last executing test programs: 1m6.840359535s ago: executing program 0 (id=158): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$eJzs3M1rXFUfAODfnXz0K23y9u3b923fVqNVLH4kTfphFy5UFAQVBF3UZUzSWjttpInQlqBRpK4L7sWl4NKVOzeiLsQ/QMGlFIoGoakgRO5XOklm0nx22szzwGTOuffce86595zJmXvm3gBaVm/6J4noioifI6I7j85P0Ju/zUxPDt+anhxOYnb29d+TLN3N6cnhMmm53Y4icrgSUfk4iWeTxfmOX75ybqhaHb1YxPsnzr/bP375ylNnzw+dGT0zemHw5MljRweePjF4fN52dXa1yLY6y9J63dz//tiBfS+9ee3V4VPX3vr+y3Rfew/m62vrcUe3FpXi5XrJetOj9sdsZuG6R5ed2f1hZ004aW9iQViRtohIT1dH1v+7oy1un7zuePGjphYO2FDp/6YtjVdPzQKbWBLNLgHQHOU/+vT7b/mKv+/S4OMecOO5iM4iPDM9OTwzdx2gPSrF8o4NzL83Ik5N/fVZ+oqVXocAAFiFbGzz5ILxX6YSe7P3fK5jVzGH0hMR/4qI3RHx74jYExH/icjS/jci/pdvPNu9zPx7F8QXj38q1+uWeZ2k479nasZ+MzX1L9562orYzqz+Hcnps9XRI8UxORwdW9L4wBJ5fPNCZ8N1teO/9JXmX44FiwJcb88v0M3tZGRoYmi9DsKNDyP2t9erfzI3E5C2gH0RsX9lu95VBs4+/sWBRonuXP8lrMM80+znEY/l538qFtS/lDSYn0zb+InB4/1bozp6pL9sFYv98NPV1xrlv6b6r4P0/G+f3/4XpOj+M8nnazuiWh29OL7yPK7+8knD7zQraP9z0vbfmbyRzVn/+Ha+7NLQxMTFgYjO5JUsXnSWrZEuH7y97aUiXqZP63/4UP3+v7vYJq3//yMibcQHI3Y9EBEPFmV/KCIejohDS9T/u+cfeWeJ+ieRRFPP/0jdz7+59t+T1M7XryLQdu7brxvN2y/v/B+LqeyzNpd9/t3Bcgu4xsMHAAAA94VKRHRFUunLw71dUan09eW/4d8T2yvVsfGJJ06PvXdhJL9HoCc6KuWVru6a66EDyVSxxzw+WFwrLtcfLa4bf9q2LYv3DY9VR5pcd2h1O+b3/yj7f+q3tmaXDthwjefRlrg1ANgUFvb/SpPKAdx9y/kdje8CsDnV6f/1nqEBbEKe1wKtq17//2BBfNH43wgBNoXF/f/XOo+sAzYj439oXfo/tC79H1rSWu7rX32gvFlgycRlEeum2brsO/xbJVA+HmYj89oWt5dEJQt0xT1Q99UEupeTOCK+WnNebetQ5rTH3N3jU/PAIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPvYPwEAAP//O47fqw==") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x104) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) capset(0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x40000, 0x8000000, {}, 0x1, 0x1}}) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="642e0f01c50f4ce70f300f01c80f01dfb892000f00d866b95202000066b8868c000066ba000000000f303e660f3881920a00c90fc7ac9c80", 0x38}], 0x1, 0x48, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 32) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) (rerun: 32) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x6c7e, 0x100000005, 0x1000000000000003, 0x4}) 1m6.474049147s ago: executing program 0 (id=160): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280), 0x1, 0x51a, &(0x7f0000000f00)="$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") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0xc, &(0x7f0000000140)={0x0, 0x0}) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) 1m6.272188393s ago: executing program 0 (id=162): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x1, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x40008c1, &(0x7f0000000480)={0x11, 0x0, r3, 0x1, 0x62, 0x6, @broadcast}, 0x14) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f00000002c0)={0x9000000, 0x6}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000640)='pim6reg1\x00', 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x4000000) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 1m4.022906314s ago: executing program 0 (id=176): ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'geneve0\x00', {0x1}, 0x108}) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffff8}, 0x0) syz_emit_ethernet(0x7c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6710000000462f82fe8000000000000000000000000000aaff02000000000000000000000000000904206558000000030c00080000dc0c0086dd886488be0000000415030735010000000004c289080022eb000000012e00397f020000000020000400028515080065580000000328453efe5c414eb884f8f8cc164303da627637b078011fb2f6236bb6b82c8549584db1e065a80679ade8b175218536479b392284a0ea1d362606bd7e2655fb7561f69aaf584a5949ad1b05c5be76050e4c8af421882257a95b56ac3d74581d7df428653b8379e3ae95049aa9fcf3388bd67100c2a93c34e8c0be0e79384c36b951659d59f08bec58e2a4bb096bcda154b2cef9ec1d5ad353"], 0x0) r2 = syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000340)='./bus\x00', 0x20b9020, &(0x7f00000006c0)=ANY=[@ANYRES8=r0, @ANYBLOB="c67b22e180d2e2c2c3a66c50ef628de6900c4e4a050048817065b68e41001f6128e8527d988d5f97d27750bbde4ff576d388ba1c310a22b450d44f61678b22ed97", @ANYBLOB=',rootmode=0000000300000000120000,user_id=', @ANYRESHEX=r0, @ANYRES64, @ANYRESDEC=0x0, @ANYRES32=r0], 0x1, 0x0, &(0x7f0000000840)="ba119479b3d752562f99556fad17e6a4adbe026a59c1512839418e1d31c225051258a2853e1c9d17527a50c5c50194baa113c8fd3090edc04169402f06a824ded4c90e7de7d53e20498218ad853621e2c16228ad74f187d37ed3527cc171d9e73f848df7f3e2ff155d61024a164a9de3ac1ffa447332800b6f2332d3d14e20b2ba2ff2bb210a8a5dc7d279cc1a4d672eb10d06b7440e31f7291f1b257c19f6ea000000a8b35bedc51107542eda1026ac1396f54067d195b9e37e6d81bbbf814120176199f47846fd024460cc16f76ab35218b380f38d87babf28650266f8fbdbd8a991f6f4ec34fb80c20c4f4f2baa01908d3efd79e916ac91a94f2317d8") mknodat(r2, &(0x7f0000000600)='./file0\x00', 0x8000, 0xe62) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x115700, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x304010, &(0x7f0000000780)={[{@noquota}, {@noblock_validity}, {@dax}, {@user_xattr}, {@auto_da_alloc}, {@lazytime, 0x2e}, {@journal_dev={'journal_dev', 0x3d, 0x1fb}}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@dax_always}, {@grpid}], [], 0x2c}, 0x85, 0x4f1, &(0x7f00000009c0)="$eJzs3LtvHNUaAPBvxs887eRG99487o0hICwCduwESEEBCKQ0ICQoQmkcE4U4CUqMRKKIGIRCifgLAiUSEhUNFUgIAQ0gWuhRpAi5iaFAi87ujL221/b6FZPs7yft7jmzZ+bMNzNn5+ycnQ2gZfWlpyxie0T8EhE9tezcAn21l+mpq6N/TF0dzaJSeen3rFru9tTV0bJoOd+2ItOfR+TvZbG/Qb2XLl85OzI+PnaxyA9OnHtj8NLlK4+eOTdyeuz02Pnh48ePHR164vHhx5qK49oy76e4bu97+8KBvSde+fD50Uq8+t2naX23F+/Xx1HT21S9iyu3RqVqdnpn9fnBNS79n2ZHXTpr38QVYUXaIiLtro5q+++JtpjdeT3x3Lszma83aQWBDZPOTbsWTG0rXvPi7AXcmzJtHFpUecZP33/Lx53sf2y2W0+n57Fq/NPF44cXatsmT99le2vf2NvmzZcXr/9usMzuVL42Q6Vnmfq3R8TJyT9vpEc0vA6xhKzpkgAAM75M/Z9HGvX/8jl9m53FGEpvRByOiN0R8a+I2DPTE4r4T0T8d4X1983LL+z//LRlhYtckdT/e7IY2yoftXfKuLKZ3I5q/B3Za2fGx44U26Q/OrpSfmiJOr569ucPFnuvr67/lx6p/rIvWKzHzfbuufOcGpkYWUPIc9x6J2Jfe6P4s5mRgLQF9kbEvlUsP22zMw9/ciCld25b+P7y8S8iKwYu1qjyccRDtf0/GfPir6sq1bTY+ORgd4yPHRksj4qFvv/x+ov1+Y669Jz4u5uLqXu1wTaQ9v/Wecd/bflF/HlR4bzx2skV1HH91/cXjWpO/G1xY3oqi5PFwmtjivnN9q6I2DK72dLx35m9XE13FtPeGpmYuDgU0VlMmDN9eLa+Ml+WT/H3H2rc/ndH/PVRMd/+iEgH8f8i4v8RcbBY9/si4v6IOLRE/N8+88DrS2+hVRz/6yTFf6rh59/M8d+b1Y/XryLRdvabLxarv6nPv65j1VR/MaWZz79mV3At2w4AAADuFnl1DDrLB8p03cWpPbE1H79waeJwX7x5/lRtrLo3OvLySldP3fXQoeLacJkfTunO2fzRiNhV/aXRlmp+YPTC+I7NDByo3qtTtv+uYtrAQO31t/k/egHuPSsaR6v/0dlnn6//ygB3lPs1oXVp/9C6tH9oXdo/tK5G7f9axPQmrApwhzV3/q+43RzuQfr/0Lq0f2hds+3fL/6ghSy8Jb78u5XV3Ok/m9h9Yk2zb3ii0rMhS55c+VxtGxRp1P1px+KFs4hYXRWRL12mMy5f6V6ncNIZaqky5U0rTS8wX7bMU8ttlo41/SdGShwsEl0R0exc15rYp+t3/CSZy34AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBd7e8AAAD//1I03Cw=") r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) fdatasync(0xffffffffffffffff) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x11, &(0x7f0000000040)=0xab, 