last executing test programs: 1m21.205465636s ago: executing program 4 (id=517): r0 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bond0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r1, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) 1m21.096747552s ago: executing program 4 (id=518): close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x80}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1m20.994290163s ago: executing program 4 (id=520): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./security\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./security\x00', &(0x7f00000008c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000940)="04080076657273696f6e00020500000004080070726f66696c6500070504002f2f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000004", 0x52) 1m20.65994558s ago: executing program 4 (id=527): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, 0x0, 0x2000007ff) 1m20.305752868s ago: executing program 4 (id=530): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r1, 0x7}, &(0x7f0000000100)=0x8) 1m19.585865872s ago: executing program 4 (id=534): r0 = socket$igmp(0x2, 0x3, 0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x10000}}, {@noinit_itable}, {@nombcache}, {@dioread_lock}, {@errors_remount}, {@nodiscard}, {@block_validity}]}, 0x5, 0x4bf, &(0x7f0000000a00)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f00000000c0)={0x2f, @dev={0xac, 0x14, 0x14, 0x3c}, 0x4e22, 0x2, 'lblcr\x00', 0x28, 0xb45, 0x1e}, 0x2c) 1m18.9481981s ago: executing program 32 (id=534): r0 = socket$igmp(0x2, 0x3, 0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x10000}}, {@noinit_itable}, {@nombcache}, {@dioread_lock}, {@errors_remount}, {@nodiscard}, {@block_validity}]}, 0x5, 0x4bf, &(0x7f0000000a00)="$eJzs3c9vG1kdAPDvTJImm81usrASPwRsWRYKqtZO3N1otaflAkKrlRArThzakLhRFDuOYqc0oYf0f0CiEif4EzggcUDqiTs3uCGkckAqUIEaJA5GM56kaWqnEU08Vfz5SE8zb57t73tt573pt41fACPrckTsRcSliLgREbPF9aQo8VGvZK97/OjO8v6jO8tJdLuf/iPJ27NrceQ9mVeLz5yKiB98N+LHybNx2zu760uNRn2rqFc7zc1qe2f3L2vNpdX6an2jVltcWJz/4Nr7tTMb61vNXz/8ztrHP/zdb7/84A973/pp1q2Zou3oOM5Sb+gTh3Ey4xHx8XkEK8FYMZ5LZXeE/0saEZ+JiLez+79bdm8AgGHodmejO3u0DgBcdGmeA0vSSpELmIk0rVR6Obw3YzpttNqdqzdb2xsrvVzZXEykN9ca9fkiVzgXE0lWX8jPn9Rrx+rXIuKNiPjZ5Ct5vbLcaqyU+eADACPs1WPr/78ne+s/AHDBTZXdAQBg6Kz/ADB6rP8AMHqs/wAweqz/ADB6rP8AMHqs/wAwUr7/ySdZ6e4X33+9cmtne711692Venu90txeriy3tjYrq63Wav6dPc3nfV6j1dpceC+2b1c79Xan2t7Zvd5sbW90ruff6329PjGUUQEAJ3njrft/SiJi78NX8hJH9nKwVsPFlpbdAaA0Y2V3ACjNeNkdAErj7/hAny16nzLwvwjdG/gWUwu85K58Qf4fRpX8P4wu+X8YXfL/MLq63cSe/wAwYuT4gXP4938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC48GbykqSVYi/wmUjTSiXitYiYi4nk5lqjPh8Rr0fEHycnJrP6QtmdBgBeUPq3pNj/68rsOzPHWy8l/5nMjxHxk198+vPbS53O1kJ2/Z+H1zv3iuu1EwPZahAASnKwTh+s4wceP7qzfFCG2Z+H3+5tLprF3S9Kr2U8xvPjVP7gMP2vpKj3ZM8rY2cQf+9uRHy+3/iTPDcyV+x8ejx+Fvu1ocZPn4qf5m29Y/Zr8dkz6AuMmvvZ/PNRv/svjcv5sf/9P5XPUC/uYP7bf2b+Sw/nv7EB89/l08Z47/ffG9h2N+KL4/3iJ4fxkwHx3zll/D9/6StvD2rr/jLiSvSPfzRWtdPcrLZ3dt9day6t1lfrG7Xa4sLi/AfX3q9V8xx19SBT/ay/f3j19ZPGPz0g/tRzxv/1U47/V/+98aOvnhD/m1/r//v/5gnxszXxG6eMvzT9m4Hbd2fxV/qPv3jP4PFfPWX8B3/dXTnlSwGAIWjv7K4vNRr1LSdDO8me3V6Cbjgp7ST7E3AWn/O5c+xq2TMTcN6e3PRl9wQAAAAAAAAAAAAAABhkGD/wVPYYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+FwAA//+vctdr") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f00000000c0)={0x2f, @dev={0xac, 0x14, 0x14, 0x3c}, 0x4e22, 0x2, 'lblcr\x00', 0x28, 0xb45, 0x1e}, 0x2c) 4.192154953s ago: executing program 5 (id=1401): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffceb}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback=r0, r0, 0x2f}, 0x20) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@fallback=r0, r1, 0x2f, 0x18, 0x4, @void, @value=r1}, 0x20) 4.030850886s ago: executing program 5 (id=1403): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000340)={0x27, 0x0, 0x0, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x21}, 0x60) sendto(r0, &(0x7f00000003c0)="a1bfc48ba931fb1ceb70ba6de68925f84d607ce82b9339dda7f5adf00381be33ea1558c858be9d3a5b2aff8f4f59bd095d7034b500b19e0d0524e7bf37b4cec2aad04aacfac1eeca892aa86fe2f21df0a4619b459cb53e0cadf8e3486c5506c18326e1a39911052c19fee16f57ff67c91e3576d08cbca1dbfbdf03bc42498ba5fe9316ab4a80fdaab89a6461775b8f4f23b0f528e97eadd7ca6308c637", 0xfeca, 0x0, &(0x7f0000000480)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) 3.909998694s ago: executing program 6 (id=1405): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080092020000000000000000", @ANYRES32=0x1], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) 3.844572556s ago: executing program 1 (id=1406): r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2000800, 0x0, 0x0, 0x59, 0xb}) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000000)=0x2) 3.78868167s ago: executing program 6 (id=1407): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) 3.752748179s ago: executing program 6 (id=1409): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000006c0)={0x14, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x1, 0x5, 0x6, &(0x7f0000000080)={0x2, "1a9c66bf2f615e4200000000e200"}}) 3.654341808s ago: executing program 1 (id=1410): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000140)={0x51, 0xffff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0xb, 0xfffb, 0xa}, 0xfffffffffffffe2f, 0x0}}) 3.6534395s ago: executing program 5 (id=1411): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x40, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='add yz0 27.0.0.1', 0x12) 3.573932674s ago: executing program 5 (id=1413): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x98}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) 3.400701669s ago: executing program 5 (id=1417): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000001180), &(0x7f0000000000)='./file0\x00', 0x82, &(0x7f0000001200)=ANY=[@ANYBLOB='test_dummy_encryption=v1,checkpoint=disable,noacl,fsync_mode=strict,jqfmt=vfsold,noquota,fsync_mode=posix,usrjquota=ext4\x00,resuid=', @ANYRES64, @ANYRES8=0x0], 0x1, 0x105b3, &(0x7f0000004080)="$eJzs3MtuG2UbB/DH7ZeevlIi1AOsGAkhxRK24iSNQEIoQCuoRKqIw4IVOLZjubU9Uewc6IpFu4JLYIuEUHdcA5veRsUCiRUSuyKQZyYogSwoceS2+f2k0X/m9bzPvOPO5vFUCeDYmk5++7UUF+JsRJyMiPMR2X6p2DJLebwYES9HxIk9W6kY/2vgVESci4gLo+J5zVLx0eLvDx99+9KNN7/6/mG59vN330zuroFJezUieuv5/nYvz7Sd561ivL7VybK3sFVk/kHvdnGc5rndWs0qbNd3z6tnOd/Oz0/XNwejXOvWG6Nsd9ay8fV+fsHBVnu3TjbhVn0jO262VrPsDNIs23fyde0UeWcwzOs0i3pfZOVjONzNfLy108rvZ/12lo3+sBjP66bN1s4ot4osLheNtNvM1rH6n7/mJ94Hnf7mTrLV2hh00n5ytVp7vVpbrNQ20mZr2Fqo1HvNxYVkpt0dnVYZtuq9pXaatrutaiPtlZOZdqNRqdWSmWut1U69n9Rq1fnqbOVqudh7LXnv5idJt5nMjPKdTn9z2OkOkrV0I8lnlJO56vwb5eSVWvLR8kqy8uH168srH3927dObby/feLc46R/LSmbmZufmKrXZylyt7P4Po3S46Rx3HiCAx6b/ByZB/6//j739b5w4lv2v/h8OwQMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBs/TT1w/vZznR+/P9i/Lli6IWIuBIRlyPiUkT8cYCTcWpfzYsRUSr2Dzp/6m9r+LEUWYXRnNPFdi4ilort0fNH/S0AAADAs+v+g7v39rbWbz3O5C/Hvx6OyomDBosfbc6M6yLZTz7/G1e1i1mxnTFVu7RbciwuR8TU9C9jqnZl9A90/vMxVftXTu6LM3uilMeBDwwAAPB0298JjK17AwAA4Inz9aQXwGRk72uL/4tfvAs+nUfxQvDsviMAAADgKVSa9AIAAACAI5f1//7+HwAAADzb7j+4e2/SawAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JOde8dNI4jjAPwHsoG8FBTxuApVlJKCQ+QIKVPakn0bd5zBEuIcuPMRLLDYHWMvhoplQfj7pGUewE8DEsXMsAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw6R6y6fhufnN7aM5y9ep6tUdcRex7CgAAADiaRTYd55Vu0f6W+n+krl8RMYyIQUT0Y/f0vRWfS5m9iGik+q7XZ1tjuI/IE9bvaafra0T8SdfTz2N/CwAAAHC55rPRJKK1ruYPvzc1PoC0aNOpKi9f8vlUVVovD/tfUVr/JbISg4jIuo8VpQ0jovn9b2rV8vtrlYrOm6JRFM06RgEAANSrPBOobPYGAADA2fl36gFwGvl+bfovftoLbhdF2hD8UmoBAAAA52v7bvuNRr3jAAAAAE4gn/+/O/8vrQo4/w8AAAAuQ3H+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMe0yKbj+Ww0OTRnuTpMNZ8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhmf85RKITBKIzevFH3FNz/suRCbG1tzoH8fGQoAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCdsVZeV7wbR8dYd74dM8mvu41/HzS2Hjf2JJ/55E8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA42Z+zEwyBIAiD/R9eYEiL+YclDRqDCFWw8LHDPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC81ed6+d7xaxxJ/v1tTEn2kWTuqLF01Fi70Ni6MJ6+BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJMdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirsz72JAkEYx+F39+64W7jorgTzxY8aTIxES/ADhIWtwQJsyMTIdLERbUFBRzAzkg18nuT3HyaZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhP5yf3v4+Hj4jIIx+t/4+fEfEV+aZpht/XmW1Ph/rnNqe7/TjNv5h0iogoInvtRwAAWlLem8ZyVS26qb3UfuogtZzV1bzNRwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBh545Vm4rCAACfJE20OjlaQQQHXWxsYjVCFodCd0HQLbSxFFOVNENbuvQJRCdXX8Fu+gq+gOCgBQeHDgougihJbtITDJIi3Bvq98F/7587nHtOhsB//3MDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMdyuBfODvJcCGFu5ijvev91d2Xc+e2zD3OD+HLnzcV4zO4QxRDCw/VW83qKa5l2m9s7jxqtVrMtkUgkwyTrXyYAAE6aYhLduv5TcX+5ey1XD+HXq9H6/0qUh7/U/59fnr8wiJ9b7zrxveL6fyG1FU6/cmfjaXlze+fa+kZjrbnWfFytVhZvLt64fatS7j0rKXtiAgAAwL8pJRHX//n6n/3/M1EeJqz/7y09uB/fq6D+H+uo6Zf1TAAAAP5v5y59/5Ybcz1XKoWtRqfTXugfh58r/WMGUz22U0nE9X+hnvWsAAAAgDQc7uVG+v+rUR4m7P/Pv949iMcshBBmk/7//MqT1mp6y5lqabxOnPUaAQAAyNZsEnH/v9jb/58fbnnIhxCuXu7nyd8ATlT/f3xxd+Sl9Xj/fzW9JU6lfK3/ffTOtRBmalnPCAAAgJPsdBLdYv+guL/c/vF8qWT/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/GbHjlEaCKIwAG92s1qJASu18gKinVXAQhAbDyEKgicQQTyA2Fp6B0vvkFrBxsIyhTeQN7ujkiZgsavk+2DyHmHIvEya/AsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHNN97/7Kl5GTV+27z1/XJ1EfZmp4f1+fTNW9IMuh/6HBnt9TwAAAMAiqHK+L4rirX48jFqOU/6v857I/A8rTZ/z/Gzuz/Xp7nUj5//r463Lr4NGzTnxoWfnF6c7nX3Dv2917o5huvn07KVKP0h5dLM2rdN9Dm4nk4Ol1C53MS0A8BvbubZN/j8UdbfPwQBYGMN2FT/yfzXudyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALnwGAAD//+gHXZc=") symlink(&(0x7f0000019b80)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f000001aa80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.277783169s ago: executing program 2 (id=1419): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502007000040600", 0x24) 3.10921059s ago: executing program 2 (id=1420): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f0000000240)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@block_validity}, {@nodioread_nolock}, {@noauto_da_alloc}, {@resuid}, {@noblock_validity}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000540)="ab7035940b455c6916b032b03a51224fafa12bd964c2098bb822", 0x1a}], 0x1) fallocate(r0, 0x0, 0xfff, 0x89) 2.465286162s ago: executing program 2 (id=1424): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000021c0)={0x1f, 0xd3, @any, 0x43, 0x1}, 0xe) listen(r0, 0xfffffff9) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) 1.936210903s ago: executing program 2 (id=1427): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 1.877980237s ago: executing program 5 (id=1429): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='notify_on_release\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0xe26) 1.526420149s ago: executing program 2 (id=1434): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000280)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000580)={0x1c}) 1.326816801s ago: executing program 0 (id=1435): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 1.201840064s ago: executing program 6 (id=1437): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0xd, 0x7, 0x8, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0xce, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f00000002c0)=""/201}, 0x20) 1.149852814s ago: executing program 2 (id=1438): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x20, 0x5, 0xc, 0xfffff010}, {0x6, 0x0, 0x3, 0xfffffffd}]}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f00000002c0)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 1.078198391s ago: executing program 3 (id=1439): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) lseek(r2, 0x100000000, 0x0) 1.028256245s ago: executing program 0 (id=1440): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xffffffff, 0x0]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x34}}, 0x0) 1.017609705s ago: executing program 6 (id=1441): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000001f182689f7ea9842111308000300", @ANYRES32=r2, @ANYBLOB="080005"], 0x24}}, 0x0) 979.624687ms ago: executing program 3 (id=1442): openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, &(0x7f0000000040)) 840.875823ms ago: executing program 3 (id=1443): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 828.2599ms ago: executing program 6 (id=1444): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xffff, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @empty}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 775.68884ms ago: executing program 0 (id=1445): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000300), 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) 650.622442ms ago: executing program 3 (id=1446): setns(0xc9, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000480)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000004c0)="3f000000010000", 0x7) 605.843847ms ago: executing program 0 (id=1447): r0 = syz_io_uring_setup(0x2148, &(0x7f0000000300)={0x0, 0x595b, 0x80, 0x0, 0x12}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000180)=0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, r4, 0x0}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 567.437336ms ago: executing program 1 (id=1448): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x7fffffd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x2, 0x2}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c810}, 0x10) 503.123724ms ago: executing program 3 (id=1449): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5400000013000500010000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000034001a0006000000020000002800048024000880080001000100000006"], 0x54}}, 0x0) 423.313443ms ago: executing program 0 (id=1450): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000054000500010000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYBLOB="01000000ef01010100000000000000000ffe00000800000028"], 0x60}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 306.379878ms ago: executing program 1 (id=1451): setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x4, 0x400}, {&(0x7f00000004c0)=""/4096, 0x1000}, &(0x7f0000001500)=[{&(0x7f0000000140)=""/30, 0x1e}], 0x1, 0x61, 0x5}}], 0x48}, 0x0) 304.699416ms ago: executing program 3 (id=1452): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x5818048, &(0x7f00000003c0)=ANY=[], 0x1, 0x153d, &(0x7f0000001880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x1000, 0x4) getdents64(r0, 0x0, 0x0) 222.36924ms ago: executing program 0 (id=1453): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000023c0)=""/4103, 0x1007}], 0x1, 0x5, 0x0) 109.239385ms ago: executing program 1 (id=1454): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) pwrite64(r0, &(0x7f0000000180)="b6", 0x1, 0xdc97) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) truncate(&(0x7f0000000700)='./file1\x00', 0x2) 0s ago: executing program 1 (id=1455): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0x70b, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1371}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400d1}, 0x8084) kernel console output (not intermixed with test programs): 33.229332][ T6912] XFS (loop0): Quotacheck needed: Please wait. [ 133.291587][ T5772] usb 5-1: selecting invalid altsetting 0 [ 133.299539][ T95] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x139/0x200, xfs_agfl block 0x3 [ 133.299589][ T95] XFS (loop0): Unmount and run xfs_repair [ 133.299603][ T95] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 133.299622][ T95] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 133.299641][ T95] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 133.299658][ T95] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 133.299676][ T95] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 133.299693][ T95] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 133.299710][ T95] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 133.299727][ T95] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 133.299744][ T95] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 133.299874][ T95] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x22c/0x440" at daddr 0x3 len 1 error 74 [ 133.300043][ T95] loop0: lost filesystem error report for type 5 error -117 [ 133.432083][ T6912] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 133.461957][ T6912] loop0: lost filesystem error report for type 5 error -117 [ 133.549676][ T6912] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x139/0x200, xfs_agfl block 0x3 [ 133.549734][ T6912] XFS (loop0): Unmount and run xfs_repair [ 133.549747][ T6912] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 133.549767][ T6912] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 133.549785][ T6912] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 133.549803][ T6912] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 133.549820][ T6912] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 133.549842][ T6912] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 133.549859][ T6912] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 133.549876][ T6912] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 133.549894][ T6912] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 133.549912][ T6912] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x22c/0x440" at daddr 0x3 len 1 error 74 [ 133.610742][ T6943] netlink: 28 bytes leftover after parsing attributes in process `syz.5.424'. [ 133.610855][ T6943] netlink: 28 bytes leftover after parsing attributes in process `syz.5.424'. [ 133.611664][ T6943] netlink: 'syz.5.424': attribute type 6 has an invalid length. [ 133.695539][ T6946] batman_adv: batadv0: Adding interface: netdevsim0 [ 133.695556][ T6946] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.696003][ T6946] batman_adv: batadv0: Interface activated: netdevsim0 [ 133.800040][ T5772] usb 5-1: USB disconnect, device number 6 [ 133.846649][ T5641] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 133.896423][ T5641] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair. [ 133.912149][ T6951] loop5: detected capacity change from 0 to 512 [ 133.974862][ T6951] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.427: corrupted in-inode xattr: invalid ea_ino [ 133.974899][ T6951] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 133.977620][ T6951] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.427: couldn't read orphan inode 15 (err -117) [ 133.977652][ T6951] loop5: lost filesystem error report for type 5 error -117 [ 134.021440][ T6951] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.032395][ T5634] ocfs2: Unmounting device (7,2) on (node local) [ 134.096423][ T6951] EXT4-fs warning (device loop5): ext4_empty_dir:3096: inode #2: comm syz.5.427: directory missing '.' [ 134.153939][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.284730][ T6960] xt_hashlimit: size too large, truncated to 1048576 [ 134.315058][ T6959] udevd[6959]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.075340][ T6991] Invalid logical block size (1) [ 135.102907][ T6996] warning: `syz.3.446' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 135.137497][ T6997] loop2: detected capacity change from 0 to 1024 [ 135.360223][ T7002] tap0: tun_chr_ioctl cmd 2147767506 [ 135.898947][ T7010] loop0: detected capacity change from 0 to 4096 [ 135.915371][ T7010] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 136.061251][ T7016] loop5: detected capacity change from 0 to 512 [ 136.066797][ T7010] ntfs3(loop0): ino=19, mi_enum_attr [ 136.066826][ T7010] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 136.079780][ T7010] ntfs3(loop0): ino=1a, mi_enum_attr [ 136.079909][ T7010] ntfs3(loop0): ino=1a, mi_enum_attr [ 136.079928][ T7010] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 136.115231][ T7016] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 136.136108][ T7016] EXT4-fs (loop5): 1 truncate cleaned up [ 136.150462][ T7010] ntfs3(loop0): ino=5, "/" ntfs_readdir [ 136.154203][ T7016] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.160884][ T6993] loop4: detected capacity change from 0 to 32768 [ 136.212193][ T6983] loop1: detected capacity change from 0 to 32768 [ 136.258202][ T6983] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 136.262705][ T6993] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 136.281972][ T30] audit: type=1800 audit(1792811804.952:76): pid=7032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.455" name="file1" dev="loop5" ino=15 res=0 errno=-22 [ 136.369706][ T7041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.459'. [ 136.416879][ T6993] XFS (loop4): Ending clean mount [ 136.489534][ T6993] XFS (loop4): syz.4.444 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 136.541615][ T7043] loop3: detected capacity change from 0 to 1764 [ 136.617000][ T6983] XFS (loop1): Ending clean mount [ 136.680018][ T5639] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 136.712873][ T6983] XFS (loop1): Quotacheck needed: Please wait. [ 136.836777][ T6983] XFS (loop1): Quotacheck: Done. [ 137.074180][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.125573][ T5633] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 137.213090][ T7052] loop0: detected capacity change from 0 to 512 [ 137.250615][ T7052] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.464: bg 0: block 5: invalid block bitmap [ 137.250668][ T7052] loop0: lost filesystem error report for type 5 error -117 [ 137.264046][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 137.264067][ C1] EXT4-fs (loop0): initial error at time 1792811805: ext4_validate_block_bitmap:436 [ 137.264093][ C1] EXT4-fs (loop0): last error at time 1792811805: ext4_validate_block_bitmap:436 [ 137.324050][ T7052] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 137.324076][ T7052] loop0: lost filesystem error report for type 5 error -117 [ 137.347423][ T7052] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.464: invalid indirect mapped block 3 (level 2) [ 137.347462][ T7052] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 137.357910][ T7052] EXT4-fs (loop0): 1 orphan inode deleted [ 137.357932][ T7052] EXT4-fs (loop0): 1 truncate cleaned up [ 137.379802][ T7052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.633678][ T5641] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.800984][ T7069] bonding: no command found in bonding_masters - use +ifname or -ifname [ 137.802194][ T7063] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.031284][ T7063] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.165784][ T7063] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.245217][ T7063] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 138.360840][ T5772] hid-generic 0005:16C0:05DF.0003: unknown main item tag 0x0 [ 138.391841][ T7063] batman_adv: batadv0: Removing interface: netdevsim0 [ 138.403942][ T5772] hid-generic 0005:16C0:05DF.0003: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 138.414446][ T7063] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.842609][ T997] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.899372][ T197] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.922448][ T197] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.932570][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.291182][ T7127] Driver unsupported XDP return value 0 on prog (id 31) dev N/A, expect packet loss! [ 139.462489][ T5779] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 139.613205][ T5779] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 139.614931][ T5779] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 139.614984][ T5779] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 139.615009][ T5779] usb 5-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 139.615035][ T5779] usb 5-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 139.616377][ T5779] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 139.616425][ T5779] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 139.616449][ T5779] usb 5-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 139.616475][ T5779] usb 5-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 139.643887][ T5779] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.643915][ T5779] usb 5-1: Product: syz [ 139.643932][ T5779] usb 5-1: Manufacturer: syz [ 139.643949][ T5779] usb 5-1: SerialNumber: syz [ 139.685428][ T7141] loop1: detected capacity change from 0 to 128 [ 139.707087][ T7141] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 139.717099][ T7141] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.784260][ T5779] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 139.790376][ T5779] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 139.814450][ T5779] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 140.036320][ T7125] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 140.054397][ T5758] usb 5-1: USB disconnect, device number 7 [ 140.094609][ T5758] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 140.119610][ T5758] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 140.120585][ T5758] ti_usb_3410_5052 5-1:2.0: device disconnected [ 140.668573][ T7146] loop3: detected capacity change from 0 to 32768 [ 140.755576][ T7146] JBD2: Ignoring recovery information on journal [ 140.769682][ T7146] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 140.769958][ T7146] JBD2: bad block at offset 32 [ 140.807189][ T7146] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 140.854647][ T7172] process 'syz.1.515' launched './file0' with NULL argv: empty string added [ 141.122705][ T5638] ocfs2: Unmounting device (7,3) on (node local) [ 141.236701][ T30] audit: type=1400 audit(1792811809.922:77): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="//o" pid=7182 comm="syz.4.520" name="//o" offset=81 [ 141.409566][ T7191] loop1: detected capacity change from 0 to 512 [ 141.425804][ T7191] EXT4-fs: Ignoring removed nobh option [ 141.486982][ T7191] EXT4-fs (loop1): 1 truncate cleaned up [ 141.502754][ T7191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.772256][ T5633] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.926685][ T7179] loop2: detected capacity change from 0 to 32768 [ 141.991038][ T7179] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 142.014308][ T7179] JBD2: Ignoring recovery information on journal [ 142.161965][ T5639] syz_tun (unregistering): left allmulticast mode [ 142.237038][ T7179] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 142.627140][ T95] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.703654][ T5634] ocfs2: Unmounting device (7,2) on (node local) [ 142.844604][ T95] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.015260][ T95] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.232067][ T95] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.658239][ T4944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 143.664093][ T4944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 143.679291][ T4944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 143.680751][ T4944] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 143.703078][ T4944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 143.880326][ T95] bridge_slave_1: left allmulticast mode [ 143.880366][ T95] bridge_slave_1: left promiscuous mode [ 143.881335][ T95] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.968743][ T95] bridge_slave_0: left allmulticast mode [ 143.968772][ T95] bridge_slave_0: left promiscuous mode [ 143.969021][ T95] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.695354][ T7220] loop3: detected capacity change from 0 to 32768 [ 144.735575][ T7220] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 144.889368][ T95] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.904426][ T7220] XFS (loop3): Ending clean mount [ 144.908097][ T95] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.911807][ T7220] XFS (loop3): Quotacheck needed: Please wait. [ 144.937059][ T95] bond0 (unregistering): Released all slaves [ 145.145123][ T7220] XFS (loop3): Quotacheck: Done. [ 145.522201][ T5638] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 145.792397][ T5635] Bluetooth: hci3: command tx timeout [ 145.881731][ T7309] loop2: detected capacity change from 0 to 512 [ 145.908199][ T7309] FAT-fs (loop2): Invalid FSINFO signature: 0x00000852, 0x61417272 (sector = 1) [ 146.049424][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 146.095251][ T7309] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 146.095281][ T7309] FAT-fs (loop2): Filesystem has been set read-only [ 146.095356][ T7309] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 146.095438][ T7309] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 146.200110][ T5634] FAT-fs (loop2): Invalid FSINFO signature: 0x00000852, 0x61417272 (sector = 1) [ 146.305292][ T7319] macvlan0: entered promiscuous mode [ 146.306983][ T7319] netlink: 'syz.5.571': attribute type 1 has an invalid length. [ 146.307003][ T7319] netlink: 'syz.5.571': attribute type 2 has an invalid length. [ 146.657301][ T29] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 146.810955][ T7227] rxe_eth0 speed is unknown, defaulting to 1000 [ 146.826558][ T29] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 146.829956][ T29] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 146.829983][ T29] usb 6-1: config 0 has no interface number 0 [ 146.830025][ T29] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 146.870265][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.870296][ T29] usb 6-1: Product: syz [ 146.870313][ T29] usb 6-1: Manufacturer: syz [ 146.870329][ T29] usb 6-1: SerialNumber: syz [ 146.915734][ T29] usb 6-1: config 0 descriptor?? [ 146.945746][ T7344] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 146.973510][ T29] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 147.201379][ T29] usb 6-1: USB disconnect, device number 2 [ 147.251818][ T29] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 147.576782][ T95] hsr_slave_0: left promiscuous mode [ 147.594203][ T95] hsr_slave_1: left promiscuous mode [ 147.595538][ T95] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.595581][ T95] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.601743][ T95] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.601765][ T95] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.724165][ T95] veth1_macvtap: left promiscuous mode [ 147.724218][ T95] veth0_macvtap: left promiscuous mode [ 147.724329][ T95] veth1_vlan: left promiscuous mode [ 147.724625][ T95] veth0_vlan: left promiscuous mode [ 147.862719][ T4944] Bluetooth: hci3: command tx timeout [ 148.019861][ T7375] loop5: detected capacity change from 0 to 256 [ 148.064680][ T7377] loop1: detected capacity change from 0 to 1024 [ 148.081994][ T7375] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 148.540343][ T7391] loop1: detected capacity change from 0 to 128 [ 148.579914][ T7391] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 148.595492][ T7391] hpfs: filesystem error: improperly stopped [ 148.595512][ T7391] hpfs: You really don't want any checks? You are crazy... [ 148.596146][ T7391] hpfs: hpfs_map_sector(): read error [ 148.596157][ T7391] hpfs: code page support is disabled [ 148.612043][ T7391] hpfs: hpfs_map_4sectors(): unaligned read [ 148.612171][ T7391] hpfs: hpfs_map_4sectors(): unaligned read [ 148.612182][ T7391] hpfs: filesystem error: unable to find root dir [ 148.652736][ T7391] hpfs: hpfs_map_4sectors(): unaligned read [ 148.653144][ T7391] hpfs: hpfs_map_sector(): read error [ 148.727858][ T95] team0 (unregistering): Port device team_slave_1 removed [ 148.792086][ T95] team0 (unregistering): Port device team_slave_0 removed [ 149.111350][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 149.159567][ T7371] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 149.611639][ T7412] loop1: detected capacity change from 0 to 32768 [ 149.622162][ T7412] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.606 (7412) [ 149.745114][ T7412] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 149.745150][ T7412] BTRFS info (device loop1): using sha256 checksum algorithm [ 149.882537][ T7412] BTRFS info (device loop1): enabling ssd optimizations [ 149.882564][ T7412] BTRFS info (device loop1): turning on async discard [ 149.882580][ T7412] BTRFS info (device loop1): enabling free space tree [ 149.943881][ T4944] Bluetooth: hci3: command tx timeout [ 150.048432][ T7447] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 150.178537][ T5633] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 150.240868][ T7457] loop3: detected capacity change from 0 to 512 [ 150.259967][ T7457] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 150.260100][ T7457] System zones: 1-12 [ 150.276075][ T7457] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.615: missing EA_INODE flag [ 150.276103][ T7457] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 150.280025][ T7457] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.615: error while reading EA inode 12 err=-117 [ 150.280064][ T7457] loop3: lost filesystem error report for type 5 error -117 [ 150.280417][ T7457] EXT4-fs (loop3): 1 orphan inode deleted [ 150.342897][ T7457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.526486][ T7471] raw_sendmsg: syz.1.617 forgot to set AF_INET. Fix it! [ 150.558355][ T7467] loop2: detected capacity change from 0 to 8 [ 150.651087][ T5638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.677953][ T7473] block nbd0: NBD_DISCONNECT [ 150.841019][ T7227] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.842076][ T7227] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.859173][ T7227] bridge_slave_0: entered allmulticast mode [ 150.871991][ T7227] bridge_slave_0: entered promiscuous mode [ 150.887867][ T7227] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.888094][ T7227] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.888248][ T7227] bridge_slave_1: entered allmulticast mode [ 150.908250][ T7227] bridge_slave_1: entered promiscuous mode [ 150.989287][ T7480] loop3: detected capacity change from 0 to 128 [ 151.080915][ T7480] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 151.082945][ T7480] ext4 filesystem being mounted at /118/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 151.207208][ T7227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.211841][ T7227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.264815][ T7227] team0: Port device team_slave_0 added [ 151.268082][ T7227] team0: Port device team_slave_1 added [ 151.279819][ T7467] Dev loop2: unable to read RDB block 8 [ 151.279852][ T7467] loop2: unable to read partition table [ 151.280064][ T7467] loop2: partition table beyond EOD, truncated [ 151.280102][ T7467] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 151.377201][ T7227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.377222][ T7227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.377252][ T7227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.379247][ T7227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.379262][ T7227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.379290][ T7227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.597881][ T5638] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.668840][ T7227] hsr_slave_0: entered promiscuous mode [ 151.669962][ T7227] hsr_slave_1: entered promiscuous mode [ 151.684451][ T7227] debugfs: 'hsr0' already exists in 'hsr' [ 151.684474][ T7227] Cannot create hsr debugfs directory [ 151.948380][ T7498] loop2: detected capacity change from 0 to 512 [ 151.980888][ T7498] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.627: bad orphan inode 15 [ 151.980919][ T7498] loop2: lost filesystem error report for type 5 error -117 [ 151.981186][ T7498] ext4_test_bit(bit=14, block=5) = 0 [ 152.023429][ T4944] Bluetooth: hci3: command tx timeout [ 152.040235][ T7498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.224396][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 152.247294][ T5634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.568364][ T7514] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.634'. [ 152.583340][ T7515] loop7: detected capacity change from 0 to 7 [ 152.587126][ T7514] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.634'. [ 152.596644][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.596853][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 152.609038][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.609113][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 152.609688][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.609757][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 152.611754][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.611825][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 152.612022][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.612089][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 152.612389][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.612466][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 152.613840][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.613966][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 152.617446][ T7515] ldm_validate_partition_table(): Disk read failed. [ 152.622182][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.622254][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 152.623300][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.623389][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 152.623716][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.623798][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 152.628714][ T7515] Dev loop7: unable to read RDB block 0 [ 152.637883][ T7515] loop7: unable to read partition table [ 152.638112][ T7515] loop7: partition table beyond EOD, truncated [ 152.638147][ T7515] loop_reread_partitions: partition scan of loop7 (Cj̖4FLQk5) failed (rc=-5) [ 152.820647][ T7515] ldm_validate_partition_table(): Disk read failed. [ 152.836767][ T7515] Dev loop7: unable to read RDB block 0 [ 152.843086][ T7515] loop7: unable to read partition table [ 152.843323][ T7515] loop7: partition table beyond EOD, truncated [ 152.925390][ T7520] netlink: 856 bytes leftover after parsing attributes in process `syz.2.636'. [ 153.055747][ T7525] jffs2: notice: (7525) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 153.099955][ T7227] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 153.156022][ T7227] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 153.158974][ T7227] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 153.194838][ T7227] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 153.198744][ T7227] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 153.219766][ T7227] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 153.220738][ T7533] loop1: detected capacity change from 0 to 512 [ 153.222228][ T7227] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 153.257639][ T7227] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 153.261277][ T7533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.267743][ T7533] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.531055][ T5633] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.587835][ T7227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.589055][ T7553] loop0: detected capacity change from 0 to 128 [ 153.721452][ T7227] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.773611][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.773756][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.822842][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.822957][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.927611][ T7562] loop5: detected capacity change from 0 to 1024 [ 153.978644][ T7562] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 154.068984][ T7562] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 2: comm syz.5.648: lblock 2 mapped to illegal pblock 2 (length 1) [ 154.069027][ T7562] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 154.070382][ T7562] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 154.070429][ T7562] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 48: comm syz.5.648: lblock 0 mapped to illegal pblock 48 (length 1) [ 154.070459][ T7562] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 154.072327][ C1] EXT4-fs (loop5): error count since last fsck: 2 [ 154.072348][ C1] EXT4-fs (loop5): initial error at time 1792811822: ext4_map_blocks:790: inode 3: block 2 [ 154.072388][ C1] EXT4-fs (loop5): last error at time 1792811822: ext4_map_blocks:790: inode 3: block 48 [ 154.118438][ T7562] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 154.118464][ T7562] EXT4-fs error (device loop5): ext4_acquire_dquot:7079: comm syz.5.648: Failed to acquire dquot type 0 [ 154.118488][ T7562] loop5: lost filesystem error report for type 5 error -117 [ 154.128174][ T7562] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6519: Corrupt filesystem [ 154.128200][ T7562] loop5: lost filesystem error report for type 5 error -117 [ 154.186357][ T7562] EXT4-fs error (device loop5): ext4_evict_inode:269: inode #11: comm syz.5.648: mark_inode_dirty error [ 154.186393][ T7562] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 154.195756][ T7562] EXT4-fs warning (device loop5): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 154.195857][ T7562] EXT4-fs (loop5): 1 orphan inode deleted [ 154.203761][ T7562] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.217383][ T13] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 154.267210][ T13] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 154.267259][ T13] EXT4-fs error (device loop5): ext4_release_dquot:7115: comm kworker/u8:1: Failed to release dquot type 0 [ 154.294345][ T5779] hid-generic 0005:07C0:8001.0004: item fetching failed at offset 0/1 [ 154.295385][ T5779] hid-generic 0005:07C0:8001.0004: probe with driver hid-generic failed with error -22 [ 154.361036][ T7562] EXT4-fs: Ignoring removed bh option [ 154.361117][ T7562] EXT4-fs (loop5): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 154.399993][ T7562] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 48: comm syz.5.648: lblock 0 mapped to illegal pblock 48 (length 1) [ 154.401009][ T7562] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=-117 [ 154.433105][ T29] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 154.480893][ T7562] EXT4-fs: Ignoring removed bh option [ 154.480997][ T7562] EXT4-fs (loop5): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 154.591290][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 154.605695][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 154.606470][ T29] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 154.607782][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.607812][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.607855][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.639598][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.671850][ T29] usb 3-1: config 0 descriptor?? [ 154.681893][ T29] hub 3-1:0.0: USB hub found [ 154.702174][ T30] audit: type=1326 audit(1792811823.382:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.3.654" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163519f559 code=0x7ffc0000 [ 154.702232][ T30] audit: type=1326 audit(1792811823.382:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.3.654" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163519f559 code=0x7ffc0000 [ 154.702456][ T30] audit: type=1326 audit(1792811823.382:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.3.654" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f163515fd8e code=0x7ffc0000 [ 154.702532][ T30] audit: type=1326 audit(1792811823.382:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.3.654" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f163515fd8e code=0x7ffc0000 [ 154.702579][ T30] audit: type=1326 audit(1792811823.382:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.3.654" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163519f559 code=0x7ffc0000 [ 154.702625][ T30] audit: type=1326 audit(1792811823.382:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.3.654" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163519f559 code=0x7ffc0000 [ 154.885320][ T29] hub 3-1:0.0: 1 port detected [ 155.104619][ T29] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 155.131694][ T29] usbhid 3-1:0.0: can't add hid device: -71 [ 155.131799][ T29] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 155.173589][ T29] usb 3-1: USB disconnect, device number 3 [ 155.195263][ T7590] loop5: detected capacity change from 0 to 2048 [ 155.207692][ T7590] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 155.309393][ T7595] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 155.589558][ T7600] loop3: detected capacity change from 0 to 128 [ 155.675050][ T7600] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 155.682748][ T7600] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.974130][ T5638] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 156.092038][ T7617] kAFS: bad VL server IP address [ 156.205609][ T7227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.300775][ T7626] support for the xor transformation has been removed. [ 156.359991][ T7633] loop5: detected capacity change from 0 to 256 [ 156.406924][ T7631] loop0: detected capacity change from 0 to 512 [ 156.461890][ T7631] EXT4-fs error (device loop0) in ext4_process_orphan:346: Out of memory [ 156.461917][ T7631] loop0: lost filesystem error report for type 5 error -12 [ 156.462505][ C0] EXT4-fs (loop0): initial error at time 1792811825: ext4_process_orphan:346 [ 156.462537][ C0] EXT4-fs (loop0): last error at time 1792811825: ext4_process_orphan:346 [ 156.533898][ T7631] EXT4-fs (loop0): 2 truncates cleaned up [ 156.548176][ T7631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.598932][ T7638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.671'. [ 156.836513][ T5641] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.074980][ T7651] tipc: Started in network mode [ 157.075016][ T7651] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 157.075260][ T7651] tipc: Enabled bearer , priority 0 [ 157.334440][ T7227] veth0_vlan: entered promiscuous mode [ 157.355534][ T7227] veth1_vlan: entered promiscuous mode [ 157.429245][ T7227] veth0_macvtap: entered promiscuous mode [ 157.450803][ T7227] veth1_macvtap: entered promiscuous mode [ 157.521230][ T7227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.551678][ T7227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.592583][ T31] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.593011][ T1110] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.593064][ T1110] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.593103][ T1110] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.751406][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.751429][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.829784][ T95] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.829808][ T95] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.283387][ T5759] tipc: Node number set to 43690 [ 158.459798][ T7702] loop6: detected capacity change from 0 to 128 [ 158.515962][ T7702] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 158.519301][ T7702] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 158.646437][ T7227] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.740977][ T7710] loop6: detected capacity change from 0 to 512 [ 158.756805][ T7710] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 158.756823][ T7710] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 158.785387][ T7710] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.700: bad orphan inode 131083 [ 158.785419][ T7710] loop6: lost filesystem error report for type 5 error -117 [ 158.791090][ T7710] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.839604][ T7227] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.172936][ T7720] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 159.478100][ T7730] xt_hashlimit: size too large, truncated to 1048576 [ 159.915919][ T7755] loop1: detected capacity change from 0 to 2048 [ 159.978749][ T7755] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.038135][ T7755] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 160.055610][ T7755] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 160.055643][ T7755] EXT4-fs (loop1): This should not happen!! Data will be lost [ 160.055643][ T7755] [ 160.055660][ T7755] EXT4-fs (loop1): Total free blocks count 0 [ 160.055675][ T7755] EXT4-fs (loop1): Free/Dirty block details [ 160.055695][ T7755] EXT4-fs (loop1): free_blocks=2415919504 [ 160.055716][ T7755] EXT4-fs (loop1): dirty_blocks=32 [ 160.055731][ T7755] EXT4-fs (loop1): Block reservation details [ 160.055744][ T7755] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 160.089361][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 160.089379][ T30] audit: type=1804 audit(1792811828.772:88): pid=7755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.719" name="/newroot/127/file1/file1" dev="loop1" ino=15 res=1 errno=0 [ 160.219080][ T5633] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.711801][ T7779] loop1: detected capacity change from 0 to 8192 [ 160.854549][ T7781] loop2: detected capacity change from 0 to 40427 [ 160.856577][ T7781] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 160.856603][ T7781] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 160.962638][ T7781] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 160.979003][ T7781] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 160.979030][ T7781] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 161.021871][ T7748] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 161.426543][ T7783] loop0: detected capacity change from 0 to 32768 [ 161.529852][ T7783] find_entry called with index >= next_index [ 161.529869][ T7783] find_entry called with index >= next_index [ 161.529878][ T7783] find_entry called with index >= next_index [ 161.529887][ T7783] find_entry called with index >= next_index [ 161.529897][ T7783] find_entry called with index >= next_index [ 161.529907][ T7783] add_index: next_index = 0. Resetting! [ 161.529922][ T7783] find_entry called with index >= next_index [ 161.529931][ T7783] find_entry called with index >= next_index [ 161.529941][ T7783] find_entry called with index >= next_index [ 161.529950][ T7783] find_entry called with index >= next_index [ 161.663478][ T7783] non-latin1 character 0x3ff found in JFS file name [ 161.663499][ T7783] mount with iocharset=utf8 to access [ 161.851456][ T7810] device-mapper: table: 248:1: snapshot: Cannot get origin device (-ENOENT) [ 161.851485][ T7810] device-mapper: ioctl: error adding target to table [ 162.027078][ T7818] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 162.273272][ T7825] syz_tun: entered promiscuous mode [ 162.278498][ T7825] vlan2: entered promiscuous mode [ 162.449868][ T7831] loop5: detected capacity change from 0 to 256 [ 162.461980][ T7831] exfat: Deprecated parameter 'utf8' [ 162.515105][ T7831] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xad31b01c, utbl_chksum : 0xe619d30d) [ 162.729750][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.753'. [ 162.843098][ T7844] loop2: detected capacity change from 0 to 4096 [ 162.919727][ T7847] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.495813][ T7866] loop5: detected capacity change from 0 to 128 [ 163.780409][ T7877] loop0: detected capacity change from 0 to 256 [ 164.042849][ T7886] sctp: Trying to GSO but underlying device doesn't support it. [ 164.234848][ T7899] loop3: detected capacity change from 0 to 2048 [ 164.305848][ T7899] NILFS (loop3): invalid segment: Magic number mismatch [ 164.305877][ T7899] NILFS (loop3): trying rollback from an earlier position [ 164.369884][ T7899] NILFS (loop3): recovery complete [ 164.373135][ T7905] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.478298][ T7899] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 4096 already freed [ 164.501228][ T7899] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean [ 164.765159][ T7908] loop6: detected capacity change from 0 to 32768 [ 164.782081][ T7908] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.785 (7908) [ 164.813287][ T7908] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 164.813321][ T7908] BTRFS info (device loop6): using crc32c checksum algorithm [ 164.960667][ T7908] BTRFS info (device loop6): enabling ssd optimizations [ 164.960696][ T7908] BTRFS info (device loop6): turning on flush-on-commit [ 164.960715][ T7908] BTRFS info (device loop6): enabling free space tree [ 164.960733][ T7908] BTRFS info (device loop6): enabling auto defrag [ 164.960753][ T7908] BTRFS info (device loop6): use lzo compression, level 1 [ 164.960776][ T7908] BTRFS info (device loop6): max_inline set to 4096 [ 165.517648][ T7227] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 166.093855][ T7967] loop0: detected capacity change from 0 to 164 [ 166.678584][ T30] audit: type=1400 audit(1792811835.362:89): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7980 comm="syz.0.806" name="p" offset=58 [ 167.388092][ T5779] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 167.477831][ T8007] loop6: detected capacity change from 0 to 1024 [ 167.534883][ T5779] usb 6-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 167.538034][ T5779] usb 6-1: too many endpoints for config 0 interface 0 altsetting 1: 66, using maximum allowed: 30 [ 167.538082][ T5779] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.538109][ T5779] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 167.538139][ T5779] usb 6-1: config 0 interface 0 has no altsetting 0 [ 167.538175][ T5779] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.609782][ T5779] usb 6-1: config 0 descriptor?? [ 168.038733][ T5779] elecom 0003:056E:00FE.0005: unknown main item tag 0x0 [ 168.038766][ T5779] elecom 0003:056E:00FE.0005: unknown main item tag 0x0 [ 168.038789][ T5779] elecom 0003:056E:00FE.0005: unknown main item tag 0x0 [ 168.038812][ T5779] elecom 0003:056E:00FE.0005: unknown main item tag 0x0 [ 168.038835][ T5779] elecom 0003:056E:00FE.0005: unknown main item tag 0x0 [ 168.038858][ T5779] elecom 0003:056E:00FE.0005: unknown main item tag 0x0 [ 168.038880][ T5779] elecom 0003:056E:00FE.0005: unknown main item tag 0x0 [ 168.038903][ T5779] elecom 0003:056E:00FE.0005: unknown main item tag 0x0 [ 168.038925][ T5779] elecom 0003:056E:00FE.0005: unknown main item tag 0x0 [ 168.038948][ T5779] elecom 0003:056E:00FE.0005: unknown main item tag 0x0 [ 168.128413][ T5779] elecom 0003:056E:00FE.0005: hidraw0: USB HID vff.ff Device [HID 056e:00fe] on usb-dummy_hcd.5-1/input0 [ 168.261928][ T5772] usb 6-1: USB disconnect, device number 3 [ 168.405559][ T8041] fido_id[8041]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 168.666985][ T8054] netlink: 36 bytes leftover after parsing attributes in process `syz.6.829'. [ 168.786016][ T8061] kAFS: Invalid Command on /proc/fs/afs/cells file [ 169.053431][ T5772] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 169.203878][ T5772] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 169.206475][ T5772] usb 4-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.206510][ T5772] usb 4-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.206536][ T5772] usb 4-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.206566][ T5772] usb 4-1: config 0 interface 0 has no altsetting 0 [ 169.206601][ T5772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.214719][ T5772] usb 4-1: config 0 descriptor?? [ 169.245816][ T5867] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 169.398401][ T5867] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 169.399758][ T5867] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.404946][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 169.404973][ T5867] usb 6-1: Product: syz [ 169.404990][ T5867] usb 6-1: Manufacturer: syz [ 169.457376][ T5867] usb 6-1: selecting invalid altsetting 1 [ 169.468845][ T5867] dvb_ttusb_budget: ttusb_init_controller: error [ 169.468940][ T5867] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 169.489887][ T8084] option changes via remount are deprecated (pid=8080 comm=syz.2.840) [ 169.674932][ T5772] hid-udraw 0003:20D6:CB17.0006: unexpected long global item [ 169.680956][ T8075] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 169.686558][ T5772] hid-udraw 0003:20D6:CB17.0006: parse failed [ 169.686668][ T5772] hid-udraw 0003:20D6:CB17.0006: probe with driver hid-udraw failed with error -22 [ 169.688861][ T8075] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 169.727259][ T8064] loop6: detected capacity change from 0 to 32768 [ 169.774999][ T8064] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 169.829662][ T8064] XFS (loop6): Ending clean mount [ 169.847712][ T5867] DVB: Unable to find symbol cx22700_attach() [ 169.858043][ T8089] loop2: detected capacity change from 0 to 8192 [ 169.868079][ T5772] usb 4-1: USB disconnect, device number 3 [ 169.879051][ T8089] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 169.970254][ T8064] XFS (loop6): User initiated shutdown received. [ 169.970549][ T8064] XFS (loop6): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:458). Shutting down filesystem. [ 169.970605][ T8064] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 170.073018][ T7227] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 170.118924][ T5867] DVB: Unable to find symbol tda10046_attach() [ 170.118941][ T5867] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 170.165400][ T5867] usb 6-1: USB disconnect, device number 4 [ 170.940428][ T8134] netlink: 'syz.3.856': attribute type 1 has an invalid length. [ 170.940453][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.856'. [ 170.940469][ T8134] netlink: 'syz.3.856': attribute type 1 has an invalid length. [ 170.940484][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.856'. [ 170.940564][ T8134] iwpm_send_hello: Unable to send a nlmsg [ 171.061088][ T8135] loop5: detected capacity change from 0 to 4096 [ 171.106181][ T8141] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.196247][ T8147] overlayfs: upper fs does not support tmpfile. [ 171.657157][ T8171] i2c i2c-0: delete_device: Can't parse I2C address [ 172.124510][ T30] audit: type=1326 audit(1792811840.792:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.5.876" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c939f559 code=0x7ffc0000 [ 172.124575][ T30] audit: type=1326 audit(1792811840.812:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.5.876" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c939f559 code=0x7ffc0000 [ 172.202966][ T30] audit: type=1326 audit(1792811840.882:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.5.876" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f35c939f559 code=0x7ffc0000 [ 172.203027][ T30] audit: type=1326 audit(1792811840.882:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.5.876" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c939f559 code=0x7ffc0000 [ 172.204728][ T30] audit: type=1326 audit(1792811840.892:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.5.876" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c939f559 code=0x7ffc0000 [ 172.210225][ T30] audit: type=1326 audit(1792811840.892:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.5.876" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f35c939f559 code=0x7ffc0000 [ 172.210279][ T30] audit: type=1326 audit(1792811840.892:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.5.876" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c939f559 code=0x7ffc0000 [ 172.210326][ T30] audit: type=1326 audit(1792811840.892:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.5.876" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c939f559 code=0x7ffc0000 [ 172.229981][ T30] audit: type=1326 audit(1792811840.912:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.5.876" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f35c939f559 code=0x7ffc0000 [ 172.230034][ T30] audit: type=1326 audit(1792811840.912:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.5.876" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c939f559 code=0x7ffc0000 [ 172.527067][ T8197] loop2: detected capacity change from 0 to 8192 [ 172.561438][ T8204] program syz.1.882 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.277528][ T8213] loop2: detected capacity change from 0 to 32768 [ 173.312218][ T8213] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 173.402242][ T8218] loop5: detected capacity change from 0 to 32768 [ 173.437350][ T8235] loop3: detected capacity change from 0 to 128 [ 173.528353][ T8213] XFS (loop2): Ending clean mount [ 173.554858][ T8213] XFS (loop2): Quotacheck needed: Please wait. [ 173.867826][ T8213] XFS (loop2): Quotacheck: Done. [ 173.956069][ T5634] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 174.751243][ T8261] loop2: detected capacity change from 0 to 1024 [ 174.801409][ T8261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.801518][ T8261] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.815276][ T29] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 174.983662][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 174.990258][ T29] usb 6-1: unable to get BOS descriptor set [ 174.991321][ T29] usb 6-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice= 0.40 [ 175.004302][ T5634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 175.025033][ T29] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 175.025077][ T29] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 49591, setting to 1024 [ 175.029441][ T29] usb 6-1: string descriptor 0 read error: -22 [ 175.029585][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.093548][ T29] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 175.210229][ T8264] loop6: detected capacity change from 0 to 32768 [ 175.275358][ T8264] JBD2: Ignoring recovery information on journal [ 175.304743][ T29] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 175.434744][ T8264] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 175.514905][ T29] usb 6-1: USB disconnect, device number 5 [ 175.768798][ T8291] loop3: detected capacity change from 0 to 256 [ 175.792466][ T8291] exfat: Deprecated parameter 'namecase' [ 175.836013][ T8291] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 175.986506][ T8293] netlink: 24 bytes leftover after parsing attributes in process `syz.0.916'. [ 175.986578][ T8293] netlink: 16 bytes leftover after parsing attributes in process `syz.0.916'. [ 176.124829][ T7227] ocfs2: Unmounting device (7,6) on (node local) [ 176.186143][ T8298] loop0: detected capacity change from 0 to 512 [ 176.198963][ T8298] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 176.329778][ T8298] EXT4-fs (loop0): 1 orphan inode deleted [ 176.348795][ T197] EXT4-fs error (device loop0): ext4_release_dquot:7115: comm kworker/u8:6: Failed to release dquot type 1 [ 176.348828][ T197] loop0: lost filesystem error report for type 5 error -117 [ 176.385742][ T8298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.387928][ T8298] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.494988][ T8298] EXT4-fs (loop0): shut down requested (2) [ 176.587183][ T8288] loop2: detected capacity change from 0 to 32768 [ 176.599073][ T8288] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.913 (8288) [ 176.628055][ T8288] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 176.628089][ T8288] BTRFS info (device loop2): using crc32c checksum algorithm [ 176.671672][ T5641] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.876297][ T8288] BTRFS info (device loop2): enabling ssd optimizations [ 176.876327][ T8288] BTRFS info (device loop2): turning on flush-on-commit [ 176.876346][ T8288] BTRFS info (device loop2): enabling free space tree [ 176.876365][ T8288] BTRFS info (device loop2): enabling auto defrag [ 176.876384][ T8288] BTRFS info (device loop2): use lzo compression, level 1 [ 176.876406][ T8288] BTRFS info (device loop2): max_inline set to 4096 [ 176.987772][ T8288] BTRFS critical (device loop2 state EH): emergency shutdown [ 