit: type=1800 audit(1793631633.351:1151): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=228087 res=0 errno=-22 [ 493.179944][ T33] audit: type=1800 audit(1793631633.351:1152): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=228119 res=0 errno=-22 [ 493.182500][ T33] audit: type=1800 audit(1793631633.351:1153): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=228094 res=0 errno=-22 [ 493.198272][ T33] audit: type=1800 audit(1793631633.371:1154): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=228095 res=0 errno=-22 [ 493.258994][ T32] cdc_mbim 2-1:1.0: skipping garbage [ 493.299804][ T974] tipc: Node number set to 0 [ 493.299954][ T974] tipc: Failed to bind to 0,0,0 [ 493.414135][ T974] tipc: Node number set to 0 [ 493.414287][ T974] tipc: Failed to bind to 0,0,0 [ 493.499537][T15133] loop2: detected capacity change from 0 to 32768 [ 493.552829][ T974] tipc: Node number set to 0 [ 493.552973][ T974] tipc: Failed to bind to 0,0,0 [ 493.618167][ T33] audit: type=1800 audit(1793631633.791:1155): pid=15133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3557" name="file1" dev="loop2" ino=7 res=0 errno=-22 [ 493.694829][ T974] tipc: Node number set to 0 [ 493.694976][ T974] tipc: Failed to bind to 0,0,0 [ 493.799700][T15133] ERROR: (device loop2): dbAlloc: unable to allocate blocks [ 493.799700][T15133] [ 493.800248][T15133] ERROR: (device loop2): remounting filesystem as read-only [ 493.800286][T15133] jfs_create: dtInsert returned -EIO [ 493.800383][T15133] ERROR: (device loop2): jfs_create: [ 493.800383][T15133] [ 493.833011][ T974] tipc: Node number set to 0 [ 493.833516][ T974] tipc: Failed to bind to 0,0,0 [ 493.972632][ T974] tipc: Node number set to 0 [ 493.974994][ T974] tipc: Failed to bind to 0,0,0 [ 494.081430][ T32] cdc_mbim 2-1:1.0: SET_CRC_MODE failed [ 494.085932][ T32] cdc_mbim 2-1:1.0: SET_NTB_FORMAT failed [ 494.116754][ T27] tipc: Node number set to 0 [ 494.116940][ T27] tipc: Failed to bind to 0,0,0 [ 494.117239][ T32] cdc_mbim 2-1:1.0: bind() failure [ 494.148818][ T32] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 494.148871][ T32] cdc_ncm 2-1:1.1: bind() failure [ 494.176861][ T33] audit: type=1800 audit(1793631634.351:1156): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=228116 res=0 errno=-22 [ 494.176914][ T33] audit: type=1800 audit(1793631634.351:1157): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=228117 res=0 errno=-22 [ 494.179354][ T32] usb 2-1: USB disconnect, device number 32 [ 494.259611][ T974] tipc: Node number set to 0 [ 494.259739][ T974] tipc: Failed to bind to 0,0,0 [ 494.275962][ T33] audit: type=1800 audit(1793631634.451:1158): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=228118 res=0 errno=-22 [ 494.392721][ T974] tipc: Node number set to 0 [ 494.392837][ T974] tipc: Failed to bind to 0,0,0 [ 494.534270][ T32] tipc: Node number set to 0 [ 494.534605][ T32] tipc: Failed to bind to 0,0,0 [ 494.672263][ T32] tipc: Node number set to 0 [ 494.672368][ T32] tipc: Failed to bind to 0,0,0 [ 494.813189][ T32] tipc: Node number set to 0 [ 494.813310][ T32] tipc: Failed to bind to 0,0,0 [ 494.915073][T15168] netlink: 1444 bytes leftover after parsing attributes in process `syz.5.3571'. [ 494.952977][ T32] tipc: Node number set to 0 [ 494.953108][ T32] tipc: Failed to bind to 0,0,0 [ 494.989247][T15170] loop2: detected capacity change from 0 to 512 [ 494.991371][T15170] EXT4-fs: Ignoring removed nobh option [ 494.991496][T15170] ext4: Unknown parameter 'fsuuid' [ 495.093197][ T974] tipc: Node number set to 0 [ 495.093321][ T974] tipc: Failed to bind to 0,0,0 [ 495.166605][T15174] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl816) [ 495.232267][ T974] tipc: Node number set to 0 [ 495.232402][ T974] tipc: Failed to bind to 0,0,0 [ 495.372730][ T32] tipc: Node number set to 0 [ 495.372851][ T32] tipc: Failed to bind to 0,0,0 [ 495.513422][ T32] tipc: Node number set to 0 [ 495.513543][ T32] tipc: Failed to bind to 0,0,0 [ 495.654385][ T32] tipc: Node number set to 0 [ 495.654494][ T32] tipc: Failed to bind to 0,0,0 [ 495.761825][T15198] loop2: detected capacity change from 0 to 256 [ 495.792305][ T32] tipc: Node number set to 0 [ 495.792420][ T32] tipc: Failed to bind to 0,0,0 [ 495.840790][T15198] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3163b44b, utbl_chksum : 0xe619d30d) [ 495.916354][T15198] exFAT-fs (loop2): valid_size(150994954) is greater than size(10) [ 495.932798][ T32] tipc: Node number set to 0 [ 495.932912][ T32] tipc: Failed to bind to 0,0,0 [ 496.001375][T15201] loop1: detected capacity change from 0 to 512 [ 496.009852][T15201] EXT4-fs: Ignoring removed bh option [ 496.047104][T15201] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 496.072590][ T32] tipc: Node number set to 0 [ 496.072778][ T32] tipc: Failed to bind to 0,0,0 [ 496.095308][T15201] EXT4-fs (loop1): 1 truncate cleaned up [ 496.102613][T15201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.144464][ T33] kauditd_printk_skb: 30 callbacks suppressed [ 496.144486][ T33] audit: type=1800 audit(1793631637.329:1189): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15113 res=0 errno=-22 [ 496.212191][ T974] tipc: Node number set to 0 [ 496.212310][ T974] tipc: Failed to bind to 0,0,0 [ 496.352293][ T974] tipc: Node number set to 0 [ 496.352425][ T974] tipc: Failed to bind to 0,0,0 [ 496.449141][ T5647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.486136][T15210] loop5: detected capacity change from 0 to 256 [ 496.497817][ T974] tipc: Node number set to 0 [ 496.497926][ T974] tipc: Failed to bind to 0,0,0 [ 496.526162][T15211] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.585571][T15210] exFAT-fs (loop5): error, no upcase table entry. Please run fsck [ 496.585595][T15210] exFAT-fs (loop5): Filesystem has been set read-only [ 496.612555][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 496.632302][ T974] tipc: Node number set to 0 [ 496.632421][ T974] tipc: Failed to bind to 0,0,0 [ 496.672695][ T33] audit: type=1800 audit(1793631637.859:1190): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15605 res=0 errno=-22 [ 496.772396][ T974] tipc: Node number set to 0 [ 496.772519][ T974] tipc: Failed to bind to 0,0,0 [ 496.774633][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 496.784147][ T10] usb 1-1: New USB device found: idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 496.812560][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 496.812591][ T10] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 496.812616][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 496.823848][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.823917][ T10] usb 1-1: Product: syz [ 496.823959][ T10] usb 1-1: Manufacturer: syz [ 496.824000][ T10] usb 1-1: SerialNumber: syz [ 496.875133][ T33] audit: type=1800 audit(1793631638.059:1191): pid=6387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=228301 res=0 errno=-22 [ 496.877139][ T33] audit: type=1800 audit(1793631638.059:1192): pid=6387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=228333 res=0 errno=-22 [ 496.878200][ T33] audit: type=1800 audit(1793631638.059:1193): pid=6387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=228308 res=0 errno=-22 [ 496.879252][ T33] audit: type=1800 audit(1793631638.059:1194): pid=6387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=228309 res=0 errno=-22 [ 496.879851][ T10] usb 1-1: config 0 descriptor?? [ 496.945465][ T974] tipc: Node number set to 0 [ 496.945584][ T974] tipc: Failed to bind to 0,0,0 [ 497.032473][T15214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3593'. [ 497.062379][ T974] tipc: Node number set to 0 [ 497.062515][ T974] tipc: Failed to bind to 0,0,0 [ 497.148247][ T33] audit: type=1800 audit(1793631638.329:1195): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=4825 res=0 errno=-22 [ 497.202165][ T974] tipc: Node number set to 0 [ 497.202284][ T974] tipc: Failed to bind to 0,0,0 [ 497.342168][ T32] tipc: Node number set to 0 [ 497.342293][ T32] tipc: Failed to bind to 0,0,0 [ 497.400010][ T10] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 497.482159][ T974] tipc: Node number set to 0 [ 497.482278][ T974] tipc: Failed to bind to 0,0,0 [ 497.627543][ T974] tipc: Node number set to 0 [ 497.627662][ T974] tipc: Failed to bind to 0,0,0 [ 497.678096][ T11] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 497.762516][ T974] tipc: Node number set to 0 [ 497.763855][ T974] tipc: Failed to bind to 0,0,0 [ 497.811622][ T10] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 497.817201][ T10] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 497.823958][ T10] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 497.855087][ T33] audit: type=1800 audit(1793631639.039:1196): pid=6387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=228330 res=0 errno=-22 [ 497.855139][ T33] audit: type=1800 audit(1793631639.039:1197): pid=6387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=228331 res=0 errno=-22 [ 497.855654][ T10] usb 1-1: USB disconnect, device number 31 [ 497.857478][ T33] audit: type=1800 audit(1793631639.039:1198): pid=6387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=228310 res=0 errno=-22 [ 497.878419][ T11] usb 4-1: New USB device found: idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 497.905694][ T974] tipc: Node number set to 0 [ 497.905853][ T974] tipc: Failed to bind to 0,0,0 [ 497.953046][ T11] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 497.953077][ T11] usb 4-1: config 0 has no interface number 0 [ 497.982105][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.982136][ T11] usb 4-1: Product: syz [ 497.982152][ T11] usb 4-1: Manufacturer: syz [ 497.982168][ T11] usb 4-1: SerialNumber: syz [ 498.016006][ T11] usb 4-1: config 0 descriptor?? [ 498.051814][ T974] tipc: Node number set to 0 [ 498.051931][ T974] tipc: Failed to bind to 0,0,0 [ 498.182165][ T32] tipc: Node number set to 0 [ 498.182288][ T32] tipc: Failed to bind to 0,0,0 [ 498.323300][ T974] tipc: Node number set to 0 [ 498.323406][ T974] tipc: Failed to bind to 0,0,0 [ 498.382873][T15232] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 498.383107][T15232] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 