0x4) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') lstat(&(0x7f00000001c0)='./file1\x00', 0x0) open(&(0x7f00000003c0)='./bus\x00', 0x10440, 0x50) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100001040000000013f0040000000000", @ANYRES32=r4, @ANYBLOB="24200400858d0000240012800e00010069703665727370616e00000010000280080014000800000004001200"], 0x44}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 1m3.802523581s ago: executing program 0 (id=177): r0 = syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000580)={0x40, 0x33, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0x8, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x28, 0x80004, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000440)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect$uac1(0x6, 0xfa, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe8, 0x3, 0x1, 0x92, 0x20, 0xf9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfffe, 0x11}, [@processing_unit={0x7, 0x24, 0x7, 0x6, 0x2, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x800, 0xd3e9, 0x8, "e2299414f74720"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x2, 0x1, 0x9, 0x7, "91ddd5", "c457"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x3, 0x6, 0x81, "169e8f", '4'}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x1, 0x3, 0xff, 0xc, "097cf1", "e8355a"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x7dce, 0x2, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x85, 0x8, 0x8, {0x7, 0x25, 0x1, 0x8, 0x2, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xf, 0x7, 0x5}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xe, 0x2, 0x7f, 0x9, "5b3aef81efed7043"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x7, 0x9, "892e", '0'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x0, 0xc1, 0x1, 0xfe}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x1, 0x6, 0x8, "76b984", "f7"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x8, 0xf, 0x7f}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x6, 0x9, 0x6, {0x7, 0x25, 0x1, 0x8, 0xf2}}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x0, 0x3, 0x6, 0x0, 0x20, 0xff}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x3, [{0x7b, &(0x7f0000000340)=@string={0x7b, 0x3, "6402ed8e4f47ba9bcf3265dc345c7ea85a129271d5154ef56efd4fda87667c28aef60701a760719e868eb642795eadf81db63594eb1880451109af62ea1cbf2e9cbeebe5c1b445b87533c317951ef50efb8d5c835a588ced67dd56353475d5fde9aa65d8141a06316ce95464f451d8ba85857986027f9a81c8"}}, {0x96, &(0x7f0000000480)=@string={0x96, 0x3, "75aeb19959505f6d584380a5652d6467157e6735c77746072a02dafead0594f3d85417f3a0b098c9dac32e81f334e13a47e24733c9cab4728ad3821edd8dd53a4c1e82e200abe686b1f5a806a4e97ca8334665047d99890b5d5d84460361eea7d94357c31ccc4b6ce7711e013f556298915739dd688f0527b1cacac8e8ae27806c46482482f4d2d48f281aa6b85d8cedc4a5146f"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x44c}}]}) syz_usb_control_io$uac1(r2, &(0x7f0000000840)={0x14, &(0x7f0000000600)={0x0, 0x0, 0xe0, {0xe0, 0x24, "8846b0fecdda995802cd7ce417d6a3ff408411447a6a20a38c4c279998c3fc86bb383f243d4ab988a67c80adbad7be12d8435b904c8dce3bdc04a24cd9e896f0c3be09864996c511436b03f5d312206941318ec72343e5e33e49fd1688953cac6b766efe5957a9fc85f67484567e11891bc639b4ee5bb742feae65cf04c7639dd0bdd2f24efc4b4814b031b30635b927672f32f8f0b0d175e3563675fdd8f9a555547217f151e5683d28aa871daccc0ecb1d1ebf297cb69e2bf8c5abb879efbdfb923bb3303cd9dca34ff4639e868b058e26d143995f26b306e96dc347a9"}}, &(0x7f0000000740)={0x0, 0x3, 0xd7, @string={0xd7, 0x3, "5c6d48db2bbc6a1d70cd800424361170a3e1e2b513716c8f20bd1f71ddc9259311a4e34bcfa9799435586339569d38ee05412aa294f89fbe8b6333030a1af591c454c6e3e5711eee5c6a50b00eb083ea09ea18b9732f0b7e6e3c091e78aea775c06d80ea4de4361634beaffee4e631bb5961d1fc423af2610af67b739108c7bf440a9ca292dc5c0032aa73adbcf27c7f1e604374692b22b45f6a1832574190f9fdcb837aac51f93cc1535e1fef8b379b292782712046fd5b968c1a4fc059d319865de401aa2f68dbaffbff5793261df71282f1c794"}}}, &(0x7f0000000c80)={0x44, &(0x7f0000000940)={0x40, 0x14, 0xaf, "9091350560c03cf2bfa3f198fa40404724142df496efa4fc68614f330f1a0525d3a609fa39b33877ba349caf2020c032a894faad9e6bc8565432f9cc3cb65a208a16fb7876e928a9c97ccf620f29f5ff4bbc8e276c966081c44baa759e784367d9bcfaced6074d908ae5ced5e2dd40ecd4322a2e96a0e32f3edfd829573c4796d7dd5f879f8863289d4bee8c3bee46830c298059b84839200ce8862a962f8933fb29ff0fb7d678e1997ab316190c39"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000a80)={0x20, 0x81, 0x2, "cb1a"}, &(0x7f0000000b80)={0x20, 0x82, 0x2, '7('}, &(0x7f0000000bc0)={0x20, 0x83, 0x2, ' F'}, &(0x7f0000000c00)={0x20, 0x84, 0x3, "b0f346"}, &(0x7f0000000c40)={0x20, 0x85, 0x3, "e2ae95"}}) 1m2.924484569s ago: executing program 0 (id=180): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000100)) (async) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000100)) r1 = socket(0x2, 0xa, 0x300) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000040)=0x9, 0x4) syz_genetlink_get_family_id$devlink(0x0, r1) recvmsg$unix(r1, &(0x7f0000002900)={&(0x7f0000002540)=@abs, 0x6e, 0x0}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00', 0x2}, &(0x7f0000000080)=0x1e) (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00', 0x2}, &(0x7f0000000080)=0x1e) r3 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000340)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a0000057f000904010000010220000904010101010220000905010940000204d80825010230cc000009040200000102200009040201", @ANYRESOCT=0x0, @ANYRES8, @ANYBLOB="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", @ANYRES8=r1, @ANYRES64=r2], 0x0) syz_usb_control_io$uac2(r3, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 1m2.87643335s ago: executing program 32 (id=180): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000100)) (async) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000100)) r1 = socket(0x2, 0xa, 0x300) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000040)=0x9, 0x4) syz_genetlink_get_family_id$devlink(0x0, r1) recvmsg$unix(r1, &(0x7f0000002900)={&(0x7f0000002540)=@abs, 0x6e, 