177.145715][ T5634] BTRFS info (device loop2 state EH): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 177.751279][ T8348] loop3: detected capacity change from 0 to 4096 [ 177.901849][ T8348] ntfs3(loop3): Failed to load $Extend (-22). [ 177.901876][ T8348] ntfs3(loop3): Failed to initialize $Extend. [ 178.072112][ T8364] netlink: 24 bytes leftover after parsing attributes in process `syz.6.938'. [ 178.151586][ T8364] netlink: 24 bytes leftover after parsing attributes in process `syz.6.938'. [ 178.179441][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 178.179463][ T30] audit: type=1400 audit(1792811846.862:121): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/:o" pid=8368 comm="syz.2.941" [ 178.407351][ T8371] ucsi_ccg 0-0008: ucsi_ccg_init failed - -110 [ 178.408058][ T8371] ucsi_ccg 0-0008: probe with driver ucsi_ccg failed with error -110 [ 178.408541][ T8371] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08 [ 178.630926][ T8387] loop0: detected capacity change from 0 to 128 [ 178.705581][ T8388] loop5: detected capacity change from 0 to 512 [ 178.706535][ T8388] EXT4-fs: Ignoring removed nobh option [ 178.757465][ T8388] EXT4-fs error (device loop5) in ext4_process_orphan:346: Out of memory [ 178.757494][ T8388] loop5: lost filesystem error report for type 5 error -12 [ 178.772296][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 178.772320][ C1] EXT4-fs (loop5): initial error at time 1792811847: ext4_process_orphan:346 [ 178.772347][ C1] EXT4-fs (loop5): last error at time 1792811847: ext4_process_orphan:346 [ 178.773848][ T8388] EXT4-fs (loop5): 2 truncates cleaned up [ 178.807787][ T8388] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.852420][ T5779] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 178.940182][ T8388] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.947: bg 0: block 5: invalid block bitmap [ 178.948595][ T8388] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 45 with max blocks 1 with error 28 [ 178.948627][ T8388] EXT4-fs (loop5): This should not happen!! Data will be lost [ 178.948627][ T8388] [ 178.948644][ T8388] EXT4-fs (loop5): Total free blocks count 0 [ 178.948660][ T8388] EXT4-fs (loop5): Free/Dirty block details [ 178.948676][ T8388] EXT4-fs (loop5): free_blocks=0 [ 178.948692][ T8388] EXT4-fs (loop5): dirty_blocks=2 [ 178.948707][ T8388] EXT4-fs (loop5): Block reservation details [ 178.948721][ T8388] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 179.130715][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.131093][ T8402] loop1: detected capacity change from 0 to 2048 [ 179.198346][ T8402] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.198460][ T8402] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.329287][ T5633] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.643391][ T8424] loop0: detected capacity change from 0 to 16 [ 179.663484][ T8424] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 179.681128][ T8419] loop1: detected capacity change from 0 to 4096 [ 179.808808][ T8429] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 180.203159][ T8443] loop0: detected capacity change from 0 to 256 [ 180.211258][ T8443] exfat: Deprecated parameter 'utf8' [ 180.211280][ T8443] exfat: Deprecated parameter 'utf8' [ 180.211380][ T8443] exfat: Deprecated parameter 'utf8' [ 180.211406][ T8443] exfat: Deprecated parameter 'namecase' [ 180.217710][ T8438] loop2: detected capacity change from 0 to 4096 [ 180.391866][ T8443] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 180.445088][ T8444] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 180.576127][ T8438] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean [ 180.960098][ T8450] netlink: 92 bytes leftover after parsing attributes in process `syz.0.973'. [ 181.158518][ T8441] loop6: detected capacity change from 0 to 131072 [ 181.197154][ T8441] F2FS-fs (loop6): invalid crc value [ 181.248136][ T8458] pimreg: tun_chr_ioctl cmd 2147767511 [ 181.276702][ T8441] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 181.283308][ T29] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 181.283332][ T29] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=12) [ 181.290219][ T8441] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 181.300530][ T29] Remounting filesystem read-only [ 181.300543][ T29] NILFS (loop1): error -5 truncating bmap (ino=12) [ 181.583801][ T5867] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 181.733439][ T5867] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 181.751660][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.751696][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.751738][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.790615][ T5867] usb 1-1: config 0 descriptor?? [ 182.116246][ T1110] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.218896][ T5867] hid_parser_main: 30 callbacks suppressed [ 182.218923][ T5867] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 182.218949][ T5867] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 182.218972][ T5867] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 182.218995][ T5867] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 182.219018][ T5867] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 182.274708][ T5867] playstation 0003:054C:0DF2.0007: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 182.342015][ T1110] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.524597][ T1110] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.626516][ T5867] playstation 0003:054C:0DF2.0007: Failed to retrieve feature with reportID 32: -71 [ 182.626546][ T5867] playstation 0003:054C:0DF2.0007: Failed to retrieve DualSense firmware info: -71 [ 182.626599][ T5867] playstation 0003:054C:0DF2.0007: Failed to get firmware info from DualSense [ 182.626614][ T5867] playstation 0003:054C:0DF2.0007: Failed to create dualsense. [ 182.672046][ T5867] playstation 0003:054C:0DF2.0007: probe with driver playstation failed with error -71 [ 182.686746][ T5867] usb 1-1: USB disconnect, device number 4 [ 182.758681][ T8486] program syz.3.991 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.771573][ T30] audit: type=1807 audit(1792811851.442:122): action=measure func=FILE_CHECK res=1 [ 182.797487][ T1110] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.799903][ T8482] ima: policy update completed [ 182.811908][ T30] audit: type=1802 audit(1792811851.482:123): pid=8482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.1.990" res=1 errno=0 [ 182.881737][ T4944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 182.896098][ T4944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 182.896821][ T4944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 182.897782][ T4944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 182.898410][ T4944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 182.914609][ T30] audit: type=1800 audit(1792811851.592:124): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=161317 res=0 errno=-22 [ 182.928346][ T30] audit: type=1800 audit(1792811851.602:125): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=161328 res=0 errno=-22 [ 182.936739][ T30] audit: type=1800 audit(1792811851.622:126): pid=5652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=161347 res=0 errno=-22 [ 182.947339][ T30] audit: type=1800 audit(1792811851.642:127): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=161358 res=0 errno=-22 [ 183.152995][ T30] audit: type=1800 audit(1792811851.842:128): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31171 res=0 errno=-22 [ 183.180526][ T30] audit: type=1800 audit(1792811851.852:129): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31194 res=0 errno=-22 [ 183.204272][ T30] audit: type=1800 audit(1792811851.892:130): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=161370 res=0 errno=-22 [ 183.229368][ T30] audit: type=1800 audit(1792811851.902:131): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=161375 res=0 errno=-22 [ 183.234695][ T30] audit: type=1800 audit(1792811851.922:132): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=161379 res=0 errno=-22 [ 183.234747][ T30] audit: type=1800 audit(1792811851.922:133): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=161378 res=0 errno=-22 [ 183.247618][ T30] audit: type=1800 audit(1792811851.922:134): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=161381 res=0 errno=-22 [ 183.269625][ T30] audit: type=1800 audit(1792811851.952:135): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=161464 res=0 errno=-22 [ 183.280340][ T30] audit: type=1800 audit(1792811851.972:136): pid=5652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=161469 res=0 errno=-22 [ 183.300029][ T30] audit: type=1800 audit(1792811851.992:137): pid=5652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=161473 res=0 errno=-22 [ 183.300907][ T30] audit: type=1800 audit(1792811851.992:138): pid=5652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=161472 res=0 errno=-22 [ 183.311594][ T30] audit: type=1800 audit(1792811851.992:139): pid=5652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=161475 res=0 errno=-22 [ 183.491680][ T1110] bridge_slave_1: left allmulticast mode [ 183.491709][ T1110] bridge_slave_1: left promiscuous mode [ 183.492987][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.527072][ T1110] bridge_slave_0: left allmulticast mode [ 183.527098][ T1110] bridge_slave_0: left promiscuous mode [ 183.527315][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.569940][ T8503] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 183.573441][ T5779] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 183.723174][ T5779] usb 6-1: New USB device found, idVendor=047e, idProduct=ffff, bcdDevice= 0.00 [ 183.723723][ T5779] usb 6-1: config 0 has no interfaces? [ 183.723758][ T5779] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.761957][ T5779] usb 6-1: config 0 descriptor?? [ 183.948596][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.968591][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.982864][ T1110] bond0 (unregistering): Released all slaves [ 183.988285][ T5779] usb 6-1: USB disconnect, device number 6 [ 184.042959][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1003'. [ 184.106288][ T1110] tipc: Disabling bearer [ 184.109752][ T1110] tipc: Left network mode [ 184.903829][ T5635] Bluetooth: hci2: command tx timeout [ 185.009740][ T8539] loop3: detected capacity change from 0 to 4096 [ 185.138131][ T8539] ntfs3(loop3): Failed to load $Extend (-22). [ 185.138160][ T8539] ntfs3(loop3): Failed to initialize $Extend. [ 185.248225][ T8488] rxe_eth0 speed is unknown, defaulting to 1000 [ 185.812242][ T1110] hsr_slave_0: left promiscuous mode [ 185.831020][ T1110] hsr_slave_1: left promiscuous mode [ 185.846217][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.846243][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.851968][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.851990][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.938724][ T1110] veth1_macvtap: left promiscuous mode [ 185.938769][ T1110] veth0_macvtap: left promiscuous mode [ 185.938879][ T1110] veth1_vlan: left promiscuous mode [ 185.941297][ T1110] veth0_vlan: left promiscuous mode [ 186.479669][ T8588] loop0: detected capacity change from 0 to 1024 [ 186.540673][ T8588] UBIFS error (pid: 8588): cannot open "c:::", error -22 [ 186.656932][ T8593] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1028'. [ 186.656967][ T8593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1028'. [ 186.872432][ T8595] loop0: detected capacity change from 0 to 512 [ 186.954275][ T8595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.954384][ T8595] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.982508][ T5635] Bluetooth: hci2: command tx timeout [ 187.004180][ T8591] loop3: detected capacity change from 0 to 32768 [ 187.051879][ T8591] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 187.069028][ T1110] team0 (unregistering): Port device team_slave_1 removed [ 187.147310][ T8591] XFS (loop3): Starting recovery (logdev: internal) [ 187.162834][ T1110] team0 (unregistering): Port device team_slave_0 removed [ 187.227541][ T8591] XFS (loop3): Ending recovery (logdev: internal) [ 187.267615][ T5641] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.387445][ T5638] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 187.741256][ T5288] 8021q: adding VLAN 0 to HW filter on device eth5 [ 188.352008][ T8642] loop0: detected capacity change from 0 to 256 [ 188.381465][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 188.381482][ T30] audit: type=1800 audit(1792811857.062:166): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14852 res=0 errno=-22 [ 188.422077][ T8642] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9435e31, utbl_chksum : 0xe619d30d) [ 188.497120][ T8642] exFAT-fs (loop0): valid_size(150994954) is greater than size(10) [ 188.711718][ T8655] loop6: detected capacity change from 0 to 8 [ 188.730424][ T30] audit: type=1800 audit(1792811857.412:167): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15590 res=0 errno=-22 [ 188.830937][ T30] audit: type=1800 audit(1792811857.512:168): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15590 res=0 errno=-22 [ 189.022067][ T8658] loop0: detected capacity change from 0 to 512 [ 189.058743][ T8658] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 189.058761][ T8658] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 189.062443][ T5635] Bluetooth: hci2: command tx timeout [ 189.095334][ T8658] EXT4-fs (loop0): 1 truncate cleaned up [ 189.101618][ T8658] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.173231][ T30] audit: type=1800 audit(1792811857.852:169): pid=8658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1046" name="file1" dev="loop0" ino=15 res=0 errno=-22 [ 189.286129][ T8488] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.289624][ T8488] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.289764][ T8488] bridge_slave_0: entered allmulticast mode [ 189.299975][ T8488] bridge_slave_0: entered promiscuous mode [ 189.322462][ T8488] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.322572][ T8488] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.322701][ T8488] bridge_slave_1: entered allmulticast mode [ 189.340711][ T8488] bridge_slave_1: entered promiscuous mode [ 189.431343][ T5641] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.596117][ T8488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.621852][ T8488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.858224][ T8488] team0: Port device team_slave_0 added [ 189.890609][ T8488] team0: Port device team_slave_1 added [ 189.964026][ T8488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.964048][ T8488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.964079][ T8488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.967766][ T8488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.967783][ T8488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.967814][ T8488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.075849][ T5288] 8021q: adding VLAN 0 to HW filter on device eth6 [ 190.126688][ T8488] hsr_slave_0: entered promiscuous mode [ 190.127724][ T8488] hsr_slave_1: entered promiscuous mode [ 190.129986][ T8488] debugfs: 'hsr0' already exists in 'hsr' [ 190.130007][ T8488] Cannot create hsr debugfs directory [ 190.376318][ T30] audit: type=1800 audit(1792811859.062:170): pid=8488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24498 res=0 errno=-13 [ 190.446190][ T30] audit: type=1800 audit(1792811859.132:171): pid=8700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1062" name="available_clocksource" dev="sysfs" ino=4902 res=0 errno=-22 [ 190.629484][ T30] audit: type=1800 audit(1792811859.312:172): pid=8706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1065" name="dbroot" dev="configfs" ino=18602 res=0 errno=-22 [ 190.845045][ T8716] device-mapper: table: 248:2: thin: Error opening origin device (-ENOENT) [ 190.845084][ T8716] device-mapper: ioctl: error adding target to table [ 190.988257][ T8722] input: syz0 as /devices/virtual/input/input7 [ 190.990078][ T30] audit: type=1800 audit(1792811859.672:173): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=170682 res=0 errno=-22 [ 191.012361][ T30] audit: type=1800 audit(1792811859.682:174): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=170697 res=0 errno=-22 [ 191.012418][ T30] audit: type=1800 audit(1792811859.682:175): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=170700 res=0 errno=-22 [ 191.105973][ T8730] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 191.143879][ T5635] Bluetooth: hci2: command tx timeout [ 191.892221][ T8488] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 191.925580][ T8488] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 191.927112][ T8488] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 191.970650][ T8488] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 191.971607][ T8488] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 192.003673][ T8488] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 192.016011][ T8488] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 192.055859][ T8488] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 192.300454][ T8765] loop3: detected capacity change from 0 to 512 [ 192.334848][ T8765] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 192.334872][ T8765] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002] [ 192.335956][ T8765] EXT4-fs (loop3): orphan cleanup on readonly fs [ 192.380242][ T8765] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.1081: bg 0: block 15: invalid block bitmap [ 192.380278][ T8765] loop3: lost filesystem error report for type 5 error -117 [ 192.382311][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 192.382333][ C0] EXT4-fs (loop3): initial error at time 1792811861: ext4_validate_block_bitmap:436 [ 192.382360][ C0] EXT4-fs (loop3): last error at time 1792811861: ext4_validate_block_bitmap:436 [ 192.456388][ T8765] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 192.456415][ T8765] loop3: lost filesystem error report for type 5 error -117 [ 192.457027][ T8765] EXT4-fs (loop3): 1 truncate cleaned up [ 192.472766][ T8765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 192.529233][ T8765] EXT4-fs (loop3): shut down requested (1) [ 192.652192][ T5638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.763037][ T8488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.873253][ T8488] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.873736][ T8783] cougar: G6 mapped to space [ 192.896521][ T197] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.896630][ T197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.957147][ T197] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.957260][ T197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.584606][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 193.584627][ T30] audit: type=1800 audit(1792811862.272:191): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=171171 res=0 errno=-22 [ 193.625120][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.009529][ T8821] mmap: syz.1.1099 (8821) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 194.459615][ T8807] loop6: detected capacity change from 0 to 131072 [ 194.510927][ T8807] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0) [ 194.510958][ T8807] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 194.515445][ T8807] F2FS-fs (loop6): invalid crc value [ 194.589253][ T8807] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 194.596862][ T8807] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 194.596886][ T8807] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 194.637711][ T30] audit: type=1800 audit(1792811863.322:192): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15590 res=0 errno=-22 [ 195.041004][ T8844] nbd0: detected capacity change from 0 to 63 [ 195.059472][ T5635] block nbd0: Receive control failed (result -104) [ 195.307104][ T5635] Bluetooth: hci4: unexpected event 0x04 length: 11 > 10 [ 195.848708][ T8488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.056006][ T8488] veth0_vlan: entered promiscuous mode [ 196.086569][ T8488] veth1_vlan: entered promiscuous mode [ 196.165904][ T8488] veth0_macvtap: entered promiscuous mode [ 196.184743][ T8488] veth1_macvtap: entered promiscuous mode [ 196.242096][ T8488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.266763][ T8884] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1114'. [ 196.287402][ T8488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.322884][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.325267][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.326560][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.336855][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.458257][ T30] audit: type=1800 audit(1792811865.142:193): pid=8891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1118" name="remove" dev="sysfs" ino=2658 res=0 errno=-13 [ 196.659911][ T30] audit: type=1800 audit(1792811865.342:194): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=171421 res=0 errno=-22 [ 196.737766][ T8900] loop1: detected capacity change from 0 to 512 [ 196.758431][ T30] audit: type=1800 audit(1792811865.442:195): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14975 res=0 errno=-22 [ 196.800724][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.800746][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.823252][ T5779] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 196.827737][ T30] audit: type=1800 audit(1792811865.512:196): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14975 res=0 errno=-22 [ 196.831887][ T30] audit: type=1800 audit(1792811865.512:197): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=171554 res=0 errno=-22 [ 196.983787][ T5779] usb 6-1: New USB device found, idVendor=150a, idProduct=1201, bcdDevice= 0.00 [ 196.984942][ T5779] usb 6-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 196.984986][ T5779] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 196.985047][ T5779] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 196.985079][ T5779] usb 6-1: config 0 interface 0 has no altsetting 0 [ 196.985115][ T5779] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.002639][ T5779] usb 6-1: config 0 descriptor?? [ 197.025498][ T30] audit: type=1800 audit(1792811865.702:198): pid=6963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=171669 res=0 errno=-22 [ 197.061357][ T30] audit: type=1800 audit(1792811865.722:199): pid=6963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=171698 res=0 errno=-22 [ 197.081288][ T30] audit: type=1800 audit(1792811865.762:200): pid=6963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=171676 res=0 errno=-22 [ 197.140263][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.140287][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.382956][ T5635] Bluetooth: hci4: command tx timeout [ 197.439266][ T5779] tivo_slide 0003:150A:1201.0008: ignoring exceeding usage max [ 197.460071][ T5779] tivo_slide 0003:150A:1201.0008: hidraw0: USB HID v0.11 Joystick [HID 150a:1201] on usb-dummy_hcd.5-1/input0 [ 197.661302][ T5779] usb 6-1: USB disconnect, device number 7 [ 197.708848][ T8914] fido_id[8914]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:150A:1201.0008/report_descriptor': No such device [ 197.763197][ T8918] caif0: tun_chr_ioctl cmd 2148553947 [ 198.013581][ T8905] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 198.104175][ T968] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 198.263102][ T968] usb 7-1: unable to get BOS descriptor or descriptor too short [ 198.263157][ T968] usb 7-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice=73.9f [ 198.267729][ T968] usb 7-1: config 2 has an invalid interface number: 69 but max is 0 [ 198.267757][ T968] usb 7-1: config 2 has no interface number 0 [ 198.267788][ T968] usb 7-1: config 2 interface 69 has no altsetting 0 [ 198.276551][ T968] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.276579][ T968] usb 7-1: Product: syz [ 198.276596][ T968] usb 7-1: Manufacturer: syz [ 198.276618][ T968] usb 7-1: SerialNumber: syz [ 198.616281][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 198.616329][ T30] audit: type=1800 audit(1792811867.302:218): pid=8949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1133" name="address_bits" dev="sysfs" ino=11 res=0 errno=-22 [ 198.617251][ T30] audit: type=1800 audit(1792811867.302:219): pid=8950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1134" name="add_local_port" dev="sysfs" ino=21771 res=0 errno=-13 [ 198.629085][ T8949] kernel read not supported for file /S;v_,Ly"AY71Q,?TGY (pid: 8949 comm: syz.3.1133) [ 198.629554][ T30] audit: type=1800 audit(1792811867.312:220): pid=8949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1133" name=53A4C73BC9FCBA768D5F911906E8D1CCDFF6BA9FCD2C84084C1CEE79BA1082D92241985907BABF3731AA5181102C3F549747BEECBE59 dev="mqueue" ino=19791 res=0 errno=-22 [ 198.750054][ T968] snd_usb_podhd 7-1:2.69: Line 6 POD HD300 found [ 198.940105][ T968] snd_usb_podhd 7-1:2.69: cannot get proper max packet size [ 198.940324][ T968] snd_usb_podhd 7-1:2.69: Line 6 POD HD300 now disconnected [ 198.948593][ T968] snd_usb_podhd 7-1:2.69: probe with driver snd_usb_podhd failed with error -22 [ 198.958982][ T30] audit: type=1800 audit(1792811867.642:221): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=171940 res=0 errno=-22 [ 198.964482][ T30] audit: type=1800 audit(1792811867.652:222): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=171941 res=0 errno=-22 [ 198.969163][ T30] audit: type=1800 audit(1792811867.652:223): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=171920 res=0 errno=-22 [ 198.971846][ T30] audit: type=1800 audit(1792811867.652:224): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=171942 res=0 errno=-22 [ 198.991381][ T30] audit: type=1800 audit(1792811867.672:225): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=171963 res=0 errno=-22 [ 199.129056][ T5798] usb 7-1: USB disconnect, device number 3 [ 199.186307][ T8966] loop0: detected capacity change from 0 to 4096 [ 199.206961][ T30] audit: type=1800 audit(1792811867.892:226): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14852 res=0 errno=-22 [ 199.211727][ T8966] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 199.213002][ T8966] ntfs3(loop0): ino=3, mi_enum_attr [ 199.315105][ T30] audit: type=1800 audit(1792811867.992:227): pid=8973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1144" name="cur_state" dev="sysfs" ino=5709 res=0 errno=-22 [ 199.376340][ T8971] loop1: detected capacity change from 0 to 2048 [ 199.424687][ T8966] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 199.500004][ T8971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.657579][ T5633] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.769988][ T8986] loop5: detected capacity change from 0 to 1024 [ 199.790688][ T8986] EXT4-fs (loop5): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 199.881430][ T8986] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.900905][ T8992] loop3: detected capacity change from 0 to 2048 [ 199.982983][ T8992] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 200.050027][ T8986] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.1150: bg 0: block 153: padding at end of block bitmap is not set [ 200.291014][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.376343][ T8994] loop1: detected capacity change from 0 to 32768 [ 200.414417][ T8994] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 200.517262][ T8994] XFS (loop1): Ending clean mount [ 200.533975][ T9014] rB: renamed from lo (while UP) [ 200.554198][ T8994] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 200.672524][ T5798] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 200.735346][ T5633] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 200.834526][ T5798] usb 3-1: unable to get BOS descriptor or descriptor too short [ 200.834581][ T5798] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 200.849589][ T5798] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.863488][ T5798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 200.863521][ T5798] usb 3-1: Product: syz [ 200.863539][ T5798] usb 3-1: Manufacturer: syz [ 201.027086][ T5798] uvcvideo 3-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 201.248667][ T9040] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.319048][ T5798] uvcvideo 3-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 201.396134][ T5798] videodev: could not get a free minor [ 201.396153][ T5798] uvcvideo 3-1:1.1: Failed to register meta-cap device (-23). [ 201.549876][ T5772] usb 3-1: USB disconnect, device number 4 [ 201.639771][ T9055] loop5: detected capacity change from 0 to 128 [ 201.661253][ T9056] loop1: detected capacity change from 0 to 2048 [ 201.670075][ T9055] FAT-fs (loop5): Directory bread(block 1048) failed [ 201.670108][ T9055] FAT-fs (loop5): Directory bread(block 1049) failed [ 201.670135][ T9055] FAT-fs (loop5): Directory bread(block 1050) failed [ 201.670162][ T9055] FAT-fs (loop5): Directory bread(block 1051) failed [ 201.670193][ T9055] FAT-fs (loop5): Directory bread(block 1052) failed [ 201.670220][ T9055] FAT-fs (loop5): Directory bread(block 1053) failed [ 201.670247][ T9055] FAT-fs (loop5): Directory bread(block 1054) failed [ 201.670273][ T9055] FAT-fs (loop5): Directory bread(block 1055) failed [ 201.718361][ T9056] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.875201][ T9055] FAT-fs (loop5): FAT read failed (blocknr 128) [ 202.589943][ T9083] loop2: detected capacity change from 0 to 164 [ 203.016502][ T9099] vivid-000: disconnect [ 203.043131][ T9091] vivid-000: reconnect [ 203.781312][ T9117] ip6gretap0: entered promiscuous mode [ 203.792943][ T9117] batadv0: entered promiscuous mode [ 203.827948][ T9097] loop0: detected capacity change from 0 to 131072 [ 203.829793][ T9097] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 203.829820][ T9097] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 203.831708][ T9097] F2FS-fs (loop0): invalid crc value [ 203.865234][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 203.865255][ T30] audit: type=1800 audit(1792811872.542:288): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14852 res=0 errno=-22 [ 203.952406][ T9097] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 203.967045][ T9097] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 203.967080][ T9097] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 204.003879][ T9117] ip6gretap0: left promiscuous mode [ 204.040937][ T9117] batadv0: left promiscuous mode [ 204.137119][ T9129] loop3: detected capacity change from 0 to 4096 [ 204.138240][ T9129] EXT4-fs: Ignoring removed nobh option [ 204.138311][ T9129] EXT4-fs: Ignoring removed bh option [ 204.184543][ T9129] EXT4-fs (loop3): Test dummy encryption mode enabled [ 204.258456][ T9129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.320773][ T30] audit: type=1800 audit(1792811873.002:289): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15221 res=0 errno=-22 [ 204.443241][ T9129] EXT4-fs: Cannot change journaled quota options when quota turned on [ 204.677520][ T5638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.560945][ T30] audit: type=1800 audit(1792811874.242:290): pid=9163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1220" name="phram" dev="sysfs" ino=59144 res=0 errno=-13 [ 205.598646][ T9163] phram: illegal erasesize or len [ 205.922095][ T9145] loop3: detected capacity change from 0 to 32768 [ 205.936793][ T9145] xfs: Deprecated parameter 'noattr2' [ 205.936818][ T9145] XFS: noattr2 mount option is deprecated. [ 205.982731][ T9145] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 206.059863][ T9145] XFS (loop3): Ending clean mount [ 206.455556][ T5638] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 206.760718][ T30] audit: type=1800 