498.388647][T15235] syz.2.3601 (15235) used greatest stack depth: 17992 bytes left [ 498.462159][ T5771] tipc: Node number set to 0 [ 498.462280][ T5771] tipc: Failed to bind to 0,0,0 [ 498.557592][T15248] loop1: detected capacity change from 0 to 256 [ 498.558893][T15248] exfat: Deprecated parameter 'utf8' [ 498.565585][T15248] exfat: Deprecated parameter 'namecase' [ 498.602306][ T5771] tipc: Node number set to 0 [ 498.602425][ T5771] tipc: Failed to bind to 0,0,0 [ 498.669365][T15248] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d) [ 498.743436][ T5771] tipc: Node number set to 0 [ 498.743556][ T5771] tipc: Failed to bind to 0,0,0 [ 498.884999][ T5771] tipc: Node number set to 0 [ 498.885121][ T5771] tipc: Failed to bind to 0,0,0 [ 498.923453][ T11] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 498.923490][ T11] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 498.923775][ T11] asix 4-1:0.251: probe with driver asix failed with error -71 [ 498.977952][ T11] usb 4-1: USB disconnect, device number 30 [ 499.008536][T15232] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 499.008667][T15232] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 499.025860][ T5771] tipc: Node number set to 0 [ 499.025976][ T5771] tipc: Failed to bind to 0,0,0 [ 499.162167][ T5771] tipc: Node number set to 0 [ 499.162291][ T5771] tipc: Failed to bind to 0,0,0 [ 499.182751][T15232] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 499.182874][T15232] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 499.185006][T15232] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 499.185184][T15232] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 499.185249][T15232] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 499.274978][T15232] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 499.302227][ T5771] tipc: Node number set to 0 [ 499.302359][ T5771] tipc: Failed to bind to 0,0,0 [ 499.441373][T15245] loop5: detected capacity change from 0 to 32768 [ 499.443259][ T32] tipc: Node number set to 0 [ 499.443380][ T32] tipc: Failed to bind to 0,0,0 [ 499.584081][ T32] tipc: Node number set to 0 [ 499.584201][ T32] tipc: Failed to bind to 0,0,0 [ 499.674054][ T5652] Bluetooth: hci1: command 0x0406 tx timeout [ 499.722321][ T32] tipc: Node number set to 0 [ 499.722528][ T32] tipc: Failed to bind to 0,0,0 [ 499.863436][ T32] tipc: Node number set to 0 [ 499.863560][ T32] tipc: Failed to bind to 0,0,0 [ 499.913964][T15269] loop1: detected capacity change from 0 to 1756 [ 499.969857][T15269] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 499.969884][T15269] UDF-fs: Scanning with blocksize 512 failed [ 500.002562][ T32] tipc: Node number set to 0 [ 500.004886][ T32] tipc: Failed to bind to 0,0,0 [ 500.017805][T15275] loop5: detected capacity change from 0 to 256 [ 500.041053][T15269] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 500.041080][T15269] UDF-fs: Scanning with blocksize 1024 failed [ 500.114978][T15269] UDF-fs: INFO Mounting volume 'CDROM', timestamp 2022/11/22 15:59 (1000) [ 500.142253][ T32] tipc: Node number set to 0 [ 500.142373][ T32] tipc: Failed to bind to 0,0,0 [ 500.287569][ T32] tipc: Node number set to 0 [ 500.287687][ T32] tipc: Failed to bind to 0,0,0 [ 500.422152][ T32] tipc: Node number set to 0 [ 500.422272][ T32] tipc: Failed to bind to 0,0,0 [ 500.564865][ T974] tipc: Node number set to 0 [ 500.564993][ T974] tipc: Failed to bind to 0,0,0 [ 500.702161][ T974] tipc: Node number set to 0 [ 500.702281][ T974] tipc: Failed to bind to 0,0,0 [ 500.842174][ T974] tipc: Node number set to 0 [ 500.842293][ T974] tipc: Failed to bind to 0,0,0 [ 500.982956][ T974] tipc: Node number set to 0 [ 500.983080][ T974] tipc: Failed to bind to 0,0,0 [ 501.032676][ T5652] Bluetooth: hci2: command 0x0406 tx timeout [ 501.122217][ T974] tipc: Node number set to 0 [ 501.122343][ T974] tipc: Failed to bind to 0,0,0 [ 501.192201][ T5652] Bluetooth: hci3: command 0x0406 tx timeout [ 501.192245][ T5652] Bluetooth: hci4: command 0x0406 tx timeout [ 501.262212][ T974] tipc: Node number set to 0 [ 501.262334][ T974] tipc: Failed to bind to 0,0,0 [ 501.272186][ T4954] Bluetooth: hci5: command 0x0405 tx timeout [ 501.402237][ T32] tipc: Node number set to 0 [ 501.402361][ T32] tipc: Failed to bind to 0,0,0 [ 501.543146][ T32] tipc: Node number set to 0 [ 501.543268][ T32] tipc: Failed to bind to 0,0,0 [ 501.662574][T15282] loop2: detected capacity change from 0 to 32768 [ 501.680768][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.680829][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.695285][T15282] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3623 (15282) [ 501.696252][ T32] tipc: Node number set to 0 [ 501.696362][ T32] tipc: Failed to bind to 0,0,0 [ 501.740659][ T33] kauditd_printk_skb: 13 callbacks suppressed [ 501.740680][ T33] audit: type=1800 audit(1793631642.919:1212): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15236 res=0 errno=-22 [ 501.771770][ T4954] Bluetooth: hci1: command 0x0406 tx timeout [ 501.795377][T15282] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 501.795553][T15282] BTRFS info (device loop2): using crc32c checksum algorithm [ 501.799638][ T33] audit: type=1800 audit(1793631642.979:1213): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=228584 res=0 errno=-22 [ 501.827132][ T974] tipc: Node number set to 0 [ 501.827268][ T974] tipc: Failed to bind to 0,0,0 [ 501.962727][ T974] tipc: Node number set to 0 [ 501.962850][ T974] tipc: Failed to bind to 0,0,0 [ 502.076424][T15309] FAULT_INJECTION: forcing a failure. [ 502.076424][T15309] name failslab, interval 1, probability 0, space 0, times 1 [ 502.076471][T15309] CPU: 1 UID: 0 PID: 15309 Comm: syz.3.3632 Tainted: G L syzkaller #0 PREEMPT(full) [ 502.076503][T15309] Tainted: [L]=SOFTLOCKUP [ 502.076511][T15309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 502.076526][T15309] Call Trace: [ 502.076535][T15309] [ 502.076545][T15309] dump_stack_lvl+0xe8/0x150 [ 502.076587][T15309] should_fail_ex+0x3eb/0x540 [ 502.076631][T15309] should_failslab+0xa8/0x100 [ 502.076665][T15309] ? taskstats_exit+0x19e/0xe10 [ 502.076694][T15309] kmem_cache_alloc_noprof+0x9c/0x600 [ 502.076725][T15309] ? taskstats_exit+0x19e/0xe10 [ 502.076760][T15309] taskstats_exit+0x19e/0xe10 [ 502.076796][T15309] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 502.076821][T15309] ? __pfx_taskstats_exit+0x10/0x10 [ 502.076858][T15309] ? _raw_spin_unlock_irq+0x23/0x50 [ 502.076895][T15309] do_exit+0x688/0x2360 [ 502.076929][T15309] ? __pfx_do_exit+0x10/0x10 [ 502.076956][T15309] ? do_raw_spin_lock+0x12b/0x2f0 [ 502.076991][T15309] do_group_exit+0x22d/0x2f0 [ 502.077014][T15309] ? _raw_spin_unlock_irq+0x23/0x50 [ 502.077044][T15309] get_signal+0x136a/0x1430 [ 502.077096][T15309] arch_do_signal_or_restart+0xbb/0x860 [ 502.077124][T15309] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 502.077156][T15309] ? do_pwritev+0x289/0x2d0 [ 502.077241][T15309] exit_to_user_mode_loop+0x10e/0x770 [ 502.077272][T15309] ? rcu_is_watching+0x16/0xb0 [ 502.077311][T15309] do_syscall_64+0x328/0x520 [ 502.077340][T15309] ? trace_irq_disable+0x3b/0x140 [ 502.077370][T15309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.077394][T15309] ? clear_bhb_loop+0x70/0xc0 [ 502.077422][T15309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.077453][T15309] RIP: 0033:0x7f8cc3d9fb19 [ 502.077476][T15309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.077496][T15309] RSP: 002b:00007f8cc4c790e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 502.077521][T15309] RAX: fffffffffffffe00 RBX: 00007f8cc4025fa8 RCX: 00007f8cc3d9fb19 [ 502.077537][T15309] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8cc4025fa8 [ 502.077552][T15309] RBP: 00007f8cc4025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 502.077570][T15309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.077583][T15309] R13: 00007f8cc4026038 R14: 00007ffea3ec7ce0 R15: 00007ffea3ec7dc8 [ 502.077631][T15309] [ 502.084980][T15282] BTRFS info (device loop2): enabling ssd optimizations [ 502.085054][T15282] BTRFS info (device loop2): turning on flush-on-commit [ 502.085106][T15282] BTRFS info (device loop2): enabling free space tree [ 502.085150][T15282] BTRFS info (device loop2): enabling auto defrag [ 502.085238][T15282] BTRFS info (device loop2): use lzo compression, level 1 [ 502.085299][T15282] BTRFS info (device loop2): max_inline set to 4096 [ 502.122472][ T974] tipc: Node number set to 0 [ 502.122591][ T974] tipc: Failed to bind to 0,0,0 [ 502.242799][ T974] tipc: Node number set to 0 [ 502.242916][ T974] tipc: Failed to bind to 0,0,0 [ 502.387224][ T974] tipc: Node number set to 0 [ 502.387349][ T974] tipc: Failed to bind to 0,0,0 [ 502.494131][T15316] overlayfs: upper fs does not support file handles, falling back to index=off. [ 502.494155][T15316] overlayfs: fs on './bus' does not support file handles, falling back to xino=off. [ 502.494187][T15316] overlayfs: conflicting lowerdir path [ 502.522158][ T32] tipc: Node number set to 0 [ 502.522282][ T32] tipc: Failed to bind to 0,0,0 [ 502.662231][ T32] tipc: Node number set to 0 [ 502.662352][ T32] tipc: Failed to bind to 0,0,0 [ 502.802148][ T32] tipc: Node number set to 0 [ 502.802273][ T32] tipc: Failed to bind to 0,0,0 [ 502.898023][ T5640] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 502.942409][ T32] tipc: Node number set to 0 [ 502.942528][ T32] tipc: Failed to bind to 0,0,0 [ 502.978455][ T33] audit: type=1800 audit(1793631644.159:1214): pid=15329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3640" name="rotational" dev="sysfs" ino=21238 res=0 errno=-22 [ 503.112308][ T4954] Bluetooth: hci2: command 0x0406 tx timeout [ 503.150113][T15333] loop3: detected capacity change from 0 to 2048 [ 503.163828][ T32] tipc: Node number set to 0 [ 503.163942][ T32] tipc: Failed to bind to 0,0,0 [ 503.227991][T15333] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 503.260841][ T32] tipc: Node number set to 0 [ 503.260961][ T32] tipc: Failed to bind to 0,0,0 [ 503.273477][ T4954] Bluetooth: hci4: command 0x0406 tx timeout [ 503.287809][ T33] audit: type=1800 audit(1793631644.459:1215): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15359 res=0 errno=-22 [ 503.335668][T15335] ipvlan2: entered allmulticast mode [ 503.335698][T15335] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 503.341903][T15335] batman_adv: batadv0: Adding interface: ipvlan2 [ 503.341922][T15335] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.341958][T15335] batman_adv: batadv0: Interface activated: ipvlan2 [ 503.366101][ T4954] Bluetooth: hci5: command 0x0405 tx timeout [ 503.417327][ T5771] tipc: Node number set to 0 [ 503.417450][ T5771] tipc: Failed to bind to 0,0,0 [ 503.543105][ T32] tipc: Node number set to 0 [ 503.543356][ T32] tipc: Failed to bind to 0,0,0 [ 503.626672][ T33] audit: type=1800 audit(1793631644.799:1216): pid=15340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3637" name="uevent" dev="sysfs" ino=2204 res=0 errno=-13 [ 503.682148][ T5771] tipc: Node number set to 0 [ 503.682269][ T5771] tipc: Failed to bind to 0,0,0 [ 503.739831][T15340] synth uevent: /bus/acpi: unknown uevent action string [ 503.759034][ T33] audit: type=1400 audit(1793631644.939:1217): apparmor="STATUS" info="missing required dfa" error=-71 profile="unconfined" name="p" pid=15344 comm="syz.5.3644" name="p" offset=92 [ 503.817014][T15343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3646'. [ 503.825686][ T5771] tipc: Node number set to 0 [ 503.829131][ T5771] tipc: Failed to bind to 0,0,0 [ 503.964462][ T5771] tipc: Node number set to 0 [ 503.964586][ T5771] tipc: Failed to bind to 0,0,0 [ 503.967612][T15350] ip_tables: iptables: counters copy to user failed while replacing table [ 504.091134][ T33] audit: type=1800 audit(1793631645.269:1218): pid=15356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3648" name="quirks" dev="sysfs" ino=59931 res=0 errno=-22 [ 504.103785][ T5771] tipc: Node number set to 0 [ 504.104095][ T5771] tipc: Failed to bind to 0,0,0 [ 504.243969][ T5771] tipc: Node number set to 0 [ 504.244106][ T5771] tipc: Failed to bind to 0,0,0 [ 504.383005][ T5771] tipc: Node number set to 0 [ 504.383138][ T5771] tipc: Failed to bind to 0,0,0 [ 504.384524][T15365] ip_tables: iptables: counters copy to user failed while replacing table [ 504.522225][ T32] tipc: Node number set to 0 [ 504.522343][ T32] tipc: Failed to bind to 0,0,0 [ 504.662177][ T32] tipc: Node number set to 0 [ 504.662316][ T32] tipc: Failed to bind to 0,0,0 [ 504.802616][ T32] tipc: Node number set to 0 [ 504.803925][ T32] tipc: Failed to bind to 0,0,0 [ 504.942599][ T32] tipc: Node number set to 0 [ 504.945727][ T32] tipc: Failed to bind to 0,0,0 [ 505.005014][T15383] loop1: detected capacity change from 0 to 512 [ 505.083304][ T32] tipc: Node number set to 0 [ 505.083419][ T32] tipc: Failed to bind to 0,0,0 [ 505.109784][T15383] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.109909][T15383] ext4 filesystem being mounted at /684/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 505.145992][ T33] audit: type=1800 audit(1793631646.329:1219): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15113 res=0 errno=-22 [ 505.210163][T15392] loop3: detected capacity change from 0 to 128 [ 505.222553][ T32] tipc: Node number set to 0 [ 505.222671][ T32] tipc: Failed to bind to 0,0,0 [ 505.276521][ T5647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.279633][T15392] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 505.308440][T15392] ext4 filesystem being mounted at /743/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 505.364685][ T32] tipc: Node number set to 0 [ 505.364807][ T32] tipc: Failed to bind to 0,0,0 [ 505.432854][ T4954] Bluetooth: hci5: command 0x0405 tx timeout [ 505.463056][ T5645] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 505.502255][ T32] tipc: Node number set to 0 [ 505.502377][ T32] tipc: Failed to bind to 0,0,0 [ 505.587150][T15397] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.642167][ T32] tipc: Node number set to 0 [ 505.642294][ T32] tipc: Failed to bind to 0,0,0 [ 505.782182][ T5771] tipc: Node number set to 0 [ 505.782307][ T5771] tipc: Failed to bind to 0,0,0 [ 505.892143][ T32] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 505.892741][T15405] netlink: 'syz.5.3671': attribute type 2 has an invalid length. [ 505.922170][ T5771] tipc: Node number set to 0 [ 505.922289][ T5771] tipc: Failed to bind to 0,0,0 [ 506.043191][ T32] usb 4-1: Using ep0 maxpacket: 8 [ 506.045321][ T32] usb 4-1: New USB device found: idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 506.047210][ T32] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 506.047239][ T32] usb 4-1: config 0 has no interface number 0 [ 506.047280][ T32] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 506.047305][ T32] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 506.047330][ T32] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 506.047358][ T32] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 506.047386][ T32] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 506.066733][ T5771] tipc: Node number set to 0 [ 506.066855][ T5771] tipc: Failed to bind to 0,0,0 [ 506.096657][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.096689][ T32] usb 4-1: Product: syz [ 506.096707][ T32] usb 4-1: Manufacturer: syz [ 506.096723][ T32] usb 4-1: SerialNumber: syz [ 506.185040][ T33] audit: type=1800 audit(1793631647.369:1220): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=228895 res=0 errno=-22 [ 506.186651][ T32] usb 4-1: config 0 descriptor?? [ 506.220393][ T33] audit: type=1800 audit(1793631647.399:1221): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=228927 res=0 errno=-22 [ 506.244171][ T5771] tipc: Node number set to 0 [ 506.244314][ T5771] tipc: Failed to bind to 0,0,0 [ 506.352719][ T5771] tipc: Node number set to 0 [ 506.352879][ T5771] tipc: Failed to bind to 0,0,0 [ 506.430830][ T32] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 506.492192][ T32] tipc: Node number set to 0 [ 506.492307][ T32] tipc: Failed to bind to 0,0,0 [ 506.632309][ T5771] tipc: Node number set to 0 [ 506.632425][ T5771] tipc: Failed to bind to 0,0,0 [ 506.760066][ T5369] usb 4-1: USB disconnect, device number 31 [ 506.772191][ T5771] tipc: Node number set to 0 [ 506.772315][ T5771] tipc: Failed to bind to 0,0,0 [ 506.913128][ T5771] tipc: Node number set to 0 [ 506.913246][ T5771] tipc: Failed to bind to 0,0,0 [ 507.052182][ T5771] tipc: Node number set to 0 [ 507.052329][ T5771] tipc: Failed to bind to 0,0,0 [ 507.194095][ T32] tipc: Node number set to 0 [ 507.194228][ T32] tipc: Failed to bind to 0,0,0 [ 507.332600][ T32] tipc: Node number set to 0 [ 507.332723][ T32] tipc: Failed to bind to 0,0,0 [ 507.472309][ T32] tipc: Node number set to 0 [ 507.472435][ T32] tipc: Failed to bind to 0,0,0 [ 507.613805][ T5771] tipc: Node number set to 0 [ 507.613925][ T5771] tipc: Failed to bind to 0,0,0 [ 507.630037][ T3373] IPVS: starting estimator thread 0... [ 507.685991][ T33] kauditd_printk_skb: 8 callbacks suppressed [ 507.686012][ T33] audit: type=1800 audit(1793631648.869:1230): pid=15439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3685" name="napi_defer_hard_irqs" dev="sysfs" ino=105728 res=0 errno=-22 [ 507.723568][T15441] IPVS: using max 25 ests per chain, 60000 per kthread [ 507.753077][ T5771] tipc: Node number set to 0 [ 507.753201][ T5771] tipc: Failed to bind to 0,0,0 [ 507.803895][T15445] loop5: detected capacity change from 0 to 1024 [ 507.829728][ T33] audit: type=1800 audit(1793631649.009:1231): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15605 res=0 errno=-22 [ 507.893914][ T32] tipc: Node number set to 0 [ 507.894987][ T32] tipc: Failed to bind to 0,0,0 [ 507.895980][T15445] hfsplus: invalid length 1280 has been corrected to 255 [ 507.896136][T15445] hfsplus: invalid length 1280 has been corrected to 255 [ 507.958314][ T3373] hfsplus: invalid length 1280 has been corrected to 255 [ 508.032214][ T32] tipc: Node number set to 0 [ 508.032331][ T32] tipc: Failed to bind to 0,0,0 [ 508.172167][ T32] tipc: Node number set to 0 [ 508.172290][ T32] tipc: Failed to bind to 0,0,0 [ 508.312814][ T32] tipc: Node number set to 0 [ 508.312934][ T32] tipc: Failed to bind to 0,0,0 [ 508.452441][ T32] tipc: Node number set to 0 [ 508.452560][ T32] tipc: Failed to bind to 0,0,0 [ 508.454571][T15466] netlink: 4412 bytes leftover after parsing attributes in process `syz.5.3697'. [ 508.562541][ T33] audit: type=1800 audit(1793631649.739:1232): pid=15463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3696" name="bind_mode" dev="sysfs" ino=42079 res=0 errno=-22 [ 508.563118][ T33] audit: type=1800 audit(1793631649.749:1233): pid=15464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3694" name="register" dev="sysfs" ino=49512 res=0 errno=-13 [ 508.593023][ T32] tipc: Node number set to 0 [ 508.593142][ T32] tipc: Failed to bind to 0,0,0 [ 508.728667][ T33] audit: type=1800 audit(1793631649.909:1234): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37217 res=0 errno=-22 [ 508.752947][ T32] tipc: Node number set to 0 [ 508.753075][ T32] tipc: Failed to bind to 0,0,0 [ 508.768117][T15448] loop1: detected capacity change from 0 to 32768 [ 508.781171][T15448] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3687 (15448) [ 508.826578][T15475] loop2: detected capacity change from 0 to 1024 [ 508.828617][T15448] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 508.828651][T15448] BTRFS info (device loop1): using blake2b checksum algorithm [ 508.828670][T15475] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 508.873024][ T5771] tipc: Node number set to 0 [ 508.873215][ T5771] tipc: Failed to bind to 0,0,0 [ 508.941580][T15475] EXT4-fs error (device loop2): ext4_map_blocks:867: inode #3: block 2: comm syz.2.3700: lblock 2 mapped to illegal pblock 2 (length 1) [ 508.941624][T15475] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 508.942396][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 508.942451][ C0] EXT4-fs (loop2): initial error at time 1793631650: ext4_map_blocks:867: inode 3: block 2 [ 508.942559][ C0] EXT4-fs (loop2): last error at time 1793631650: ext4_map_blocks:867: inode 3: block 2 [ 508.956534][ T33] audit: type=1800 audit(1793631650.129:1235): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15113 res=0 errno=-22 [ 508.957888][T15475] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 