0x0}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00', 0x2}, &(0x7f0000000080)=0x1e) (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00', 0x2}, &(0x7f0000000080)=0x1e) r3 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000340)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a0000057f000904010000010220000904010101010220000905010940000204d80825010230cc000009040200000102200009040201", @ANYRESOCT=0x0, @ANYRES8, @ANYBLOB="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", @ANYRES8=r1, @ANYRES64=r2], 0x0) syz_usb_control_io$uac2(r3, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 10.410413721s ago: executing program 2 (id=267): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./bus\x00', 0x814004, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x5516, &(0x7f00000006c0)="$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") r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) (async) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) dup3(r2, r1, 0x0) (async) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000006c0)="84a9"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000240)="33185d7bb56f70"}) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() (async) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0x80) r8 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000001c00), 0x12) (async) write$cgroup_pid(r8, &(0x7f0000001c00), 0x12) connect$inet6(r3, 0x0, 0x0) (async) connect$inet6(r3, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') (async) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r9, &(0x7f0000000040)=[{&(0x7f00000024c0)=""/4127, 0x101f}], 0x1, 0x4800, 0x0) madvise(&(0x7f000065f000/0x4000)=nil, 0x4000, 0xf) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 10.39620865s ago: executing program 2 (id=270): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$assume_authority(0x10, r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000007112330000000000950000000000000072b93e0ae20ddfc9e924efe904bd3379bd047ee216697ed6b5df5f2a0a3d04c3db18dfc3"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)={0x2, 0x0, @b}, 0x48, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x24, &(0x7f0000000000), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_pidfd_open(r2, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000800)={0x0, "64941d5549641441bcb480cd44e34400"}) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newsa={0x198, 0x10, 0x1, 0x70bd2b, 0x0, {{@in=@multicast2, @in6=@mcast1, 0x0, 0xecdf, 0x0, 0x200}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x64010100, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3}, {0x8, 0x400800, 0x0, 0x400}, {}, 0x0, 0x3507, 0x2, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad3f10cd3a506627800000000074f"}}, @algo_auth_trunc={0x4d, 0x14, {{'hmac(sha256)\x00'}, 0x8, 0xc0, '/'}}]}, 0x198}}, 0x4050) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ftruncate(r4, 0x6) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) 8.145320342s ago: executing program 2 (id=274): r0 = socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x1, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x2}, 0x10) bind$tipc(r2, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x2}}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) socket$pppl2tp(0x18, 0x1, 0x1) sendto$packet(r0, 0x0, 0x0, 0x40008c1, &(0x7f0000000480)={0x11, 0x0, r4, 0x1, 0x62, 0x6, @broadcast}, 0x14) clock_gettime(0xfffffffffffffff1, &(0x7f0000000000)) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f00000002c0)={0x9000000, 0x6}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000640)='pim6reg1\x00', 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r5) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x4000000) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x9e8, 0x21, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x1, 0x28, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xe, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x3, 0x0, 0x6, {0x7, 0x25, 0x1, 0x0, 0x44, 0x20a1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0xd1, 0x48, {0x7, 0x25, 0x1, 0xc, 0xff, 0x7f}}}}}}}}]}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x1, 0x0, 0x8, 0x2}, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 7.511597612s ago: executing program 4 (id=278): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.swap.current\x00', 0x275a, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) write$cgroup_pid(r1, &(0x7f0000000040)=r0, 0x12) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket(0x1, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x80000001}]}}]}, 0x40}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) init_module(&(0x7f0000000840)={{0x7f, 0x45, 0x4c, 0x46, 0x7b, 0x1, 0xff, 0x4, 0x8, 0x2, 0x3e, 0x8, 0xee, 0x40, 0x20, 0xdc92, 0x3, 0x38, 0x1, 0x6, 0x8, 0xffff}, [{0x1, 0x5b, 0x1, 0x4, 0x2, 0x1ff, 0xe33, 0x8}]}, 0x78, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000001c0)="266666f30f102c0f01c50fc729baf80c66b818761f8266efbafc0c66ed6766c7442400dc1a00006766c7442402cb2800006766c744240600000000670f011c240f3266b9800000c00f326635000800000f30ba2000ecba410066edf30f09", 0x5e}], 0x1, 0x28, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.716792357s ago: executing program 1 (id=283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') getdents(r1, 0xffffffffffffffff, 0x5a) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x40000000000) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) userfaultfd(0x1) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast1, 0x7640abcf}}, {{0xa, 0x4e22, 0x1e, @dev={0xfe, 0x80, '\x00', 0x13}, 0xfffffe01}}}, 0x108) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}}, 0x108) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x113, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 5.980376791s ago: executing program 2 (id=284): pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'vxcan1\x00', {0x2, 0x4e22, @multicast1}}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x4}}}]}, 0x38}}, 0xc840) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xa, 0x7, 0x1, 0x3d3f, 0x0, 0xffc, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) syz_usb_connect$cdc_ecm(0x0, 0x6f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000402505a1a440080000010109025d000101000000090400000002060000052406000005240000000d180f010000000004000000001524120000a3178bd8b65166ebffdac0ffcb7e312a07241c"], 