audit(1792811875.442:291): pid=9195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1231" name="threaded" dev="sysfs" ino=153771 res=0 errno=-22 [ 206.890986][ T9201] loop1: detected capacity change from 0 to 256 [ 206.951044][ T9201] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204323ec, utbl_chksum : 0xe619d30d) [ 206.965337][ T30] audit: type=1800 audit(1792811875.642:292): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14975 res=0 errno=-22 [ 207.108882][ T30] audit: type=1800 audit(1792811875.792:293): pid=9206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1238" name="reclaim" dev="sysfs" ino=1147 res=0 errno=-13 [ 207.425256][ T9221] loop2: detected capacity change from 0 to 1024 [ 207.454383][ T9217] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.497660][ T30] audit: type=1800 audit(1792811876.182:294): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15098 res=0 errno=-22 [ 207.568415][ T30] audit: type=1800 audit(1792811876.252:295): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157957 res=0 errno=-22 [ 207.571301][ T30] audit: type=1800 audit(1792811876.252:296): pid=6963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=157962 res=0 errno=-22 [ 207.583530][ T9225] loop3: detected capacity change from 0 to 2048 [ 207.616831][ T30] audit: type=1800 audit(1792811876.252:297): pid=6963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=157966 res=0 errno=-22 [ 207.719217][ T9225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.810960][ T9230] loop1: detected capacity change from 0 to 1024 [ 207.981714][ T5638] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 208.050026][ T9239] ipvlan2: entered promiscuous mode [ 208.078847][ T9239] team0: Device ipvlan2 failed to register rx_handler [ 208.141736][ T5638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.702495][ T5779] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 208.837280][ T5867] kernel write not supported for file /input/event0 (pid: 5867 comm: kworker/0:7) [ 208.855417][ T5779] usb 7-1: New USB device found, idVendor=15a4, idProduct=9035, bcdDevice= 2.00 [ 208.856576][ T5779] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.856624][ T5779] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 208.856669][ T5779] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.910878][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 208.910898][ T30] audit: type=1800 audit(1792811877.592:303): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172821 res=0 errno=-22 [ 208.940494][ T30] audit: type=1800 audit(1792811877.602:304): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=172850 res=0 errno=-22 [ 208.940548][ T30] audit: type=1800 audit(1792811877.602:305): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=172828 res=0 errno=-22 [ 208.962064][ T30] audit: type=1800 audit(1792811877.632:306): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=172829 res=0 errno=-22 [ 208.994688][ T30] audit: type=1800 audit(1792811877.652:307): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=172830 res=0 errno=-22 [ 209.034464][ T30] audit: type=1800 audit(1792811877.712:308): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172870 res=0 errno=-22 [ 209.178757][ T5779] usb 7-1: dvb_usb_v2: usb_bulk_msg() write length=12, actual=0 [ 209.178856][ T5779] dvb_usb_af9035 7-1:1.0: probe with driver dvb_usb_af9035 failed with error -5 [ 209.305985][ T9292] Zero length message leads to an empty skb [ 209.395494][ T9302] ieee802154 phy1 wpan1: encryption failed: -22 [ 209.568898][ T9301] sctp: [Deprecated]: syz.1.1273 (pid 9301) Use of int in maxseg socket option. [ 209.568898][ T9301] Use struct sctp_assoc_value instead [ 209.857575][ T5288] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 210.191263][ T9329] loop2: detected capacity change from 0 to 1024 [ 210.270980][ T30] audit: type=1800 audit(1792811878.952:309): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15098 res=0 errno=-22 [ 210.739828][ T9344] loop2: detected capacity change from 0 to 4096 [ 210.840476][ T30] audit: type=1800 audit(1792811879.522:310): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15098 res=0 errno=-22 [ 210.854156][ T9354] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.927902][ T9356] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 210.927941][ T9356] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.068604][ T5642] Bluetooth: hci1: command 0x0406 tx timeout [ 211.068635][ T5644] Bluetooth: hci4: command 0x0406 tx timeout [ 211.078673][ T5642] Bluetooth: hci5: command 0x0406 tx timeout [ 211.101134][ T9363] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 211.112426][ T30] audit: type=1800 audit(1792811879.792:311): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=173060 res=0 errno=-22 [ 211.364767][ T9377] loop0: detected capacity change from 0 to 16 [ 211.405843][ T9377] erofs (device loop0): mounted with root inode @ nid 36. [ 211.421567][ T30] audit: type=1800 audit(1792811880.102:312): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14852 res=0 errno=-22 [ 211.484287][ T9377] syz.0.1308: attempt to access beyond end of device [ 211.484287][ T9377] loop0: rw=8912896, sector=1342177272, nr_sectors = 32 limit=16 [ 211.498630][ T9377] syz.0.1308: attempt to access beyond end of device [ 211.498630][ T9377] loop0: rw=8388608, sector=1342177272, nr_sectors = 8 limit=16 [ 211.519533][ T9377] syz.0.1308: attempt to access beyond end of device [ 211.519533][ T9377] loop0: rw=524288, sector=1342177304, nr_sectors = 64 limit=16 [ 211.545089][ T9377] syz.0.1308: attempt to access beyond end of device [ 211.545089][ T9377] loop0: rw=8388608, sector=1342177280, nr_sectors = 8 limit=16 [ 211.545400][ T9377] syz.0.1308: attempt to access beyond end of device [ 211.545400][ T9377] loop0: rw=8388608, sector=1342177280, nr_sectors = 8 limit=16 [ 211.656423][ T5780] usb 7-1: USB disconnect, device number 4 [ 211.798216][ T9387] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 211.798251][ T9387] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 211.798262][ T9387] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 211.798296][ T9387] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 212.528334][ T9415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1324'. [ 212.631309][ T9381] loop3: detected capacity change from 0 to 32768 [ 212.682143][ T9381] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 212.725203][ T968] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 212.773030][ T9381] XFS (loop3): Ending clean mount [ 212.878769][ T5638] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 212.897814][ T968] usb 3-1: Using ep0 maxpacket: 16 [ 212.910532][ T968] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 212.911828][ T968] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 212.913514][ T968] usb 3-1: config 0 has no interface number 0 [ 212.913562][ T968] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.913594][ T968] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.913638][ T968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.983508][ T968] usb 3-1: config 0 descriptor?? [ 213.223531][ T9441] loop3: detected capacity change from 0 to 1024 [ 213.270419][ T9443] loop6: detected capacity change from 0 to 512 [ 213.298511][ T9443] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.1332: bg 0: block 5: invalid block bitmap [ 213.298547][ T9443] loop6: lost filesystem error report for type 5 error -117 [ 213.299279][ T9443] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 213.299302][ T9443] loop6: lost filesystem error report for type 5 error -117 [ 213.300131][ T9443] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1332: invalid indirect mapped block 3 (level 2) [ 213.300166][ T9443] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 213.301785][ T9443] EXT4-fs (loop6): 1 orphan inode deleted [ 213.301806][ T9443] EXT4-fs (loop6): 1 truncate cleaned up [ 213.309275][ T9443] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.506978][ T7227] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.614102][ T968] uclogic 0003:28BD:0071.0009: pen parameters not found [ 213.614132][ T968] uclogic 0003:28BD:0071.0009: interface is invalid, ignoring [ 213.648332][ T968] usb 3-1: USB disconnect, device number 5 [ 214.036016][ T9468] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1343'. [ 214.092133][ T9473] loop6: detected capacity change from 0 to 2640 [ 214.110932][ T9473] buffer_io_error: 25 callbacks suppressed [ 214.110955][ T9473] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.110998][ T9473] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.111029][ T9473] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.111071][ T9473] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.111102][ T9473] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.111148][ T9473] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.111191][ T9473] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.111221][ T9473] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.111238][ T9473] ldm_validate_partition_table(): Disk read failed. [ 214.111266][ T9473] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.111296][ T9473] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.111342][ T9473] Dev loop6: unable to read RDB block 0 [ 214.111524][ T9473] loop6: unable to read partition table [ 214.171755][ T9473] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 214.291673][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 214.291694][ T30] audit: type=1800 audit(1792811882.972:342): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15590 res=0 errno=-22 [ 214.496134][ T9486] input: syz1 as /devices/virtual/input/input9 [ 214.498721][ T30] audit: type=1800 audit(1792811883.182:343): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=173365 res=0 errno=-22 [ 214.510837][ T30] audit: type=1800 audit(1792811883.192:344): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=173380 res=0 errno=-22 [ 214.514355][ T30] audit: type=1800 audit(1792811883.192:345): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=173383 res=0 errno=-22 [ 214.516739][ T30] audit: type=1800 audit(1792811883.192:346): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=173382 res=0 errno=-22 [ 214.521642][ T30] audit: type=1800 audit(1792811883.192:347): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=173381 res=0 errno=-22 [ 214.524380][ T30] audit: type=1800 audit(1792811883.192:348): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=173372 res=0 errno=-22 [ 214.524536][ T30] audit: type=1800 audit(1792811883.192:349): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31271 res=0 errno=-22 [ 214.529720][ T30] audit: type=1800 audit(1792811883.222:350): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=173375 res=0 errno=-22 [ 214.533350][ T30] audit: type=1800 audit(1792811883.222:351): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31294 res=0 errno=-22 [ 214.802775][ T5779] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 214.863484][ T9502] pimreg: entered allmulticast mode [ 214.867503][ T9500] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 214.962349][ T968] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 214.964377][ T5779] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 214.965543][ T5779] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 214.965579][ T5779] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.965618][ T5779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.983318][ T5779] hub 4-1:4.0: USB hub found [ 215.114451][ T968] usb 1-1: Using ep0 maxpacket: 16 [ 215.115177][ T968] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 215.116527][ T968] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.116561][ T968] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.116587][ T968] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 215.116617][ T968] usb 1-1: config 0 interface 0 has no altsetting 0 [ 215.116652][ T968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.121382][ T968] usb 1-1: config 0 descriptor?? [ 215.148392][ T9511] loop2: detected capacity change from 0 to 512 [ 215.182186][ T9511] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.1365: Unrecognised inode hash code 255 [ 215.182222][ T9511] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1365: Corrupt directory, running e2fsck is recommended [ 215.199897][ T5779] hub 4-1:4.0: 2 ports detected [ 215.199952][ T5779] usb 4-1: selecting invalid altsetting 1 [ 215.199969][ T5779] hub 4-1:4.0: Using single TT (err -22) [ 215.258393][ T9516] syz.6.1364 uses obsolete (PF_INET,SOCK_PACKET) [ 215.327215][ T9511] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 215.327318][ T9511] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.1365: corrupted in-inode xattr: invalid ea_ino [ 215.327384][ T9511] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 215.329370][ T9511] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.1365: couldn't read orphan inode 15 (err -117) [ 215.329403][ T9511] loop2: lost filesystem error report for type 5 error -117 [ 215.378557][ T9511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.404281][ T5779] hub 4-1:4.0: config failed, can't get hub status (err -5) [ 215.438354][ T9511] EXT4-fs error (device loop2): __ext4_remount:6882: comm syz.2.1365: Abort forced by user [ 215.440913][ T9511] EXT4-fs (loop2): Remounting filesystem read-only [ 215.440964][ T9511] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 215.454081][ T9511] EXT4-fs warning (device loop2): ext4_empty_dir:3096: inode #2: comm syz.2.1365: directory missing '.' [ 215.521297][ T8488] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.742603][ T5772] usb 4-1: USB disconnect, device number 4 [ 215.791371][ T5779] usb 1-1: USB disconnect, device number 5 [ 215.814302][ T9530] loop2: detected capacity change from 0 to 128 [ 215.836470][ T9530] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 215.848195][ T9530] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 216.047564][ T9537] loop1: detected capacity change from 0 to 512 [ 216.048672][ T9537] EXT4-fs: Ignoring removed nomblk_io_submit option [ 216.048721][ T9537] EXT4-fs: Ignoring removed nomblk_io_submit option [ 216.082216][ T9537] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 216.084404][ T5780] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 216.128264][ T9537] EXT4-fs (loop1): 1 truncate cleaned up [ 216.149051][ T9537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.242438][ T5780] usb 6-1: Using ep0 maxpacket: 16 [ 216.243922][ T5780] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 216.245729][ T5780] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 216.245757][ T5780] usb 6-1: config 0 has no interface number 0 [ 216.245799][ T5780] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 216.245828][ T5780] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 216.249039][ T5780] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.249066][ T5780] usb 6-1: Product: syz [ 216.249083][ T5780] usb 6-1: Manufacturer: syz [ 216.249100][ T5780] usb 6-1: SerialNumber: syz [ 216.372833][ T5780] usb 6-1: config 0 descriptor?? [ 216.374698][ T9531] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 216.374841][ T9531] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 216.406200][ T5633] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.489084][ T9548] loop2: detected capacity change from 0 to 2048 [ 216.543752][ T9548] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 216.591443][ T9531] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 216.591605][ T9531] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 216.719518][ T9555] UDF-fs: error (device loop2): udf_rename: failed to find renamed entry again in directory (ino 1376) [ 216.732377][ T5772] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 216.812897][ T5780] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 216.833264][ T9562] netlink: 9275 bytes leftover after