508.957958][T15475] EXT4-fs error (device loop2): ext4_map_blocks:867: inode #3: block 48: comm syz.2.3700: lblock 0 mapped to illegal pblock 48 (length 1) [ 508.957995][T15475] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 508.967346][T15475] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 508.967372][T15475] EXT4-fs error (device loop2): ext4_acquire_dquot:7120: comm syz.2.3700: Failed to acquire dquot type 0 [ 508.967397][T15475] loop2: lost filesystem error report for type 5 error -117 [ 509.005212][T15475] EXT4-fs error (device loop2) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 509.005288][T15475] loop2: lost filesystem error report for type 5 error -117 [ 509.010151][T15475] EXT4-fs error (device loop2): ext4_evict_inode:336: inode #11: comm syz.2.3700: mark_inode_dirty error [ 509.010241][T15475] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 509.016527][ T5771] tipc: Node number set to 0 [ 509.016646][ T5771] tipc: Failed to bind to 0,0,0 [ 509.020160][T15475] EXT4-fs warning (device loop2): ext4_evict_inode:339: couldn't mark inode dirty (err -117) [ 509.020475][T15475] EXT4-fs (loop2): 1 orphan inode deleted [ 509.037181][ T66] EXT4-fs error (device loop2): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 509.037279][ T66] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 509.039601][ T33] audit: type=1800 audit(1793631650.209:1236): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=229057 res=0 errno=-22 [ 509.089816][T15475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.204053][ T5771] tipc: Node number set to 0 [ 509.204287][ T5771] tipc: Failed to bind to 0,0,0 [ 509.217303][ T66] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 509.217350][ T66] EXT4-fs error (device loop2): ext4_release_dquot:7156: comm kworker/u8:5: Failed to release dquot type 0 [ 509.249684][T15448] BTRFS info (device loop1): enabling ssd optimizations [ 509.249746][T15448] BTRFS info (device loop1): turning on async discard [ 509.249768][T15448] BTRFS info (device loop1): enabling free space tree [ 509.292185][ T5771] tipc: Node number set to 0 [ 509.292305][ T5771] tipc: Failed to bind to 0,0,0 [ 509.331292][T15475] EXT4-fs error (device loop2): ext4_map_blocks:867: inode #3: block 1: comm syz.2.3700: lblock 1 mapped to illegal pblock 1 (length 1) [ 509.361209][T15475] EXT4-fs error (device loop2): ext4_acquire_dquot:7120: comm syz.2.3700: Failed to acquire dquot type 0 [ 509.432192][ T5771] tipc: Node number set to 0 [ 509.432331][ T5771] tipc: Failed to bind to 0,0,0 [ 509.566032][ T5647] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 509.572791][ T5771] tipc: Node number set to 0 [ 509.572935][ T5771] tipc: Failed to bind to 0,0,0 [ 509.640394][ T5640] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.694535][ T3373] EXT4-fs error (device loop2): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 509.694580][ T3373] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 509.696739][ T3373] EXT4-fs error (device loop2): ext4_release_dquot:7156: comm kworker/u8:10: Failed to release dquot type 0 [ 509.696771][ T3373] loop2: lost filesystem error report for type 5 error -117 [ 509.717630][ T5640] EXT4-fs error (device loop2): __ext4_get_inode_loc:5733: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 509.717681][ T5640] loop2: lost filesystem error report for type 5 error -117 [ 509.718355][ T5771] tipc: Node number set to 0 [ 509.724060][ T5771] tipc: Failed to bind to 0,0,0 [ 509.837487][T15499] loop5: detected capacity change from 0 to 4096 [ 509.852134][ T32] tipc: Node number set to 0 [ 509.852251][ T32] tipc: Failed to bind to 0,0,0 [ 509.877406][ T5640] EXT4-fs error (device loop2) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 509.877432][ T5640] loop2: lost filesystem error report for type 5 error -117 [ 509.942173][ T5640] EXT4-fs error (device loop2): ext4_quota_off:7404: inode #3: comm syz-executor: mark_inode_dirty error [ 509.942207][ T5640] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 509.986922][ T5640] EXT4-fs error (device loop2): __ext4_get_inode_loc:5733: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 509.986961][ T5640] loop2: lost filesystem error report for type 5 error -117 [ 509.997116][ T32] tipc: Node number set to 0 [ 509.997254][ T32] tipc: Failed to bind to 0,0,0 [ 510.132161][ T32] tipc: Node number set to 0 [ 510.132294][ T32] tipc: Failed to bind to 0,0,0 [ 510.182945][T15499] ntfs3(loop5): Failed to load $Extend (-22). [ 510.182975][T15499] ntfs3(loop5): Failed to initialize $Extend. [ 510.278691][ T32] tipc: Node number set to 0 [ 510.278810][ T32] tipc: Failed to bind to 0,0,0 [ 510.512957][ T32] tipc: Node number set to 0 [ 510.513090][ T32] tipc: Failed to bind to 0,0,0 [ 510.553158][ T32] tipc: Node number set to 0 [ 510.553279][ T32] tipc: Failed to bind to 0,0,0 [ 510.667241][T15519] netlink: 272 bytes leftover after parsing attributes in process `syz.3.3714'. [ 510.692137][ T32] tipc: Node number set to 0 [ 510.692254][ T32] tipc: Failed to bind to 0,0,0 [ 510.833720][ T32] tipc: Node number set to 0 [ 510.838460][ T32] tipc: Failed to bind to 0,0,0 [ 510.972193][ T5771] tipc: Node number set to 0 [ 510.972314][ T5771] tipc: Failed to bind to 0,0,0 [ 511.112750][ T5771] tipc: Node number set to 0 [ 511.112871][ T5771] tipc: Failed to bind to 0,0,0 [ 511.265273][T15532] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 511.396185][T15534] loop2: detected capacity change from 0 to 2048 [ 511.415477][T15536] loop5: detected capacity change from 0 to 8 [ 511.499184][T15534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.499311][T15534] ext4 filesystem being mounted at /808/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.534506][ T5771] tipc: Node number set to 0 [ 511.534631][ T5771] tipc: Failed to bind to 0,0,0 [ 511.534673][ T5771] tipc: Node number set to 0 [ 511.534773][ T5771] tipc: Failed to bind to 0,0,0 [ 511.535313][T15536] SQUASHFS error: Unable to read directory block [629:fe] [ 511.672269][ T5771] tipc: Node number set to 0 [ 511.672403][ T5771] tipc: Failed to bind to 0,0,0 [ 511.812154][ T5771] tipc: Node number set to 0 [ 511.812281][ T5771] tipc: Failed to bind to 0,0,0 [ 511.912517][T15534] fs-verity (loop2, inode 13): Error -14 reading file data [ 511.912570][T15534] fs-verity (loop2, inode 13): Error -14 building Merkle tree [ 511.952170][ T32] tipc: Node number set to 0 [ 511.952305][ T32] tipc: Failed to bind to 0,0,0 [ 512.138417][ T48] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.141814][ T5640] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.296302][T15543] loop5: detected capacity change from 0 to 1756 [ 512.339468][T15543] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 512.339495][T15543] UDF-fs: Scanning with blocksize 512 failed [ 512.412543][T15543] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 512.412568][T15543] UDF-fs: Scanning with blocksize 1024 failed [ 512.416991][ T32] tipc: Node number set to 0 [ 512.417108][ T32] tipc: Failed to bind to 0,0,0 [ 512.417163][ T32] tipc: Node number set to 0 [ 512.417261][ T32] tipc: Failed to bind to 0,0,0 [ 512.486584][T15543] UDF-fs: INFO Mounting volume 'CDROM', timestamp 2022/11/22 15:59 (1000) [ 512.512435][ T32] tipc: Node number set to 0 [ 512.512653][ T32] tipc: Failed to bind to 0,0,0 [ 512.616099][T15550] program syz.3.3729 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 512.661346][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.820420][ T32] tipc: Node number set to 0 [ 512.820523][ T32] tipc: Failed to bind to 0,0,0 [ 512.820562][ T32] tipc: Node number set to 0 [ 512.820642][ T32] tipc: Failed to bind to 0,0,0 [ 512.962600][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.967315][T15556] loop5: detected capacity change from 0 to 512 [ 513.001104][ T974] tipc: Node number set to 0 [ 513.001240][ T974] tipc: Failed to bind to 0,0,0 [ 513.032466][T15556] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.3730: bad orphan inode 15 [ 513.032502][T15556] loop5: lost filesystem error report for type 5 error -117 [ 513.039927][T15556] ext4_test_bit(bit=14, block=18) = 1 [ 513.039989][T15556] is_bad_inode(inode)=0 [ 513.040010][T15556] NEXT_ORPHAN(inode)=1023 [ 513.040038][T15556] max_ino=32 [ 513.040059][T15556] i_nlink=0 [ 513.048487][T15556] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2933: inode #15: comm syz.5.3730: corrupted xattr block 19: invalid header [ 513.048573][T15556] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 513.052177][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 513.052237][ C0] EXT4-fs (loop5): initial error at time 1793631654: ext4_orphan_get:1430 [ 513.052303][ C0] EXT4-fs (loop5): last error at time 1793631654: ext4_orphan_get:1430 [ 513.066853][T15556] EXT4-fs warning (device loop5): ext4_evict_inode:355: xattr delete (err -117) [ 513.073800][ T974] tipc: Node number set to 0 [ 513.073916][ T974] tipc: Failed to bind to 0,0,0 [ 513.110140][T15556] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 513.115460][T15556] ext4 filesystem being mounted at /204/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 513.157665][ T33] kauditd_printk_skb: 11 callbacks suppressed [ 513.157685][ T33] audit: type=1800 audit(1793631654.329:1245): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15605 res=0 errno=-22 [ 513.212163][ T974] tipc: Node number set to 0 [ 513.212295][ T974] tipc: Failed to bind to 0,0,0 [ 513.350257][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.393777][ T974] tipc: Node number set to 0 [ 513.393913][ T974] tipc: Failed to bind to 0,0,0 [ 513.413684][ T33] audit: type=1800 audit(1793631654.589:1246): pid=6480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=229347 res=0 errno=-22 [ 513.415494][ T33] audit: type=1800 audit(1793631654.599:1247): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=229358 res=0 errno=-22 [ 513.492380][ T5771] tipc: Node number set to 0 [ 513.493818][ T5771] tipc: Failed to bind to 0,0,0 [ 513.507446][ T5652] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 513.518729][ T5652] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 513.521448][ T5652] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 