0x0) connect$netlink(r0, &(0x7f0000000040)=@unspec, 0xc) 5.748289868s ago: executing program 1 (id=285): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000080)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@rthdrdstopts={{0x18}}], 0x18}, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x40000000000007c, 0x2000c044) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x800, 0x0, 0x3, 0x3, 0x4, 0x2}, 0x31) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x714f, 0x0) 5.699873129s ago: executing program 5 (id=286): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002240)={0x1b, 0x0, 0x0, 0x7f, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r2, 0x112, 0x13, 0x0, &(0x7f0000000280)=0x2f) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc000802) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000280)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0xb568, 0x4, 0x2, 0x7ff, 0xf83, 0x3}, 0x1c) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 5.453904767s ago: executing program 5 (id=288): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000300)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100100000001) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000a40)=[{{&(0x7f0000000340)=@ieee802154, 0x80, &(0x7f0000002780)}, 0xc}, {{&(0x7f0000002840)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000003b40), 0x0, &(0x7f0000003bc0)=""/217, 0xd9}, 0x8b8}, {{&(0x7f0000003cc0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003f80), 0x0, &(0x7f0000000d00)=""/172, 0xac}, 0x9}, {{&(0x7f0000004080)=@phonet, 0x80, &(0x7f0000006300), 0x0, &(0x7f0000006380)=""/164, 0xa4}, 0x200}, {{0x0, 0x0, &(0x7f00000088c0)}, 0x8}, {{&(0x7f0000008980)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000008a00)}, 0x9e9}], 0x6, 0x40000002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getgroups(0x0, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$packet(0x11, 0x3, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000bc0)=ANY=[@ANYRES32=r5, @ANYRES64=r0, @ANYRESHEX=r0, @ANYBLOB="dfe9db2093becb2f45b0abf78e2d1340ca19bc8d3d89a9270368b0f2b7445676d7fcae", @ANYBLOB], 0x118) (async) write$UHID_CREATE2(r6, &(0x7f0000000bc0)=ANY=[@ANYRES32=r5, @ANYRES64=r0, @ANYRESHEX=r0, @ANYBLOB="dfe9db2093becb2f45b0abf78e2d1340ca19bc8d3d89a9270368b0f2b7445676d7fcae", @ANYBLOB], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r6, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r7, 0x541c, &(0x7f0000000000)) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={r0}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000) (async) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x6, &(0x7f00000001c0)={0x7d, {{0x29, 0x0, 0x3000002, @empty, 0x5}}}, 0x88) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x6, &(0x7f00000001c0)={0x7d, {{0x29, 0x0, 0x3000002, @empty, 0x5}}}, 0x88) sendmsg$nl_xfrm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRES64=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000fe320000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff080000000000000001000000000000000900000000000000ffffff7f0000000043050000000000000400000000000000ffffffffffffff7ffcffffffffffffffe2eb0000000000000200000000000000000000002cbd7000003500000200048050000000000000000c001c00", @ANYRES8=r4, @ANYRES8], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x80) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) 5.36134608s ago: executing program 5 (id=289): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$assume_authority(0x10, r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000007112330000000000950000000000000072b93e0ae20ddfc9e924efe904bd3379bd047ee216697ed6b5df5f2a0a3d04c3db18dfc3"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)={0x2, 0x0, @b}, 0x48, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x24, &(0x7f0000000000), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_pidfd_open(r2, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000800)={0x0, "64941d5549641441bcb480cd44e34400"}) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newsa={0x198, 0x10, 0x1, 0x70bd2b, 0x0, {{@in=@multicast2, @in6=@mcast1, 0x0, 0xecdf, 0x0, 0x200}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x64010100, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3}, {0x8, 0x400800, 0x0, 0x400}, {}, 0x0, 0x3507, 0x2, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad3f10cd3a506627800000000074f"}}, @algo_auth_trunc={0x4d, 0x14, {{'hmac(sha256)\x00'}, 0x8, 0xc0, '/'}}]}, 0x198}}, 0x4050) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ftruncate(r4, 0x6) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) 5.333080231s ago: executing program 4 (id=290): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001000000407d1e383100000000000109022400010000100309040002fe0300000009210000020122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000046c0)={0x0, 0x0, &(0x7f0000004680)={&(0x7f0000004640)=@ipv4_getnexthop={0x1c, 0x6a, 0x1, 0x70bd2a, 0x0, {}, [@NHA_GROUPS={0x4}]}, 0x1c}}, 0x800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) close(0x3) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r6, &(0x7f00000003c0)={0xb, 0x77, 0x2, 0x4}, 0xb) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "79924fdb"}]}}, 0x0}, 0x0) 4.975496202s ago: executing program 3 (id=293): io_setup(0x7, &(0x7f00000000c0)=0x0) io_setup(0x101, &(0x7f00000002c0)) io_destroy(r0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1000000, &(0x7f0000000080)={[], [{@context={'context', 0x3d, 'unconfined_u'}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x809d) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="2400000061bbd7b9c93226b8b8dbe5646725aa7910512cfcc7d64685c3371f9ac531e584bb1e948d9915", @ANYRES16=r6, @ANYBLOB="010000000000000000000a000000100004800900010073797a3100000000"], 0x24}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r4, 0x0, 0x80) openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f00000006c0)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x2}, [{0x2, 0x3}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x4}], {}, {0x20, 0x7}}, 0x44, 0x3) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140)=ANY=[], 0xfe37, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 4.904133255s ago: executing program 1 (id=294): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000012c0)={{{@in=@loopback, @in6=@remote}}, {{}, 