parsing attributes in process `syz.6.1388'. [ 216.835609][ T51] IPVS: starting estimator thread 0... [ 216.885328][ T5772] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 216.886638][ T5772] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.886673][ T5772] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.886704][ T5772] usb 4-1: config 0 interface 0 has no altsetting 0 [ 216.886743][ T5772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.896064][ T5772] usb 4-1: config 0 descriptor?? [ 216.924164][ T9564] IPVS: using max 24 ests per chain, 57600 per kthread [ 217.216534][ T5780] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 217.227278][ T5780] asix 6-1:0.34: probe with driver asix failed with error -71 [ 217.246528][ T5780] usb 6-1: USB disconnect, device number 8 [ 217.306268][ T968] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 217.349932][ T5772] hid-multitouch 0003:0EEF:72C4.000B: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0 [ 217.453496][ T968] usb 3-1: Using ep0 maxpacket: 16 [ 217.455403][ T968] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 217.460875][ T968] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.460910][ T968] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.460936][ T968] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 217.460967][ T968] usb 3-1: config 0 interface 0 has no altsetting 0 [ 217.461003][ T968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.470434][ T968] usb 3-1: config 0 descriptor?? [ 217.588963][ T5772] usb 4-1: USB disconnect, device number 5 [ 217.680829][ T9579] fido_id[9579]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 218.106404][ T968] usb 3-1: USB disconnect, device number 6 [ 218.278190][ T9597] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 218.422894][ T9616] CacheFiles: Failed to register: -95 [ 218.562936][ T5780] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 219.099711][ T9633] loop2: detected capacity change from 0 to 1024 [ 219.155729][ T9633] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 219.155845][ T9633] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.258108][ T9633] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: comm syz.2.1420: lblock 0 mapped to illegal pblock 0 (length 1) [ 219.296748][ T9633] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 219.296782][ T9633] EXT4-fs (loop2): This should not happen!! Data will be lost [ 219.296782][ T9633] [ 219.299880][ T9633] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: comm syz.2.1420: lblock 0 mapped to illegal pblock 0 (length 1) [ 219.519440][ T8488] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 219.625157][ T9624] loop5: detected capacity change from 0 to 131072 [ 219.657594][ T9624] F2FS-fs (loop5): Test dummy encryption mode enabled [ 219.662369][ T5780] usb 7-1: Using ep0 maxpacket: 16 [ 219.663206][ T5780] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 219.668898][ T5780] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.668923][ T5780] usb 7-1: Product: syz [ 219.668940][ T5780] usb 7-1: Manufacturer: syz [ 219.668957][ T5780] usb 7-1: SerialNumber: syz [ 219.715342][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 219.715362][ T30] audit: type=1800 audit(1792811889.408:403): pid=5656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=174385 res=0 errno=-22 [ 219.726770][ T9624] F2FS-fs (loop5): invalid crc value [ 219.747958][ T30] audit: type=1800 audit(1792811889.418:404): pid=5656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=174417 res=0 errno=-22 [ 219.748013][ T30] audit: type=1800 audit(1792811889.418:405): pid=5656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=174392 res=0 errno=-22 [ 219.748066][ T30] audit: type=1800 audit(1792811889.418:406): pid=5656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=174393 res=0 errno=-22 [ 219.835251][ T9624] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 219.836316][ T9624] loop5: lost filesystem error report for type 5 error -117 [ 219.843904][ T9624] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 219.846471][ T9624] F2FS-fs (loop5): f2fs_disable_checkpoint starts, unusable: 0 [ 219.846495][ T9624] F2FS-fs (loop5): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 219.846522][ T9624] F2FS-fs (loop5): Start checkpoint disabled! [ 219.856103][ T9624] F2FS-fs (loop5): f2fs_disable_checkpoint finishes, err:0 [ 219.859175][ T9624] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 219.937132][ T5780] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 219.959902][ T5780] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 219.966956][ T9624] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-lib" [ 219.973627][ T5780] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 219.973680][ T5780] usb 7-1: media controller created [ 220.004607][ T9648] loop2: detected capacity change from 0 to 524287964 [ 220.077839][ T5780] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 220.237825][ T5780] zl10353_read_register: readreg error (reg=127, ret==-71) [ 220.240053][ T9652] program syz.0.1428 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 220.306644][ T9656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1427'. [ 220.470971][ T5780] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 220.481467][ T5780] usb 7-1: USB disconnect, device number 5 [ 220.483019][ T30] audit: type=1800 audit(1792811890.168:407): pid=5656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=174414 res=0 errno=-22 [ 220.483070][ T30] audit: type=1800 audit(1792811890.168:408): pid=5656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=174415 res=0 errno=-22 [ 220.483122][ T30] audit: type=1800 audit(1792811890.168:409): pid=5656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=174394 res=0 errno=-22 [ 220.489343][ T30] audit: type=1800 audit(1792811890.178:410): pid=5656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=174416 res=0 errno=-22 [ 220.598186][ T9662] loop3: detected capacity change from 0 to 256 [ 221.837495][ T9702] loop3: detected capacity change from 0 to 256 [ 221.885525][ T9702] exFAT-fs (loop3): error, no upcase table entry. Please run fsck [ 221.885549][ T9702] exFAT-fs (loop3): Filesystem has been set read-only [ 221.885862][ T9702] exFAT-fs (loop3): failed to test first cluster bit of root dir(5) [ 221.900681][ T30] audit: type=1800 audit(1792811891.588:411): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15221 res=0 errno=-22 [ 221.978003][ T5779] [ 221.980386][ T5779] ====================================================== [ 221.987396][ T5779] WARNING: possible circular locking dependency detected [ 221.994404][ T5779] syzkaller #0 Tainted: G L [ 222.000456][ T5779] ------------------------------------------------------ [ 222.007462][ T5779] kworker/1:4/5779 is trying to acquire lock: [ 222.013514][ T5779] ffffffff916c9528 (rds_trans_sem){++++}-{4:4}, at: rds_trans_get_preferred+0x133/0x3c0 [ 222.023283][ T5779] [ 222.023283][ T5779] but task is already holding lock: [ 222.030755][ T5779] ffff8880339db420 (&id_priv->handler_mutex/1){+.+.}-{4:4}, at: cma_ib_req_handler+0x2dd8/0x50d0 [ 222.041312][ T5779] [ 222.041312][ T5779] which lock already depends on the new lock. [ 222.041312][ T5779] [ 222.051705][ T5779] [ 222.051705][ T5779] the existing dependency chain (in reverse order) is: [ 222.060700][ T5779] [ 222.060700][ T5779] -> #2 (&id_priv->handler_mutex/1){+.+.}-{4:4}: [ 222.069232][ T5779] __mutex_lock+0x197/0x15a0 [ 222.074347][ T5779] cma_ib_req_handler+0x2dd8/0x50d0 [ 222.080079][ T5779] cm_process_work+0x51/0x420 [ 222.085288][ T5779] cm_work_handler+0x96c3/0xdff0 [ 222.090754][ T5779] process_scheduled_works+0xc3d/0x1630 [ 222.096823][ T5779] worker_thread+0xa47/0xfb0 [ 222.101941][ T5779] kthread+0x38b/0x480 [ 222.106534][ T5779] ret_from_fork+0x514/0xb70 [ 222.111646][ T5779] ret_from_fork_asm+0x1a/0x30 [ 222.116929][ T5779] [ 222.116929][ T5779] -> #1 (&id_priv->handler_mutex){+.+.}-{4:4}: [ 222.125276][ T5779] __mutex_lock+0x197/0x15a0 [ 222.130394][ T5779] rdma_destroy_id+0x1b/0x30 [ 222.135498][ T5779] rds_ib_laddr_check+0x397/0x540 [ 222.141050][ T5779] rds_trans_get_preferred+0x179/0x3c0 [ 222.147045][ T5779] rds_bind+0x687/0x870 [ 222.151738][ T5779] __sys_bind+0x2e3/0x410 [ 222.156598][ T5779] __x64_sys_bind+0x7a/0x90 [ 222.161631][ T5779] do_syscall_64+0x166/0x520 [ 222.166737][ T5779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.173155][ T5779] [ 222.173155][ T5779] -> #0 (rds_trans_sem){++++}-{4:4}: [ 222.180633][ T5779] __lock_acquire+0x164c/0x2de0 [ 222.186006][ T5779] lock_acquire+0x115/0x350 [ 222.191027][ T5779] down_read+0x45/0x320 [ 222.195715][ T5779] rds_trans_get_preferred+0x133/0x3c0 [ 222.201730][ T5779] __rds_conn_create+0xa2c/0x2290 [ 222.207288][ T5779] rds_conn_create+0x43/0x60 [ 222.212404][ T5779] rds_ib_cm_handle_connect+0x446/0x1120 [ 222.218558][ T5779] rds_rdma_cm_event_handler_cmn+0x691/0xa30 [ 222.225074][ T5779] cma_cm_event_handler+0xac/0x2c0 [ 222.230708][ T5779] cma_ib_req_handler+0x3440/0x50d0 [ 222.236434][ T5779] cm_process_work+0x51/0x420 [ 222.241638][ T5779] cm_work_handler+0x96c3/0xdff0 [ 222.247103][ T5779] process_scheduled_works+0xc3d/0x1630 [ 222.253174][ T5779] worker_thread+0xa47/0xfb0 [ 222.258335][ T5779] kthread+0x38b/0x480 [ 222.262919][ T5779] ret_from_fork+0x514/0xb70 [ 222.268026][ T5779] ret_from_fork_asm+0x1a/0x30 [ 222.273305][ T5779] [ 222.273305][ T5779] other info that might help us debug this: [ 222.273305][ T5779] [ 222.283517][ T5779] Chain exists of: [ 222.283517][ T5779] rds_trans_sem --> &id_priv->handler_mutex --> &id_priv->handler_mutex/1 [ 222.283517][ T5779] [ 222.297963][ T5779] Possible unsafe locking scenario: [ 222.297963][ T5779] [ 222.305394][ T5779] CPU0 CPU1 [ 222.310742][ T5779] ---- ---- [ 222.316090][ T5779] lock(&id_priv->handler_mutex/1); [ 222.321373][ T5779] lock(&id_priv->handler_mutex); [ 222.328996][ T5779] lock(&id_priv->handler_mutex/1); [ 222.336801][ T5779] rlock(rds_trans_sem); [ 222.341154][ T5779] [ 222.341154][ T5779] *** DEADLOCK *** [ 222.341154][ T5779] [ 222.349281][ T5779] locks held by kworker/1:4/5779: 4, last CPU#1: [ 222.355593][ T5779] #0: ffff888032b32148 ((wq_completion)ib_cm){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 222.366486][ T5779] #1: ffffc900047cfc40 ((work_completion)(&(&work->work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 222.379041][ T5779] #2: ffff88807d019420 (&id_priv->handler_mutex){+.+.}-{4:4}, at: cma_ib_req_handler+0x2188/0x50d0 [ 222.389859][ T5779] #3: ffff8880339db420 (&id_priv->handler_mutex/1){+.+.}-{4:4}, at: cma_ib_req_handler+0x2dd8/0x50d0 [ 222.400858][ T5779] [ 222.400858][ T5779] stack backtrace: [ 222.406741][ T5779] CPU: 1 UID: 0 PID: 5779 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.417756][ T5779] Tainted: [L]=SOFTLOCKUP [ 222.422073][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 222.432122][ T5779] Workqueue: ib_cm cm_work_handler [ 222.437245][ T5779] Call Trace: [ 222.440515][ T5779] [ 222.443438][ T5779] dump_stack_lvl+0xe8/0x150 [ 222.448036][ T5779] print_circular_bug+0x2e2/0x300 [ 222.453083][ T5779] check_noncircular+0x12f/0x150 [ 222.458028][ T5779] __lock_acquire+0x164c/0x2de0 [ 222.462913][ T5779] lock_acquire+0x115/0x350 [ 222.467417][ T5779] ? rds_trans_get_preferred+0x133/0x3c0 [ 222.473064][ T5779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.478698][ T5779] down_read+0x45/0x320 [ 222.482854][ T5779] ? rds_trans_get_preferred+0x133/0x3c0 [ 222.488529][ T5779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.494162][ T5779] rds_trans_get_preferred+0x133/0x3c0 [ 222.499619][ T5779] __rds_conn_create+0xa2c/0x2290 [ 222.504641][ T5779] ? __rds_conn_create+0x2d5/0x2290 [ 222.509846][ T5779] ? __pfx___rds_conn_create+0x10/0x10 [ 222.515302][ T5779] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 222.521448][ T5779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.527073][ T5779] ? arch_stack_walk+0x11b/0x150 [ 222.532007][ T5779] ? ret_from_fork_asm+0x1a/0x30 [ 222.536934][ T5779] rds_conn_create+0x43/0x60 [ 222.541527][ T5779] rds_ib_cm_handle_connect+0x446/0x1120 [ 222.547164][ T5779] ? __pfx_rds_ib_cm_handle_connect+0x10/0x10 [ 222.553221][ T5779] ? __lock_acquire+0x1511/0x2de0 [ 222.558247][ T5779] ? __xas_nomem+0xa4/0x420 [ 222.562743][ T5779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.568366][ T5779] ? __xa_alloc+0x199/0x220 [ 222.572862][ T5779] rds_rdma_cm_event_handler_cmn+0x691/0xa30 [ 222.578846][ T5779] ? __pfx_rds_rdma_cm_event_handler_cmn+0x10/0x10 [ 222.585346][ T5779] ? __entry_text_end+0x102035/0x102039 [ 222.590885][ T5779] ? trace_cm_event_handler+0x81/0x1f0 [ 222.596335][ T5779] ? __pfx_rds_rdma_cm_event_handler+0x10/0x10 [ 222.602488][ T5779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.608109][ T5779] ? cma_listen_handler+0x100/0x160 [ 222.613308][ T5779] cma_cm_event_handler+0xac/0x2c0 [ 222.618416][ T5779] cma_ib_req_handler+0x3440/0x50d0 [ 222.623622][ T5779] ? __pfx_cma_ib_req_handler+0x10/0x10 [ 222.629191][ T5779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.634821][ T5779] ? arch_stack_walk+0x11b/0x150 [ 222.639758][ T5779] ? ret_from_fork_asm+0x1a/0x30 [ 222.644688][ T5779] ? __pfx_stack_trace_save+0x10/0x10 [ 222.650067][ T5779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.655710][ T5779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.661332][ T5779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.666956][ T5779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.672618][ T5779] cm_process_work+0x51/0x420 [ 222.677292][ T5779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.682915][ T5779] ? _raw_spin_unlock_irq+0x2e/0x50 [ 222.688111][ T5779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.693736][ T5779] cm_work_handler+0x96c3/0xdff0 [ 222.698686][ T5779] ? trace_hrtimer_start+0x82/0x200 [ 222.703877][ T5779] ? __pfx_cm_work_handler+0x10/0x10 [ 222.709155][ T5779] ? do_raw_spin_lock+0x12b/0x2f0 [ 222.714186][ T5779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.719829][ T5779] ? lock_acquire+0x115/0x350 [ 222.724498][ T5779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.730127][ T5779] ? rcu_is_watching+0x16/0xb0 [ 222.734885][ T5779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.740510][ T5779] ? process_scheduled_works+0x97a/0x1630 [ 222.746230][ T5779] process_scheduled_works+0xc3d/0x1630 [ 222.751778][ T5779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.757419][ T5779] ? __pfx_process_scheduled_works+0x10/0x10 [ 222.763403][ T5779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.769028][ T5779] ? assign_work+0x3cf/0x5d0 [ 222.773621][ T5779] worker_thread+0xa47/0xfb0 [ 222.778210][ T5779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.783840][ T5779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.789491][ T5779] ? __kthread_parkme+0x71/0x1f0 [ 222.794434][ T5779] kthread+0x38b/0x480 [ 222.798495][ T5779] ? __pfx_worker_thread+0x10/0x10 [ 222.803605][ T5779] ? __pfx_kthread+0x10/0x10 [ 222.808187][ T5779] ret_from_fork+0x514/0xb70 [ 222.812773][ T5779] ? __pfx_ret_from_fork+0x10/0x10 [ 222.817874][ T5779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.823498][ T5779] ? __switch_to+0xc78/0x1410 [ 222.828177][ T5779] ? __pfx_kthread+0x10/0x10 [ 222.832843][ T5779] ret_from_fork_asm+0x1a/0x30 [ 222.837605][ T5779] [ 222.995727][ T968] RDS/IB: Active conn connected <::ffff:172.20.20.170,::ffff:172.20.20.170,0> version 3.1 [ 223.030446][ T968] RDS/IB: Passive conn connected <::ffff:172.20.20.170,::ffff:172.20.20.170,0> version 3.1 [ 225.623761][ T1956] block nbd0: Possible stuck request ffff888028bbe000: control (read@0,1024B). Runtime 30 seconds [ 225.623805][ T1956] block nbd0: Possible stuck request ffff888028bbe1c0: control (read@1024,1024B). Runtime 30 seconds [ 225.623833][ T1956] block nbd0: Possible stuck request ffff888028bbe380: control (read@2048,1024B). Runtime 30 seconds [ 225.623863][ T1956] block nbd0: Possible stuck request ffff888028bbe540: control (read@3072,1024B). Runtime 30 seconds