513.538453][ T5652] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 513.539268][ T5652] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 513.579563][T15565] loop1: detected capacity change from 0 to 512 [ 513.596887][ T33] audit: type=1800 audit(1793631654.779:1248): pid=6480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=229377 res=0 errno=-22 [ 513.632157][ T5771] tipc: Node number set to 0 [ 513.632257][ T5771] tipc: Failed to bind to 0,0,0 [ 513.710004][ T33] audit: type=1800 audit(1793631654.889:1249): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15113 res=0 errno=-22 [ 513.747511][ T33] audit: type=1800 audit(1793631654.929:1250): pid=6480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=229395 res=0 errno=-22 [ 513.787946][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.891170][ T5771] tipc: Node number set to 0 [ 513.891290][ T5771] tipc: Failed to bind to 0,0,0 [ 513.919202][ T5771] tipc: Node number set to 0 [ 513.919324][ T5771] tipc: Failed to bind to 0,0,0 [ 514.053412][ T32] tipc: Node number set to 0 [ 514.053539][ T32] tipc: Failed to bind to 0,0,0 [ 514.085164][T15562] rxe_eth0 speed is unknown, defaulting to 1000 [ 514.161175][T15539] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 449: padding at end of block bitmap is not set [ 514.177413][T15565] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 514.177495][T15565] FAT-fs (loop1): Filesystem has been set read-only [ 514.194727][ T32] tipc: Node number set to 0 [ 514.194844][ T32] tipc: Failed to bind to 0,0,0 [ 514.368840][T12867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 514.392206][ T33] audit: type=1800 audit(1793631655.569:1251): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=230755 res=0 errno=-22 [ 514.422492][ T5771] tipc: Node number set to 0 [ 514.422609][ T5771] tipc: Failed to bind to 0,0,0 [ 514.426610][ T33] audit: type=1800 audit(1793631655.609:1252): pid=6480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=230760 res=0 errno=-22 [ 514.450566][T15575] loop2: detected capacity change from 0 to 256 [ 514.475324][ T33] audit: type=1800 audit(1793631655.649:1253): pid=6480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=230764 res=0 errno=-22 [ 514.514852][ T33] audit: type=1800 audit(1793631655.699:1254): pid=6480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=230763 res=0 errno=-22 [ 514.745460][ T5771] tipc: Node number set to 0 [ 514.745578][ T5771] tipc: Failed to bind to 0,0,0 [ 514.745639][ T5771] tipc: Node number set to 0 [ 514.745740][ T5771] tipc: Failed to bind to 0,0,0 [ 514.777147][ T5771] tipc: Node number set to 0 [ 514.777259][ T5771] tipc: Failed to bind to 0,0,0 [ 514.990498][ T5771] tipc: Node number set to 0 [ 514.990616][ T5771] tipc: Failed to bind to 0,0,0 [ 515.060603][ T5771] tipc: Node number set to 0 [ 515.060721][ T5771] tipc: Failed to bind to 0,0,0 [ 515.070901][T15583] netlink: 'syz.2.3742': attribute type 14 has an invalid length. [ 515.348247][ T48] bridge_slave_1: left allmulticast mode [ 515.348307][ T48] bridge_slave_1: left promiscuous mode [ 515.352148][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.457426][ T48] bridge_slave_0: left allmulticast mode [ 515.457458][ T48] bridge_slave_0: left promiscuous mode [ 515.516631][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.596487][T15581] loop5: detected capacity change from 0 to 32768 [ 515.621632][T15581] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3740 (15581) [ 515.658092][T15581] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 515.658129][T15581] BTRFS info (device loop5): using crc32c checksum algorithm [ 515.685144][ T4954] Bluetooth: hci0: command tx timeout [ 515.839000][T15581] BTRFS info (device loop5): enabling ssd optimizations [ 515.839032][T15581] BTRFS info (device loop5): turning on flush-on-commit [ 515.839051][T15581] BTRFS info (device loop5): enabling free space tree [ 515.839068][T15581] BTRFS info (device loop5): enabling auto defrag [ 515.839087][T15581] BTRFS info (device loop5): use lzo compression, level 1 [ 515.839110][T15581] BTRFS info (device loop5): max_inline set to 4096 [ 515.975600][T15608] loop3: detected capacity change from 0 to 64 [ 516.055787][T15589] loop2: detected capacity change from 0 to 40427 [ 516.087261][T15589] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 516.087292][T15589] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 516.131221][T15589] F2FS-fs (loop2): invalid crc value [ 516.630183][T15627] loop3: detected capacity change from 0 to 64 [ 516.672550][T15589] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 516.885961][T12867] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 516.904200][T15589] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 516.904231][T15589] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 516.971508][ T48] ip6gretap0 (unregistering): left promiscuous mode [ 517.753624][ T4954] Bluetooth: hci0: command tx timeout [ 517.899833][T15640] loop5: detected capacity change from 0 to 256 [ 517.989089][T15640] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 256) [ 518.079082][T15642] device-mapper: table: 248:7: crypt: Error decoding and setting key (-EINVAL) [ 518.079109][T15642] device-mapper: ioctl: error adding target to table [ 518.285284][ T33] kauditd_printk_skb: 24 callbacks suppressed [ 518.285305][ T33] audit: type=1800 audit(1793631659.469:1279): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=233292 res=0 errno=-22 [ 518.365755][ T33] audit: type=1800 audit(1793631659.549:1280): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=233308 res=0 errno=-22 [ 518.417627][ T33] audit: type=1800 audit(1793631659.599:1281): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=233322 res=0 errno=-22 [ 518.453152][ T974] asus 0005:0B05:8502.001A: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0 [ 518.611137][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.675125][T15648] fido_id[15648]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 518.684473][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.871781][ T48] bond0 (unregistering): (slave bond1): Releasing backup interface [ 518.895666][ T48] bond0 (unregistering): (slave bond2): Releasing backup interface [ 518.918841][ T48] bond0 (unregistering): Released all slaves [ 519.068738][ T48] bond1 (unregistering): Released all slaves [ 519.100190][T15653] loop2: detected capacity change from 0 to 1756 [ 519.147219][T15653] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 519.147245][T15653] UDF-fs: Scanning with blocksize 512 failed [ 519.176620][ T33] audit: type=1800 audit(1793631660.359:1282): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15236 res=0 errno=-22 [ 519.225144][ T48] bond2 (unregistering): Released all slaves [ 519.241799][T15657] overlayfs: missing 'lowerdir' [ 519.244150][T15653] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 519.244215][T15653] UDF-fs: Scanning with blocksize 1024 failed [ 519.304580][T15653] UDF-fs: INFO Mounting volume 'CDROM', timestamp 2022/11/22 15:59 (1000) [ 519.356715][ T5771] tipc: Node number set to 0 [ 519.356838][ T5771] tipc: Failed to bind to 0,0,0 [ 519.356890][ T5771] tipc: Node number set to 0 [ 519.356991][ T5771] tipc: Failed to bind to 0,0,0 [ 519.385496][T15562] syzkaller0 speed is unknown, defaulting to 1000 [ 519.388180][ T5298] 8021q: adding VLAN 0 to HW filter on device eth1 [ 519.388786][ T5771] tipc: Node number set to 0 [ 519.388895][ T5771] tipc: Failed to bind to 0,0,0 [ 519.531315][ T5771] tipc: Node number set to 0 [ 519.531438][ T5771] tipc: Failed to bind to 0,0,0 [ 519.534210][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 519.662672][ T5771] tipc: Node number set to 0 [ 519.662797][ T5771] tipc: Failed to bind to 0,0,0 [ 519.697020][ T10] usb 2-1: New USB device found: idVendor=046d, idProduct=c52b, bcdDevice=24.00 [ 519.701544][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.720923][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 519.720997][ T10] usb 2-1: Product: syz [ 519.721041][ T10] usb 2-1: Manufacturer: syz [ 519.746388][T15662] loop3: detected capacity change from 0 to 1024 [ 519.802627][ T5771] tipc: Node number set to 0 [ 519.802757][ T5771] tipc: Failed to bind to 0,0,0 [ 519.834347][ T4954] Bluetooth: hci0: command tx timeout [ 519.889341][ T33] audit: type=1800 audit(1793631661.069:1283): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15359 res=0 errno=-22 [ 519.926452][ T33] audit: type=1800 audit(1793631661.109:1284): pid=6387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=233918 res=0 errno=-22 [ 519.962876][ T5771] tipc: Node number set to 0 [ 519.962999][ T5771] tipc: Failed to bind to 0,0,0 [ 519.987403][ T33] audit: type=1800 audit(1793631661.169:1285): pid=6387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=233968 res=0 errno=-22 [ 520.021571][ T33] audit: type=1800 audit(1793631661.199:1286): pid=6387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=233925 res=0 errno=-22 [ 520.047864][ T33] audit: type=1800 audit(1793631661.229:1287): pid=6387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=233927 res=0 errno=-22 [ 520.092143][ T974] tipc: Node number set to 0 [ 520.092261][ T974] tipc: Failed to bind to 0,0,0 [ 520.188954][T15662] hfsplus: xattr search failed [ 520.234056][ T974] tipc: Node number set to 0 [ 520.234154][ T974] tipc: Failed to bind to 0,0,0 [ 520.235243][T15649] loop5: detected capacity change from 0 to 32768 [ 520.260108][T15649] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3756 (15649) [ 520.315394][T15649] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 520.315450][T15649] BTRFS info (device loop5): using sha256 checksum algorithm [ 520.427885][ T33] audit: type=1800 audit(1793631661.609:1288): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15605 res=0 errno=-22 [ 520.466844][ T48] tipc: Disabling bearer [ 520.467142][ T48] tipc: Left network mode [ 520.467190][ T974] tipc: Node number set to 0 [ 520.467294][ T974] tipc: Failed to bind to 0,0,0 [ 520.522187][ T974] tipc: Node number set to 0 [ 520.522305][ T974] tipc: Failed to bind to 0,0,0 [ 520.662143][ T974] tipc: Node number set to 0 [ 520.662289][ T974] tipc: Failed to bind to 0,0,0 [ 520.827751][T15649] BTRFS info (device loop5): enabling ssd optimizations [ 520.827782][T15649] BTRFS info (device loop5): turning on async discard [ 520.827800][T15649] BTRFS info (device loop5): enabling free space tree [ 520.831985][ T10] logitech-djreceiver 0003:046D:C52B.001B: hiddev0,hidraw0: USB HID v1.11 Device [syz syz] on usb-dummy_hcd.1-1/input0 [ 520.840080][ T10] logitech-djreceiver 0003:046D:C52B.001B: logi_dj_recv_send_report: unable to find dj report [ 520.840276][ T10] logitech-djreceiver 0003:046D:C52B.001B: logi_dj_recv_switch_to_dj_mode error:-19 [ 520.943671][ T10] usb 2-1: USB disconnect, device number 33 [ 521.089428][T15649] jffs2: notice: (15649) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 521.547967][T15700] fido_id[15700]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 521.621777][T12867] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 521.633774][ T974] tipc: Node number set to 0 [ 521.633887][ T974] tipc: Failed to bind to 0,0,0 [ 521.633951][ T974] tipc: Node number set to 0 [ 521.634043][ T974] tipc: Failed to bind to 0,0,0 [ 521.781216][ T974] tipc: Node number set to 0 [ 521.781345][ T974] tipc: Failed to bind to 0,0,0 [ 521.913530][ T4954] Bluetooth: hci0: command tx timeout [ 522.147894][T15705] i2c i2c-0: new_device: Instantiated device anx7411 at 0x2c [ 522.535162][ T974] tipc: Node number set to 0 [ 522.535282][ T974] tipc: Failed to bind to 0,0,0 [ 522.535342][ T974] tipc: Node number set to 0 [ 522.535441][ T974] tipc: Failed to bind to 0,0,0 [ 522.739507][T15716] loop3: detected capacity change from 0 to 16 [ 522.764332][T15716] erofs (device loop3): mounted with root inode @ nid 36. [ 522.955807][ T5298] 8021q: adding VLAN 0 to HW filter on device eth2 [ 522.987359][ T974] tipc: Node number set to 0 [ 522.987475][ T974] tipc: Failed to bind to 0,0,0 [ 522.987527][ T974] tipc: Node number set to 0 [ 522.987620][ T974] tipc: Failed to bind to 0,0,0 [ 523.080090][ T974] tipc: Node number set to 0 [ 523.080207][ T974] tipc: Failed to bind to 0,0,0 [ 523.192611][ T5771] tipc: Node number set to 0 [ 523.192716][ T5771] tipc: Failed to bind to 0,0,0 [ 523.319829][ T33] kauditd_printk_skb: 12 callbacks suppressed [ 523.319848][ T33] audit: type=1800 audit(1793631664.499:1301): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=237500 res=0 errno=-22 [ 523.364913][ T33] audit: type=1800 audit(1793631664.549:1302): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=237512 res=0 errno=-22 [ 523.393777][ T974] tipc: Node number set to 0 [ 523.394782][ T974] tipc: Failed to bind to 0,0,0 [ 523.593172][ T974] tipc: Node number set to 0 [ 523.593292][ T974] tipc: Failed to bind to 0,0,0 [ 523.612934][ T5771] tipc: Node number set to 0 [ 523.613052][ T5771] tipc: Failed to bind to 0,0,0 [ 523.882370][ T5771] tipc: Node number set to 0 [ 523.885136][ T5771] tipc: Failed to bind to 0,0,0 [ 523.934229][T15745] loop5: detected capacity change from 0 to 16 [ 523.939345][T15745] erofs (device loop5): mounted with root inode @ nid 36. [ 524.068852][ T33] audit: type=1800 audit(1793631665.249:1303): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15605 res=0 errno=-22 [ 524.275979][ T5771] tipc: Node number set to 0 [ 524.276103][ T5771] tipc: Failed to bind to 0,0,0 [ 524.276145][ T5771] tipc: Node number set to 0 [ 524.276245][ T5771] tipc: Failed to bind to 0,0,0 [ 524.417577][ T5771] tipc: Node number set to 0 [ 524.417695][ T5771] tipc: Failed to bind to 0,0,0 [ 524.504914][ T33] audit: type=1800 audit(1793631665.689:1304): pid=15759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3782" name="new_device" dev="sysfs" ino=44074 res=0 errno=-13 [ 524.572454][ T5771] tipc: Node number set to 0 [ 524.572571][ T5771] tipc: Failed to bind to 0,0,0 [ 524.627971][ T33] audit: type=1800 audit(1793631665.809:1305): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=238244 res=0 errno=-22 [ 524.670913][ T33] audit: type=1800 audit(1793631665.849:1306): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=238246 res=0 errno=-22 [ 524.730687][ T5771] tipc: Node number set to 0 [ 524.730807][ T5771] tipc: Failed to bind to 0,0,0 [ 524.732726][ T5771] tipc: Node number set to 0 [ 524.734770][ T5771] tipc: Failed to bind to 0,0,0 [ 524.739884][T15767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3787'. [ 524.913399][T15759] fsa4480 0-0042: error -ENODEV: FSA4480 not found [ 524.913961][T15759] i2c i2c-0: new_device: Instantiated device fsa4480 at 0x42 [ 524.974449][ T5771] tipc: Node number set to 0 [ 524.974578][ T5771] tipc: Failed to bind to 0,0,0 [ 524.976297][ T5298] 8021q: adding VLAN 0 to HW filter on device eth3 [ 525.117162][T15775] xt_hashlimit: size too large, truncated to 1048576 [ 525.135824][ T974] tipc: Node number set to 0 [ 525.135935][ T974] tipc: Failed to bind to 0,0,0 [ 525.181302][T15781] xt_hashlimit: size too large, truncated to 1048576 [ 525.321625][ T974] tipc: Node number set to 0 [ 525.321749][ T974] tipc: Failed to bind to 0,0,0 [ 525.321807][ T974] tipc: Node number set to 0 [ 525.321908][ T974] tipc: Failed to bind to 0,0,0 [ 525.359302][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 525.459250][ T32] tipc: Node number set to 0 [ 525.459354][ T32] tipc: Failed to bind to 0,0,0 [ 525.499505][T15787] loop5: detected capacity change from 0 to 512 [ 525.532425][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 525.568600][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 525.568668][ T10] usb 3-1: New USB device found: idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 525.575777][ T10] usb 3-1: config 4 interface 0 has no altsetting 0 [ 525.622746][ T10] usb 3-1: string descriptor 0 read error: -22 [ 525.623310][ T10] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 525.658246][ T33] audit: type=1800 audit(1793631666.839:1307): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15605 res=0 errno=-22 [ 525.683923][ T974] tipc: Node number set to 0 [ 525.684045][ T974] tipc: Failed to bind to 0,0,0 [ 525.705026][T15562] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.705227][T15562] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.705418][T15562] bridge_slave_0: entered allmulticast mode [ 525.708845][ T33] audit: type=1800 audit(1793631666.889:1308): pid=6480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=239305 res=0 errno=-22 [ 525.770442][ T33] audit: type=1800 audit(1793631666.949:1309): pid=6480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=239334 res=0 errno=-22 [ 525.800366][T15562] bridge_slave_0: entered promiscuous mode [ 525.810064][ T33] audit: type=1800 audit(1793631666.989:1310): pid=6480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=239312 res=0 errno=-22 [ 525.834203][ T32] tipc: Node number set to 0 [ 525.834320][ T32] tipc: Failed to bind to 0,0,0 [ 525.851224][T15562] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.851595][T15562] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.867967][T15562] bridge_slave_1: entered allmulticast mode [ 525.894002][T15562] bridge_slave_1: entered promiscuous mode [ 525.946063][ T10] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 526.087440][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 526.096284][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 526.096484][ T10] usb 3-1: media controller created [ 526.205188][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 526.246374][ T974] tipc: Node number set to 0 [ 526.246509][ T974] tipc: Failed to bind to 0,0,0 [ 526.246565][ T974] tipc: Node number set to 0 [ 526.247094][ T974] tipc: Failed to bind to 0,0,0 [ 526.274169][ T32] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 526.347030][T15797] loop5: detected capacity change from 0 to 16 [ 526.347768][T15797] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 526.404718][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 526.444224][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 526.450203][ T32] usb 4-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 526.460557][ T32] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.460613][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 526.460653][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 526.460678][ T32] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 526.460705][ T32] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 526.461815][ T32] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 526.461841][ T32] usb 4-1: Manufacturer: syz [ 526.534684][ T32] usb 4-1: config 0 descriptor?? [ 526.537307][ T5651] udevd[5651]: incorrect cramfs checksum on /dev/loop5 [ 526.604637][ T974] tipc: Node number set to 0 [ 526.604783][ T974] tipc: Failed to bind to 0,0,0 [ 526.604853][ T974] tipc: Node number set to 0 [ 526.604953][ T974] tipc: Failed to bind to 0,0,0 [ 526.685418][T15562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.726591][T15562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.747177][ T32] rc_core: Couldn't load IR keymap rc-hauppauge [ 526.747195][ T32] Registered IR keymap rc-empty [ 526.747479][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 526.773408][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 526.790293][ T6480] udevd[6480]: incorrect cramfs checksum on /dev/loop5 [ 526.795209][ T32] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 526.839669][ T32] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input60 [ 526.884952][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 526.902309][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 526.919361][ T10] usb 3-1: USB disconnect, device number 24 [ 526.925660][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 526.943403][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 526.951185][ T27] tipc: Node number set to 0 [ 526.951375][ T27] tipc: Failed to bind to 0,0,0 [ 526.964401][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 526.985894][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 527.002300][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 527.022293][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 527.042157][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 527.062201][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 