0x0, @in=@private}}, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010100}, @in6=@private2, {@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xee00}, {0xffff}, {}, 0x0, 0x0, 0x2}, 0x9}, [@tmpl={0x44, 0x5, [{{@in=@broadcast, 0x4d5, 0x32}, 0x98bb534c86cc6f0, @in=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0xc}]}]}, 0x16c}, 0x1, 0x0, 0xffffffffffffff80}, 0x0) 4.473147598s ago: executing program 5 (id=295): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1e, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000414, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESDEC=0x0, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESDEC, @ANYRES16], 0x1, 0x2d0, &(0x7f0000000dc0)="$eJzs3U9rE0EYx/GnSWzSlDYRRFBQB73oZWnjC9AgLYgBpTaiHoSt3WjImpTdUImIzUW8+jqKR2+C+gZ6ES/evRVB8NKDdKS7m3TTpG1q06R/vh8oO7szP2aSTcuzC92sPnz/olRwjYJZlUhCSUSkLmsi6Y1WYCjYRrz2sITV5dronx8X7j96fCeby03NKDWdnb2eUUqNX/r88vWHy1+row8+jn+Ky0r6yervzM+V4ZVzq+uzz4uuKrqqXKkqU81VKlVzzrbUfNEtGUrdsy3TtVSx7FpOS3/Briws1JRZnh9LLjiW6yqzXFMlq6aqFVV1asp8ZhbLyjAMNZaUky3WxZj88syMmd22Ww+Fzj6OgJFOBx0nW+/cmV/uw5oAAMAhs3P979f629X/0WZrL/X/2d3rf5Fw/Z8IJqH+74F6y94u9T+OBcfJmsng97cV9T8AAAAAAAAAAAAAAAAAAAAAAEfBmtYprXVqYxsc8vbjIpIQER319we8TByQ8PnXoZ/m+Q/2t8RuDGi56LHQP+4lROx3i/nFvL/1+7MFKYotlkxISv56n4eA356+nZuaUJ60fLGXgvzSYj4q8Ua+Id0pf/H0pJ9XrflTkgzPn5GUnOk8f6ZjfliuXgnlDUnJt6dSEVvmvc/1Zv7NpFK37ua25Ee8cQAAAAAAHAeGamq7fvf6vQEJae/386H7A1rrpYg0L9Hb7g9sub6OyfluHlEJAAAAAAD2za29Kpm2bTn/0YiLyD7ivW9oLTL4ZUTlcLwbrY2bItK3SWMDf8kJEfGPqJYu/86UyC7xX814V5PqLsbEgm/g6Oe7sb6P+KD/MgEAAADotc2ifw+h728PcEUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJw83T4PrDG+ravRsUM8NF207y8QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOET+BQAA///SxRMd") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)) syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000480)='./file0\x00', 0x2004040, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(r0, &(0x7f00000000c0)='./bus\x00', 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x14, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x82, 0x82) pwritev2(r2, &(0x7f0000002c80)=[{&(0x7f00000000c0)="01da", 0x2}], 0x1, 0x5412, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000140)={0x4, 0x8000000000000000, 0x6, 0x1}) chdir(&(0x7f00000003c0)='./bus\x00') openat(r1, &(0x7f00000002c0)='./file0\x00', 0x48a080, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 4.171977308s ago: executing program 5 (id=296): syz_usb_connect$cdc_ecm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x1, 0x1, 0x3, 0xd0, 0x1, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x51, {{0x7, 0x24, 0x6, 0x0, 0x0, "1149"}, {0x5, 0x24, 0x0, 0x9cf}, {0xd, 0x24, 0xf, 0x1, 0xfffffff7, 0x101, 0xc1, 0x9}, [@ncm={0x6, 0x24, 0x1a, 0x4, 0x8}, @country_functional={0x10, 0x24, 0x7, 0x4, 0x8, [0xfd5, 0x2, 0xa, 0x157f, 0x7]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x8, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0x43, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x9, 0x2, 0x5}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x2, 0xc, 0xab, 0x20}, 0x7e, &(0x7f00000000c0)={0x5, 0xf, 0x7e, 0x3, [@generic={0x5a, 0x10, 0x2, "b65dd7dbfcfc2a3c4ce8e512dff5d086e311ddd075c40acf3c345e2403836c231030d77198d8d6d308d2136e8a6e9a1d5bbdc9c96704497e6ff98fc9d816538f42d69f34405c87568ff95b48485a4610fbfe6b028dcefc"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x0, 0x100}, @ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0x8, 0xf000, 0x3ff, [0xc000, 0xf, 0xffffc0]}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x436}}]}) syz_usb_connect$uac3(0x6, 0xa3, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x30fa3cb86f92b29d, 0x763, 0x201a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0xb0, 0x20, 0x4, {0x8, 0xb, 0x1, 0x0, 0x1, 0x23, 0x30, 0x7f}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x16, 0x9}, [@cluster_info_segment={0x6, 0x20, 0x0, 0x85, 0x2}, @cluster_info_segment={0x6, 0x20, 0x2, 0xa1, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x2, 0xa5, 0x1, {0xa, 0x25, 0x25, 0x7, 0x3, 0xff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x8, 0x3, 0xff, 0x5d, "5bc818a3"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x1, 0x9, 0x9, "", "ed3886"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x9, 0x0, 0xe1, {0xa, 0x25, 0x25, 0x2f09144e, 0x6, 0x1}}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x310, 0x2, 0xe0, 0x0, 0x20, 0xb}, 0x28, &(0x7f0000000300)={0x5, 0xf, 0x28, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0xb, 0xff00, 0x8, [0xcf, 0xf, 0xff3fc0]}, @wireless={0xb, 0x10, 0x1, 0x8, 0xea, 0x2, 0xa6, 0x200, 0x1}]}, 0x9, [{0x93, &(0x7f0000000340)=@string={0x93, 0x3, "fc9715c285e53531be183552c7af113a79b967c0b51a29ae732e75b9cc61f079d7fe004ca42098b0de8baa6600de5bf1b668c7b9aef427370c26e65bbc2d940db09c3844a357eb7f1c8ecd51e8a309ffe5f2ab83312e8a183378e5881ccb60da691d9fb027522757a2a8583873d2a87140ca127e19ecaa960898913d87f810f9c8ef24a38ed68a823174b44bf327d0e64e"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x447}}, {0x31, &(0x7f0000000440)=@string={0x31, 0x3, "d42684a27210131a7b057652fbaa8c4364e73c6e6c6f5e9af4915e1f42925afd8cc3b82c61b325bc9e945b052db101"}}, {0x52, &(0x7f0000000480)=@string={0x52, 0x3, "8c492192dae31ee40ab20eeb82cffcecf23be8c0e9d11a5563531dc8254dacd229bf96114d7c746bad9f1906e9a171f60f339aafed68d1a633be07598ac6e8d7965ad8d78fb77ee3ccf96deecc7981a6"}}, {0x101, &(0x7f0000000500)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x437}}, {0x74, &(0x7f0000000700)=@string={0x74, 0x3, "c1535b09d4ebb9a0acc09b4b00b2f8b19dee3e027a829cfdf465f8a7445b1771e052fd26ea7651509523ba364e38d9e54cb7b152c63f990738de5221f0d8d3d0a00e9039a75408edf85573ecf1e3efa5dfadeb0cc10a06225d22b73575b58b20dcad0a1c02b970f5ee8a1f4700ac1f68416d"}}]}) r0 = fcntl$getown(0xffffffffffffffff, 0x9) syz_pidfd_open(r0, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000840)) r1 = syz_open_dev$mouse(&(0x7f0000000880), 0x4, 0x123580) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000900)={@private1, r2}, 0x14) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r1, 0x4068aea3, &(0x7f0000000940)) bind$xdp(r1, &(0x7f00000009c0)={0x2c, 0xa, r2, 0x2f, r1}, 0x10) ioctl$VT_ACTIVATE(r1, 0x5606, 0x3) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r1) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc880}, 