527.082193][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 527.119920][ T32] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 527.119975][ T32] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 527.218567][ T27] tipc: Node number set to 0 [ 527.218717][ T27] tipc: Failed to bind to 0,0,0 [ 527.218770][ T27] tipc: Node number set to 0 [ 527.218913][ T27] tipc: Failed to bind to 0,0,0 [ 527.260470][ T48] batadv0: left promiscuous mode [ 527.272195][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 527.339001][ T48] hsr_slave_0: left promiscuous mode [ 527.356183][ T48] hsr_slave_1: left promiscuous mode [ 527.357322][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.357400][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.359740][ T5749] usb 4-1: USB disconnect, device number 32 [ 527.401141][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.401166][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.470826][ T48] veth1_macvtap: left promiscuous mode [ 527.470895][ T48] veth0_macvtap: left promiscuous mode [ 527.471002][ T48] veth1_vlan: left promiscuous mode [ 527.656160][T15813] loop2: detected capacity change from 0 to 64 [ 527.778039][T15817] loop1: detected capacity change from 0 to 512 [ 527.794170][T15817] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 527.794193][T15817] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 527.841269][T15817] EXT4-fs (loop1): 1 truncate cleaned up [ 527.856813][T15817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 527.925951][T15817] EXT4-fs error (device loop1): ext4_generic_delete_entry:2675: inode #2: block 13: comm syz.1.3802: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 527.927005][T15817] EXT4-fs (loop1): Remounting filesystem read-only [ 527.927029][T15817] EXT4-fs warning (device loop1): ext4_rename_delete:3742: inode #2: comm syz.1.3802: Deleting old file: nlink 5, error=-117 [ 527.983085][ T974] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 528.133217][ T974] usb 6-1: not running at top speed; connect to a high speed hub [ 528.133258][ T974] usb 6-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00 [ 528.136434][ T974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.136463][ T974] usb 6-1: Product: syz [ 528.136488][ T974] usb 6-1: Manufacturer: syz [ 528.136505][ T974] usb 6-1: SerialNumber: syz [ 528.194510][ T974] keyspan 6-1:1.0: Keyspan 4 port adapter converter detected [ 528.236054][ T5647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.246803][ T974] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 528.300094][ T974] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 528.344823][ C1] usb 6-1: malformed indat packet [ 528.345109][ C1] usb 6-1: malformed indat packet [ 528.345367][ C1] usb 6-1: malformed indat packet [ 528.345624][ C1] usb 6-1: malformed indat packet [ 528.345915][ C1] usb 6-1: malformed indat packet [ 528.346171][ C1] usb 6-1: malformed indat packet [ 528.346475][ C1] usb 6-1: malformed indat packet [ 528.346752][ C1] usb 6-1: malformed indat packet [ 528.394138][ T974] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 528.426661][ T974] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 528.453624][ T33] kauditd_printk_skb: 32 callbacks suppressed [ 528.453645][ T33] audit: type=1800 audit(1793631669.639:1343): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=240526 res=0 errno=-22 [ 528.454496][ T33] audit: type=1800 audit(1793631669.639:1344): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=240527 res=0 errno=-22 [ 528.494158][ T33] audit: type=1800 audit(1793631669.649:1345): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=240506 res=0 errno=-22 [ 528.494320][ T33] audit: type=1800 audit(1793631669.669:1346): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=240528 res=0 errno=-22 [ 528.561167][ T974] usb 6-1: USB disconnect, device number 9 [ 528.599073][ T974] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 528.648035][ T974] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 528.687533][ T974] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 528.707068][ T974] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 528.708145][T15836] loop1: detected capacity change from 0 to 256 [ 528.729117][ T974] keyspan 6-1:1.0: device disconnected [ 528.828636][ T33] audit: type=1800 audit(1793631670.009:1347): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15113 res=0 errno=-22 [ 528.857829][T15836] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 528.929908][T15836] exFAT-fs (loop1): start_clu is invalid cluster(0xffffffff) [ 578.472221][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 637.081976][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 637.096470][ C1] rcu: 0-...!: (1 GPs behind) idle=045c/1/0x4000000000000000 softirq=78217/78217 fqs=3 [ 637.106241][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15836/1:b..l.. [ 637.116780][ C1] rcu: (detected by 1, t=10502 jiffies, g=99777, q=1254 ncpus=2) [ 637.124632][ C1] Sending NMI from CPU 1 to CPUs 0: [ 637.129874][ C0] NMI backtrace for cpu 0 [ 637.129896][ C0] CPU: 0 UID: 0 PID: 12564 Comm: syz.4.2529 Tainted: G L syzkaller #0 PREEMPT(full) [ 637.129923][ C0] Tainted: [L]=SOFTLOCKUP [ 637.129930][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 637.129942][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x2e/0x80 [ 637.129975][ C0] Code: 48 8b 04 24 65 48 8b 0d a8 3b 18 13 65 48 8b 15 a8 3b 18 13 f7 c2 00 01 00 ff 74 29 89 d6 81 e6 00 01 00 0f 81 fe 00 01 00 00 <40> 0f 95 c6 81 fa 00 00 00 10 0f 93 c2 40 08 f2 75 35 83 b9 44 17 [ 637.129992][ C0] RSP: 0018:ffffc90000007d38 EFLAGS: 00000006 [ 637.130009][ C0] RAX: ffffffff8c008ec4 RBX: ffff8880b8228898 RCX: ffff88801f7c3e80 [ 637.130023][ C0] RDX: 8000000001000201 RSI: 0000000001000000 RDI: ffff8880b8228898 [ 637.130038][ C0] RBP: dffffc0000000000 R08: 0000000001000001 R09: 1ffffffff237bf57 [ 637.130052][ C0] R10: dffffc0000000000 R11: fffffbfff237bf58 R12: 1ffff11017045108 [ 637.130067][ C0] R13: ffff88807efc3300 R14: 0000000000000000 R15: ffff8880b8228644 [ 637.130080][ C0] FS: 00007fb7940e16c0(0000) GS:ffff88812340b000(0000) knlGS:0000000000000000 [ 637.130097][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 637.130110][ C0] CR2: 0000200000006680 CR3: 0000000056276000 CR4: 00000000003526f0 [ 637.130127][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 637.130138][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 637.130151][ C0] Call Trace: [ 637.130160][ C0] [ 637.130168][ C0] timerqueue_linked_add+0x174/0x2e0 [ 637.130191][ C0] ? trace_hrtimer_start+0x82/0x200 [ 637.130216][ C0] enqueue_hrtimer+0x18e/0x2c0 [ 637.130241][ C0] __hrtimer_run_queues+0x4ce/0xa10 [ 637.130271][ C0] hrtimer_interrupt+0x4cd/0xaa0 [ 637.130308][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 637.130336][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 637.130361][ C0] [ 637.130381][ C0] [ 637.130389][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 637.130411][ C0] RIP: 0010:sha256_transform_rorx+0xcd5/0x1110 [ 637.130537][ C0] Code: 10 02 00 00 48 8b b4 24 08 02 00 00 03 07 89 07 03 5f 04 89 5f 04 03 4f 08 89 4f 08 44 03 47 0c 44 89 47 0c 03 57 10 89 57 10 <44> 03 4f 14 44 89 4f 14 44 03 57 18 44 89 57 18 44 03 5f 1c 44 89 [ 637.130553][ C0] RSP: 0018:ffffc90002ebeec0 EFLAGS: 00000296 [ 637.130570][ C0] RAX: 000000009ba3e414 RBX: 000000004dff0dfa RCX: 000000000a3ed444 [ 637.130583][ C0] RDX: 00000000b30aafed RSI: ffff888034b54a40 RDI: ffffc90002ebf208 [ 637.130597][ C0] RBP: ffffc90002ebf118 R08: 00000000b1f8ad58 R09: 00000000edb8f755 [ 637.130610][ C0] R10: 000000006e3163bc R11: 0000000053c51dcc R12: 0000000039026030 [ 637.130623][ C0] R13: 000000006170fe35 R14: 00000000d123d724 R15: 00000000dfe669d1 [ 637.130679][ C0] sha256_blocks_avx2+0x3d/0x60 [ 637.130708][ C0] __sha256_update+0xef/0x150 [ 637.130736][ C0] crypto_sha256_update+0x27/0x40 [ 637.130817][ C0] ima_calc_file_hash+0x48b/0x890 [ 637.130891][ C0] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 637.130935][ C0] ? generic_fillattr+0x490/0x840 [ 637.130962][ C0] ima_collect_measurement+0x51b/0xa00 [ 637.130994][ C0] ? __pfx_ima_collect_measurement+0x10/0x10 [ 637.131025][ C0] ? trace_contention_end+0x3d/0x140 [ 637.131070][ C0] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 637.131097][ C0] process_measurement+0x1272/0x1c10 [ 637.131130][ C0] ? __pfx_process_measurement+0x10/0x10 [ 637.131172][ C0] ? rcu_is_watching+0x16/0xb0 [ 637.131202][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 637.131231][ C0] ? __kmalloc_cache_noprof+0x148/0x600 [ 637.131255][ C0] ? open_kcore+0xa1/0x1c0 [ 637.131331][ C0] ima_file_check+0xdc/0x130 [ 637.131354][ C0] ? do_dentry_open+0xcf9/0x1360 [ 637.131403][ C0] ? __pfx_ima_file_check+0x10/0x10 [ 637.131431][ C0] security_file_post_open+0xb3/0x260 [ 637.131480][ C0] path_openat+0x1748/0x20f0 [ 637.131559][ C0] do_file_open+0x23e/0x4a0 [ 637.131590][ C0] ? __pfx_do_file_open+0x10/0x10 [ 637.131628][ C0] ? _raw_spin_unlock+0x28/0x50 [ 637.131672][ C0] ? alloc_fd+0x6af/0x760 [ 637.131723][ C0] do_sys_openat2+0x115/0x200 [ 637.131745][ C0] ? __se_sys_futex+0x3a8/0x450 [ 637.131765][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 637.131791][ C0] ? rcu_is_watching+0x16/0xb0 [ 637.131822][ C0] __x64_sys_openat+0x138/0x170 [ 637.131848][ C0] do_syscall_64+0x166/0x520 [ 637.131874][ C0] ? trace_irq_disable+0x3b/0x140 [ 637.131902][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.131922][ C0] ? clear_bhb_loop+0x70/0xc0 [ 637.131945][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.131964][ C0] RIP: 0033:0x7fb79319fb19 [ 637.131984][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.132002][ C0] RSP: 002b:00007fb7940e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 637.132021][ C0] RAX: ffffffffffffffda RBX: 00007fb793425fa0 RCX: 00007fb79319fb19 [ 637.132036][ C0] RDX: 0000000000000000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 637.132051][ C0] RBP: 00007fb793237b70 R08: 0000000000000000 R09: 0000000000000000 [ 637.132064][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 637.132076][ C0] R13: 00007fb793426038 R14: 00007fb793425fa0 R15: 00007ffd2609c2c8 [ 637.132100][ C0] [ 637.653365][ C1] task:syz.1.3809 state:R running task