0x6000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000b40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000bc0)={r4, 0x3, r1, 0x1000}) ioctl$OCFS2_IOC_RESVSP64(r1, 0x4030582a, &(0x7f0000000c00)={0x0, 0x0, 0x703, 0x7, 0xf}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), r1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x38, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x38}}, 0x14) r6 = fsopen(&(0x7f0000000d80)='jfs\x00', 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000e40)) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000e80)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001400)={r1, 0xe0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000001180)=[0x0, 0x0], &(0x7f00000011c0)=[0x0, 0x0, 0x0], 0x0, 0xc8, &(0x7f0000001200)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001240), &(0x7f0000001280), 0x8, 0x89, 0x8, 0x8, &(0x7f00000012c0)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001440)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x1d, 0x2c, &(0x7f0000000ec0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6cd7df8c, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @alu={0x7, 0x1, 0x2, 0xb, 0x2, 0x50}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x1, 0x3, 0xb, 0x5, 0x30, 0xfffffffffffffff0}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x418d}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @jmp={0x5, 0x0, 0xb, 0xa, 0x0, 0xffffffffffffffe0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0xa2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001040)='syzkaller\x00', 0x2, 0x1f, &(0x7f0000001080)=""/31, 0x41100, 0x3c, '\x00', 0x0, @lsm=0x2b, r1, 0x8, &(0x7f00000010c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000001100)={0x5, 0x7, 0x1a6d8ed8, 0x4e3}, 0x10, r8, r1, 0x3, &(0x7f0000001480)=[r1, r1, r1, r1, r1, r1, r9, r1, r1, r1], &(0x7f00000014c0)=[{0x0, 0x2, 0x1, 0x8}, {0x4, 0x4, 0xd, 0x7}, {0x3, 0x1, 0x7, 0x6}], 0x10, 0x3}, 0x94) userfaultfd(0x80000) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00000015c0), &(0x7f0000001600)=0x8) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x13, r6, 0x9614e000) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000001640)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 4.016685473s ago: executing program 1 (id=297): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0xa, 0x2, 0xfe) setsockopt(r3, 0x107, 0x1, &(0x7f00000001c0)="030000000300060000201a80230061cc", 0x10) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000009c0)=@security={'security\x00', 0x64, 0x4, 0x300, 0x100000c, 0x130, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1000000000000}}, @common=@unspec=@CONNSECMARK={0x20, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3b}, 0x7f7fffff, 0xff, 'pim6reg\x00', 'bond_slave_1\x00', {0xff}, {0xff}, 0x6c, 0x1, 0x7e}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0x0, 'veth1_to_bond\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0xc8, 0x138, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[0x4e23, 0x4e21], [0x4e21, 0x4e24], 0x6c, 0x4, 0xfff2, 0xf9}}, @common=@icmp={{0x28}, {0x4, "be45"}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x8, 0x4, 0x1, 0x0, "edeefc7a46ef3cea9319261fc16bf346b02017e99505b0c7009c97ca57e52d700c2a13d2f6801ec1f9e235d607748a457ab960a3c75db8c7a293fee516de6c61"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x2eb, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x6}, 0x1c) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @remote}}}, 0x32) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000480)="e102965d7e6ba6bbc732a85b9327c2545d157774e4e979737fca3b9e79e4959e02e46c5c5ac09044de406d411cf6c154e5741476e00cc968dd6c006c0b2a9725aef9865c8537d6117ea71933e5d68cc7693abef064b045905cc94d702bb639b6734a2eee97cab8e55aee8bb8515db4b4ac1057d0efb4df8c9ff55a06bfb5c00c9df7cb524b470801056a4426aa05ac63cb91c6ea52af84e6f7b05d87d4f87a0013dd50ba11dccb85227aeedf835c3eb5c4bfded071ac8cbff7636a3022e7893b69bd3cc12d92d698b122847a92b0960535f76df12378d5ed9c", 0xd9}, {&(0x7f0000000580)="7f58bf63f41fb3bd065eb7b785a82405d6da612f293ef84132e9f715f4b9c037866d6a116c5545d63505b63ff16fe8a44fe2b7b37868fa7532d6f8ee2b44ef8381984db11f36f79bafb835dde7f5149b2ee783bf95465f43111df3416e449545b781d392b40c8507464d752f592e7328df010ce9731f90da2fa9c08d035fd1312de01d5284dd1085ec7bad480c294a9a", 0x90}, {&(0x7f0000000640)="984c6fdc0703d491d7a27277e49546c8bc02af3545ac7dcefe4c60", 0x1b}, {&(0x7f0000000680)='E$', 0x2}], 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$packet(0x11, 0xa, 0x300) write(r7, 0x0, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r3, &(0x7f00000002c0)="3ce2de4d8d957a8de4e490b6cd037aa381b58cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2adf8f0feb3be07a2901afc1da021cb3a7e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87000000000000000000", 0x1a8, 0x0, 0x0, 0x0) r8 = fcntl$dupfd(r6, 0x406, r6) sendmmsg$inet(r8, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001a00)="04", 0x1}], 0x1}}], 0x1, 0x8000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008844) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fadvise64(r9, 0x2, 0xb, 0x4) syz_usb_control_io(r0, 0x0, &(0x7f0000001a40)={0x84, &(0x7f00000024c0)=ANY=[@ANYRES8=r9, @ANYRES8=r1, @ANYBLOB="7ab6a3804e385ec610e99c8e0639fa7ec51816d1451186e3e0bb06998c165bc8b1b172fedb1fb17e5caeb2e98ea4d584def26e85d7b06bd0b16e2b06502b439e143363ca990bd776", @ANYRESOCT=r6, @ANYRES64=r9, @ANYRES8=r2, @ANYBLOB="3b29a3e5ec3ce592e1f569737ac3a57cb08d244238533b43a401df3d2fbbef2a1c2eded331f190626b8b503da4092e7f99b0819bf22756cf87df19f1ee2284900de44ecc8a8e6b8851f1245f8a88ac40e8f99cda7f22c44daeb85251deb24a848ed411bb3d2f818924308be3e23771c19559951bfbeb891b6bc678eafaa5b6bd9b7922367720e5f955563106ff6e39a4b95d7a8f8afaf77fafbf2250210d5cdd7a5ab95a0349a1495485a7c19dcd7b7ce17950b4f0e8e21218bc3615ebcfe70372dd23818def07664af8e1ae03d9d184ff5194efa0d02e775e0d596a44c3dc3b52a36af36686efddec421bc30cc0c6e6a48af498f51b34a47882454503f402feb8e790fc6c69ae4a4eacdb4efa69c2a18904151e8967069a1a0b01b9b46e106ec54af8293528f99085fe2259bcfbf407629765c4038e7004f0876eae23952309963d1d6a39def8899e76bbda9b2a85c3fc63d225e1177cdd73375ab521a8efe7f6fda407bcf675b9673221b8883e11530d94da4a8c64c1a92430ac8dfee59796712f17a3b80bcc49df1fee45f5276734fb2d6799f18d26f4d24c33eb360ad3f1d280b29375f793cdb00b83efc3d1a77ee98707465c570b87db5a3c63bc892276bade9e52e97d84d627eed626873fb8867c8850df457335baab00688f0222a0d9ef99ec748a52975091d60f493c4e469ed0a09414bc68bd55dea1f28e5376c59e917fb4e909ef672edcadcbc0fba674513716ada1e609f7b583492ba066103b08b30fe7f5d9900193b176d3b36a266cec8e77c954d7e81288355a82004c2b81cbb8cd6816322f94c02f342682e2875fbd146eb4b4c9e14bac734fd1cfe3018dc1eca048bf62c7a95dd3ddaad478c624a0741b3fdd5af73a1aba466f517378692e81ec680c3c1dc62c34746d51962d653147f3cb09cb0eda5428f910dd677ab774184afaf2285c1577e5f7acbd73e34abbea6f5b31b53a444185035d62a20e553553fa434575dee030b8673e1e9b2e4ab7d04ff9993e7299ef9ca0d8d0cb3efd53009fbec7ff2b6d8a10dc0667fe3bc65a366929776f82d2470fb4273157982bc0f889fa975e5eb211db85628f5ccef3a618e134a5d2ec027feb13c2b690e3a9e62e5b983b90ed6f41ad64f82f7a38943a5948fe88c6070760a00ae117764761bf90f96a2fdac7c5feca501e8fc112112656ac655d3266d30d4375792976e58618a4a46a211d772b9a594e9dcb38a5a316c501bed2276862c469d4975f428935eaea6d4475055488c018dca02c4c687fcbc6e7b06c9aac21b6b4a22391e6ba36fc6f645d04e8c39778cae4d3ac07ed3db4d8eb70dc09a43a89af3facce6562cb41b98e7617282bf3ac74a7bbe6a0b46262ca2e45cfa93787046064f43c0433c4bce7e7f3b2a40bbb790e8be6cdf73372f9816738af55251f3fd744c83d72d12c99dae9fd9f6f024f825393a4eb02fe17154800d056ee69e58d6c17e81f187e44ad85b6341d2256c3296ec1394af64869266e7f3addaec6a81b4216f4fa511a1183d446bc89da5d589936af541d66bde5315f240d2797981da39fbddf710586b0a3a50a966f4c9995b0bb0e3675d0eb36bd2f5245502b152caee384ef04dc73ae5626acf7976228fb143b3d870285af75c361b3c11c5d17dcbd1b9bddec57ce3338982efde39b2e6d51eada25061846784a6a231926e633700bc89bb3b7ad95af295421abd3a4b3020d665a1425958a02405cf86bd10f6245aef3e4f82f5e09e2e44f333a81ec7064bc79ceb58b6a69640bafb2f0bec07f5fe4721f684d48afa88a447c5a600c6a9d043784013b20bd8d1709361ab2dab443d585b0f546f957346a108b454634ce9a9ef5aa36844d633615fd7f50728fbb4660ca47910588f39b69c52d4739091b51b8f8487ef236177447edfebe2b0baca5674e5de0abb6927edebb5abb6b854aa9f828024d3b40f82dc885daaf685c4e1980c37dc4c6587ad16518c78dd63e9b56da13dbb3693c71ae089f2534be9e6a889c1e1c55fe49e76e05bccbe29ce32316a70d3a2a9eff69f48ae4fe8b30496f3cb0c764049ceb9e5e1defd445379e11cdc95a6567ec5d51ac742b12f3d23b07776ce1fdb956aeca74edada06e712597235d8a93104597ded4a8cb009fd42d0e26185e9d5f9b46a066d3700db7d98258f729c846cc703b85648076b459630546f44c44e353679eebfe46a5804d42ddce60b77c419796fa5cbaff99555bef7ebcd3fa03eae73ab7121f1dfcf031f47e4b3455ebb0158938faec1dd1fedd9c5f285b28fdc085f0c463b14f30eb9d2e2e5b2ff8fbf249e2aacda7c6de8cb1aad56bd8150f112166b985a6b37fb9f8d2bf1f788742fdc8ba0ec2a040e552a53c9ce6b699f007d604844df4824f5cae0f1bf604bf4c733abbbb2f19ce29caf37a3401c7b665ecac3025b00c9a947b6dd8cadf1ff7befdd9d587225c8d6f3525714ccbbfb14d496a43600ba7d22123aa56fa371bb3a969ff3f06238ed5a06fbccc8901543ef968806713cb166dd7c9e33b039b6011f384a478e2beebd0f78a349d0df263c0c57cfd7a05ebafb9a22287fe1708545ba75808e8f1a02c5b3f11515ca5237c539b7570f59fdd400932d3d7485fe2784dc8b87651a41c1eced0edaff173dd2fa77554fe5d39e185309a2b5fea07fc2d93adfefba6ad517abb854b9e78e27130b5a8f139433adf38b75224d3e5796f09cdc045966fc9f09aa432cf2c888d057f42ced30350aeaa2b666e2c8bae58ed9faee16efa0c1cf995e2800d88babcc05e521d2c1ef04d3a0ed529e53678c4def9f0b8b327ec285379917544e3c927e35fe37583c4324f59877455fd0c630ca3a5d38c01b2a6b40e1347f856e149c183d33acffe67492675294ba1830ba0efa0a9617824077fd10855fb6b62f92daa404b2776f820901740dbdba53dc1d2aedbbbbd262c685acbb15fdbcc96f4c3058e74355960afb7b3658ed9fbad8276f3c98107e7acba08d374860b0ad2a8055786fbd7eb2854bcf20aef8fdb87c6314a6b06f7ed41c43ae29d62fce5f38f6431fc49727600669992ac971f3bd38e7b464329adf73f87349ff4ded10dae1451a24c6a0cb8a7804d81e80e969563c4aad3c25b6bf3e35d3b4a9bc8fc644cc9ead6b4169c6e675ebe6fce49c5cd1e3bb615ecb85945660fc9bdf401ed61da8f0be39cf40902d919e171cf06f84b6d17a2e99f6aa1e13d3ed3f4f09a6cc6fa39a849c23c95da630537f3a99063a3a766fd40c54320ad0ab923794044531594fd40a1b7560e4e24542c2fdda3ea76d93bc40cca370a2550cda8b273ce4a10cbae0d9e6e8c09079070c966728481ff76eceffb21421e9f599fb6db413b2e48b8790c7848077a6f6714ced3eae25dd5ed0eaca0b798ef5b8fa0367adedae7190f25d423ae2bcc74ebbbc9259156041e6df1a66d8557f0cb7fe8573abe07d7308d30349fc397c52268352711dffe11a5e4f674331b9a33c52ef9246aa0b7de84445538880269d1bff140961dd0cc6228c336d1e70447c39b6a0d0c10e989cf116b961e2846a1614a7ea94aa9f6ac541234c0097bed6ab54f9849e3d10c7338c878f5a4a868e23975e48ded7d2056089951a89296e9701d04d56f2230888c10702b6122be9e17604dccfa065d87156d394b0dc21f9ba80fc176117d80a86e182f59a362a76caeac8eea821d013ae723481d2ebab04341190aba3624d77aba7dd8e0bfad72cf5b111c06a2c62b048dddb1545969ac21aa809e76e6e5d728e54dc0cf1ab9ecebdf0ee87b1fb87755b98024dae2d4afde6b51f8dd46867b856d229a1231f735e2bbb0517b379cbdc8970384b30424fd20cb7e71dc70099b98eb08e44de94efb2ff2855b1aebeb2f5a3092664b75a0a48efa5712832b23347fccb256b72868cd3076bdc40104a0b8a809c4a29fe7dd6152f399a1d2b2493f88c7b90226856255e6f9235ccfe6cbcce0a2089c8c23c86703d3d51dd320d888461dba55623c7f46ad85df846393dff0794e592eace1770e77f85cc65c96b8fb5f747747c957f05f13a4aae8db57834c86a0ba8546fb8c01120d90e9ccbd770d9ba6ad1d81c6787decd91c7c10f129ce68dd5d243edeff72b5ef091cd62a1c066f58a272af94fb210230f8a5f2a315c27a135b27fb93278424f6055eb523d12b45a0ca4bd2e780423be872e168a6acf900066c9987012c1877005a09f13112def9f7e0bbfebf7c6c059a3ae585ab43f37ef5c1f6f2fa8a05931f4d14fc5165ca094149a28c1f984ed05a6e42ce4d51b58b83ea20485e95ee2421413dad593e5ebf7f3a52d3d386a1f9171601d6f9c3293e996d9ef99bb97def19bf5255f4506b83bf274df2c4abcad1d493c75e6a3da854a8457e8c3323838d712049926fa4c87a495fc5c5cb09beb0d843db70a73fafa7b387ab07d2d3ddc9c8f34332be298fc0bf68327aeba3f5e44c837477b93b9764a440ffc6145c61ee0addf1eb3222b25a794e8885609c9e8a163cd617dd88a41cdc91ee7f72b496c911f16eb67023be319242b5cb5d3a9332d084efe1d3250b1268e8e77a8d98c48455f22c188d7d27b37ddf4d583474fb74891d61acb75c166bd6a83415686c9e168539b1cb6a826cd8cbb59011abe776e5a207c934b4c8bb838a65248560ce77ba21534b8855c9d622ad1efd513f9377a9d473bc74491607f6c203ed56f7d1a76c7788f371e0955b14477ebb884796e96f7575d93d4123aa9b162572c2926939c528e716f3819ebc7507fffda6f40054f94b35214d32274cd23febffada22d5bb24979158db9e6c77661b6ad316a27b9d7ed25c229fd8b0931c95cf5554352a7c9ba6956944f4281b41ff9a23c455a0ae7cd8f4085cb239b00b4a8fa69fd6f1397e7dd996ccfd8e71993245a466fd1c83b74faccc63abcaa5feb1888b1585e4da1c2ba51ad58e0c0b2c0866aadf20b849ea0d1031e415ce60410a11d2b58a72aeb7ea5f48bc8becc6e0d4858c910896ece0e2b2c54e12dfc7f34f3b024382f0b6cea01bded05df0e5c4ed5380c06a20a5f2c03bcf1344ec9dd8e47a5ff7e580a7704de64ed862710fed67e02add363d641a75c0e9eb5d31351d63d70b5124d2a08bd89712ba30b2dece5b9b2915ae13994336ab564443729405f27475b3be225763a88e27b8c91e7cb0c91bed333442673c84a500f51e22461e4ffb048ebe817d3963f7bb77a690fc858164fba000e237c5c81c7c0d2f8972af99d85d660c8e77b081722b029939de460796dc673bb1fecdac34d40ab7e809ba03f2c2c194d9b912eb72c8befc97d69c81e9373554d43992437320ae8f04565f2c04c7e0a54f98f7c92bd3540f4b65f5399277dc8f632412754bcd1146cdba900fcc7ca7da75380c07de29c789f5e8fc2eabe0e5fcb62dcf1dae2901211f27745354fc6a4cb275f52591b4a6f5c0247bcdc9fda747acd9394668a1c4a9d93e7a70b946a1972795c7b5928792021acdf07674e1c9c8832cc0f87bd26f45f8fb751093f1260d29b5ae87ef20b2d1b59d75f5c7886eeb28cfae9f7fd2c919487aacffae7b5a4dab09dfcbbbb30a4adf76bdf9f87f8dfd5588d48707cbdda250426eecbd8e2233ad34b637375495f8f6d9e29f7447ad7b5c232b12a6554d87565dcd05f2710f3cf6d6966f050072773f5e1514d719654d32488b6f1e12a17f9fb46c6bd74d6c6fc17fd027bcc814d6aa4655f95fc92d8143cc71ebc178859dcf46b074e0324eddc8e1a1ec0c08caafb856ecd5a42379c45e2c77a8d431c5922ff4aa74a", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.965423634s