stack:25096 pid:15836 tgid:15834 ppid:5647 task_flags:0x400140 flags:0x00080000 [ 637.666922][ C1] Call Trace: [ 637.670245][ C1] [ 637.673214][ C1] __schedule+0x17dd/0x5830 [ 637.677779][ C1] ? lock_acquire+0x115/0x350 [ 637.682537][ C1] ? __lock_acquire+0x747/0x2de0 [ 637.687513][ C1] ? __pfx___schedule+0x10/0x10 [ 637.692411][ C1] ? __lock_acquire+0x747/0x2de0 [ 637.697412][ C1] preempt_schedule_irq+0x4b/0x90 [ 637.702501][ C1] irqentry_exit+0x14f/0x9b0 [ 637.707140][ C1] ? trace_irq_disable+0x3b/0x140 [ 637.712223][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 637.718244][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 637.723579][ C1] Code: ff ff ff e8 d0 aa 60 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 d2 34 3d 13 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d c7 19 1d [ 637.743242][ C1] RSP: 0018:ffffc9000649f068 EFLAGS: 00000282 [ 637.749350][ C1] RAX: 282a42ad8e4f7600 RBX: 0000000000000000 RCX: 0000000000000046 [ 637.757374][ C1] RDX: 000000007cceec59 RSI: ffffffff8e9347d2 RDI: ffffffff8c8ea380 [ 637.765376][ C1] RBP: ffff888052ddddc0 R08: ffffffff8178798f R09: 0000000000000000 [ 637.773397][ C1] R10: ffffc9000649f1a8 R11: fffff52000c93e41 R12: ffffffff9015a420 [ 637.781423][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 637.789434][ C1] ? unwind_next_frame+0x8f/0x2550 [ 637.794599][ C1] ? __unwind_start+0xed/0x660 [ 637.799407][ C1] ? unwind_next_frame+0x8f/0x2550 [ 637.804560][ C1] unwind_next_frame+0xac/0x2550 [ 637.809540][ C1] ? unwind_next_frame+0x8f/0x2550 [ 637.814697][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 637.820027][ C1] ? get_stack_info_noinstr+0x19/0x130 [ 637.825535][ C1] __unwind_start+0x514/0x660 [ 637.830258][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 637.836453][ C1] arch_stack_walk+0xe3/0x150 [ 637.841200][ C1] ? __unwind_start+0xed/0x660 [ 637.846022][ C1] stack_trace_save+0xa9/0x100 [ 637.850834][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 637.856256][ C1] save_stack+0x122/0x230 [ 637.860656][ C1] ? __pfx_save_stack+0x10/0x10 [ 637.865552][ C1] ? __lock_acquire+0x747/0x2de0 [ 637.870583][ C1] __set_page_owner+0x8d/0x4c0 [ 637.875396][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 637.880841][ C1] ? seqcount_lockdep_reader_access+0x89/0xc0 [ 637.886939][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 637.892183][ C1] post_alloc_hook+0x1f9/0x250 [ 637.897021][ C1] get_page_from_freelist+0x220f/0x2280 [ 637.902619][ C1] ? lock_acquire+0x115/0x350 [ 637.907368][ C1] __alloc_frozen_pages_noprof+0x1fe/0x410 [ 637.913220][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 637.919617][ C1] ? policy_nodemask+0x31b/0x980 [ 637.924606][ C1] alloc_pages_mpol+0x21e/0x390 [ 637.929505][ C1] folio_alloc_mpol_noprof+0x39/0x160 [ 637.934927][ C1] shmem_alloc_and_add_folio+0x43e/0xf60 [ 637.940603][ C1] ? filemap_get_entry+0xcd/0x3f0 [ 637.945701][ C1] ? __pfx_filemap_get_entry+0x10/0x10 [ 637.951195][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 637.957395][ C1] ? copy_folio_from_iter_atomic+0x19c6/0x1a80 [ 637.963689][ C1] shmem_get_folio_gfp+0x594/0x1330 [ 637.968946][ C1] shmem_write_begin+0x16c/0x330 [ 637.973926][ C1] generic_perform_write+0x2d5/0x8e0 [ 637.979262][ C1] ? __pfx_generic_perform_write+0x10/0x10 [ 637.985111][ C1] ? preempt_count_add+0x6a/0x140 [ 637.990257][ C1] ? mnt_put_write_access_file+0xbc/0x100 [ 637.996098][ C1] ? file_update_time_flags+0x3ab/0x440 [ 638.001733][ C1] shmem_file_write_iter+0xf8/0x120 [ 638.006984][ C1] vfs_write+0x612/0xba0 [ 638.011280][ C1] ? __pfx_vfs_write+0x10/0x10 [ 638.016098][ C1] ? __fget_files+0x3a2/0x420 [ 638.020821][ C1] ? __fget_files+0x2a/0x420 [ 638.025458][ C1] ? fdget+0x1ac/0x250 [ 638.029566][ C1] ksys_write+0x150/0x270 [ 638.033938][ C1] ? __pfx_ksys_write+0x10/0x10 [ 638.038846][ C1] do_syscall_64+0x166/0x520 [ 638.043474][ C1] ? trace_irq_disable+0x3b/0x140 [ 638.048541][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.054691][ C1] ? clear_bhb_loop+0x70/0xc0 [ 638.059431][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.065359][ C1] RIP: 0033:0x7eff9cb6034e [ 638.069809][ C1] RSP: 002b:00007eff9db3bda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 638.078250][ C1] RAX: ffffffffffffffda RBX: 00007eff9db3c6c0 RCX: 00007eff9cb6034e [ 638.086270][ C1] RDX: 0000000001000000 RSI: 00007eff92800000 RDI: 0000000000000004 [ 638.094270][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 638.102268][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 638.110272][ C1] R13: 00007eff9db3bee0 R14: 00007eff9db3bea0 R15: 00007eff92800000 [ 638.118300][ C1] [ 638.121361][ C1] rcu: rcu_preempt kthread starved for 10403 jiffies! g99777 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 638.132430][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 638.142419][ C1] rcu: RCU grace-period kthread stack dump: [ 638.148327][ C1] task:rcu_preempt state:R running task stack:26848 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 638.161874][ C1] Call Trace: [ 638.165184][ C1] [ 638.168248][ C1] __schedule+0x17dd/0x5830 [ 638.172796][ C1] ? __lock_acquire+0x747/0x2de0 [ 638.177786][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 638.182938][ C1] ? __pfx___schedule+0x10/0x10 [ 638.187830][ C1] ? lock_acquire+0x115/0x350 [ 638.192559][ C1] ? schedule+0x90/0x2b0 [ 638.196846][ C1] schedule+0x164/0x2b0 [ 638.201043][ C1] schedule_timeout+0x152/0x2c0 [ 638.205930][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 638.211341][ C1] ? __pfx_process_timeout+0x10/0x10 [ 638.216849][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 638.222694][ C1] ? prepare_to_swait_event+0x220/0x3e0 [ 638.228281][ C1] ? prepare_to_swait_event+0x35e/0x3e0 [ 638.233881][ C1] rcu_gp_fqs_loop+0x30c/0x1230 [ 638.238783][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 638.245001][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 638.250411][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 638.255680][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 638.261541][ C1] rcu_gp_kthread+0x9c/0x340 [ 638.266187][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 638.271451][ C1] ? __kthread_parkme+0x71/0x1f0 [ 638.276427][ C1] ? __kthread_parkme+0x199/0x1f0 [ 638.281495][ C1] kthread+0x38b/0x480 [ 638.285607][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 638.290847][ C1] ? __pfx_kthread+0x10/0x10 [ 638.295482][ C1] ret_from_fork+0x514/0xb70 [ 638.300121][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 638.305313][ C1] ? __switch_to+0xc78/0x1410 [ 638.310054][ C1] ? __pfx_kthread+0x10/0x10 [ 638.314679][ C1] ret_from_fork_asm+0x1a/0x30 [ 638.319504][ C1] [ 638.322547][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 638.328900][ C1] CPU: 1 UID: 0 PID: 12867 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 638.340040][ C1] Tainted: [L]=SOFTLOCKUP [ 638.344384][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 638.354482][ C1] RIP: 0010:smp_call_function_many_cond+0x61e/0x1500 [ 638.361200][ C1] Code: b6 04 04 84 c0 0f 85 d5 03 00 00 44 8b 3b 44 89 fe 83 e6 01 31 ff e8 21 7a 0c 00 41 83 e7 01 75 07 e8 06 75 0c 00 eb 3f f3 90 <48> b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 75 0f f7 03 01 [ 638.380834][ C1] RSP: 0018:ffffc9000de2f420 EFLAGS: 00000293 [ 638.386935][ C1] RAX: ffffffff81bc9f6e RBX: ffff8880b8244328 RCX: ffff88807f313e80 [ 638.394934][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 638.402935][ C1] RBP: ffffc9000de2f570 R08: ffff88807f31541f R09: 1ffff1100fe62a83 [ 638.410944][ C1] R10: dffffc0000000000 R11: 0000000000000000 R12: 1ffff11017048865 [ 638.418986][ C1] R13: 0000000000000000 R14: ffff8880b8244320 R15: 0000000000000001 [ 638.427017][ C1] FS: 0000555575363500(0000) GS:ffff88812350b000(0000) knlGS:0000000000000000 [ 638.435990][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 638.442607][ C1] CR2: 00007eff9cbed200 CR3: 000000005116a000 CR4: 00000000003526f0 [ 638.450609][ C1] Call Trace: [ 638.453918][ C1] [ 638.456904][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 638.462148][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 638.468549][ C1] ? rcu_is_watching+0x16/0xb0 [ 638.473364][ C1] ? trace_tlb_flush+0x3c/0x160 [ 638.478255][ C1] flush_tlb_mm_range+0x910/0x10b0 [ 638.483397][ C1] ? ldt_dup_context+0x336/0x3e0 [ 638.488387][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 638.493959][ C1] ? mas_next_slot+0xc98/0xd70 [ 638.498789][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 638.504825][ C1] ? dup_mmap+0x17c4/0x1e10 [ 638.509367][ C1] ? up_write+0x19d/0x4a0 [ 638.513737][ C1] dup_mmap+0x17dd/0x1e10 [ 638.518122][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 638.522837][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 638.527908][ C1] ? lock_acquire+0x115/0x350 [ 638.532644][ C1] copy_mm+0x115/0x470 [ 638.536760][ C1] copy_process+0x1ecc/0x4510 [ 638.541485][ C1] ? __lock_acquire+0x747/0x2de0 [ 638.546506][ C1] ? copy_process+0xd17/0x4510 [ 638.551333][ C1] ? __pfx_copy_process+0x10/0x10 [ 638.556413][ C1] kernel_clone+0x2d7/0x940 [ 638.560970][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 638.566082][ C1] __x64_sys_clone+0x1b6/0x230 [ 638.570902][ C1] ? __might_fault+0xaf/0x130 [ 638.575620][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 638.580990][ C1] ? do_user_addr_fault+0xd3f/0x1480 [ 638.586327][ C1] do_syscall_64+0x166/0x520 [ 638.590974][ C1] ? trace_irq_disable+0x3b/0x140 [ 638.596037][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.602135][ C1] ? clear_bhb_loop+0x70/0xc0 [ 638.606849][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.612767][ C1] RIP: 0033:0x7fced85c8592 [ 638.617223][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 638.637049][ C1] RSP: 002b:00007ffedc09a720 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 638.645507][ C1] RAX: ffffffffffffffda RBX: 00007ffedc09a720 RCX: 00007fced85c8592 [ 638.653514][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 638.661532][ C1] RBP: 00007ffedc09a8ac R08: 0000000000000000 R09: 0000000000000001 [ 638.669543][ C1] R10: 00005555753637d0 R11: 0000000000000246 R12: 0000000000000001 [ 638.677544][ C1] R13: 00000000000927c0 R14: 0000000000081220 R15: 00007ffedc09a900 [ 638.685568][ C1]