ago: executing program 3 (id=298): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x9, 0x4, 0x3}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f00000000c0)}, 0x20) r2 = socket(0x1e, 0x5, 0x0) sendto$inet_nvme_icreq_pdu(r2, &(0x7f00000001c0)={{0x0, 0x8, 0x80, 0x1}, 0x0, 0x0, 0x1, 0x9ca}, 0x80, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r4, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x2}}, 0x2e) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x58, &(0x7f00000002c0)={@random="a70b49c5294f", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x22, 0x11, 0xff, @empty, @local, {[], {0x0, 0xe22, 0x22, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "00000000000099b30134b93b487f43fe1bd7"}}}}}}}, 0x0) recvmmsg(r4, &(0x7f000000a040)=[{{&(0x7f0000000240)=@x25={0x9, @remote}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000480)=""/1, 0x1}, {&(0x7f00000005c0)=""/26, 0x1a}, {&(0x7f0000000d40)=""/152, 0x98}, {&(0x7f0000000e00)=""/54, 0x36}, {&(0x7f0000000e40)=""/234, 0xea}], 0x5}, 0xfffffff8}, {{&(0x7f0000000fc0)=@rc={0x1f, @none}, 0x80, &(0x7f0000002980)=[{&(0x7f0000001040)=""/12, 0xc}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/82, 0x52}, {&(0x7f0000002740)=""/202, 0xca}, {&(0x7f0000002840)=""/205, 0xcd}, {&(0x7f0000002940)=""/47, 0x2f}], 0x6, &(0x7f0000002a00)=""/21, 0x15}, 0x5}, {{&(0x7f0000002a40)=@alg, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002ac0)=""/70, 0x46}], 0x1, &(0x7f0000002b80)=""/192, 0xc0}, 0x300000}, {{&(0x7f0000002c40)=@ax25={{0x3, @default}, [@remote, @default, @default, @bcast, @default, @netrom, @default, @rose]}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002cc0)=""/145, 0x91}, {&(0x7f0000002d80)=""/15, 0xf}, {&(0x7f0000002dc0)=""/123, 0x7b}, {&(0x7f0000002e40)=""/132, 0x84}, {&(0x7f0000002f00)=""/7, 0x7}], 0x5}, 0xfff}, {{&(0x7f0000002fc0)=@isdn, 0x80, &(0x7f0000004280)=[{&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/143, 0x8f}, {&(0x7f0000004100)=""/214, 0xd6}, {&(0x7f0000004200)=""/45, 0x2d}, {&(0x7f0000004240)}], 0x5, &(0x7f0000004300)=""/4096, 0x1000}, 0x9}, {{0x0, 0x0, &(0x7f0000007540)=[{&(0x7f0000005300)=""/132, 0x84}, {&(0x7f00000053c0)=""/143, 0x8f}, {&(0x7f0000005480)=""/4096, 0x1000}, {&(0x7f0000006480)=""/4096, 0x1000}, {&(0x7f0000007480)=""/187, 0xbb}], 0x5, &(0x7f00000075c0)=""/217, 0xd9}, 0x7}, {{&(0x7f00000076c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000008740)=[{&(0x7f0000007740)=""/4096, 0x1000}], 0x1}, 0x2}, {{&(0x7f0000008780)=@x25, 0x80, &(0x7f0000008d40)=[{&(0x7f0000008800)=""/177, 0xb1}, {&(0x7f00000088c0)=""/166, 0xa6}, {&(0x7f0000008980)=""/65, 0x41}, {&(0x7f0000008a00)=""/229, 0xe5}, {&(0x7f0000008b00)=""/68, 0x44}, {&(0x7f0000008b80)=""/234, 0xea}, {&(0x7f0000008c80)=""/86, 0x56}, {&(0x7f0000008d00)=""/5, 0x5}], 0x8}, 0x6}, {{&(0x7f0000008dc0)=@un=@abs, 0x80, &(0x7f0000009fc0)=[{&(0x7f0000008e40)}, {&(0x7f0000008e80)=""/252, 0xfc}, {&(0x7f0000008f80)=""/43, 0x2b}, {&(0x7f0000008fc0)=""/4096, 0x1000}], 0x4, &(0x7f000000a000)=""/21, 0x15}, 0x6}], 0x9, 0x45833af92e4b39ff, 0x0) 2.992277125s ago: executing program 3 (id=299): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x48, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @CTA_EXPECT_TUPLE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000440)=@req={0x5, 0x8, 0x6, 0xff}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab000e271f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1ff032aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e0800000092e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9be7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa5200002fe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb0972d39e4b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e501ddddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b605908000000f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c332c34812382e57c0e0d83f3f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217b6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f2b88cd544b2a8e1b05ea7cf51578169fff7765f9978883b4b5983b42a35a05dabfc325ec2a2ec2f9b0882fdcf5d6f72272d2ff0d8eea60f5494ba42b4d40f144f0ab680a6f40f9094d3afb58a1efd6109894b8605c6b3b3f020c222f6446195b2274f634fbb737948a1f36ea729467e132385e9da614e4625175f4443b97a675934db90010e4b884200c3546c4d86d712c3939e11be3343f693846f509ad4c445ade5cd6d126d5694462ac5d3b527c3bd51c0a715a28d65fe94b255d02cdc1fab99b5b9c352f1b284115e4046285a824d22b6f0afbed8d6096a72fef72ebd6aae78b02fa1993e8fe2020ae93aae2bcfffa40b98549f1fb9fcefa74329909a207336d07f6f59da423ac5fa47852055d5ce6d2c56bdbbcdbf3458ba478c669f39d5272e65c90908ea2cb86d38f8ebf80a8cb85d8399b42403c94b8662af5cf1411526f177b4d476169a5d5a8c37d0d8893a77d0bd47b8a0bba60b3e26094209c889585f997ff556bcd2cc223f9c0c44de9d0fe1b5a8a815f652e79747d3e1f413fa0575d51f652d22883e143065c5ad74bdc864754ba3dad5a8fc8fc2c807d1a51dfb29884adee415c13f2ce14d307bd6165ec6ba68a766adfcbe444ea72d586bb47dd98a225467aab538a77667d19bae2e51727ba6d190e6d7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 2.884870878s ago: executing program 2 (id=300): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000010280)='./mnt\x00', 0x8010, &(0x7f00000000c0)=ANY=[], 0x1, 0x10235, &(0x7f00000102c0)="$eJzs3M1uG1UUAOA7TRsFWtoIsWDHlQDJkYjln6SCsomoqi4gVUTLCrFwbMdym9hRnDihq7Lg5yHYwYp34AHYsemib4DEDolNhWTkO5OqVAhVYOLG+T5p5sw9Mzn3XsubM0oSgDNrMf7+WxYuh5dCCHMhhEshpOusOJK1PLweQngjhHDuqSMr8k8S8yGEl0MIl8fF85pZceu7H7/67PtfPnz72x9+mqt88/Wv09s1MG1vhRB2dvPrw5089jt5vFvkG8NuijsrwyLmN3buFeN+Hg/bm6nCYeP4uUaK9U7+fH/3YDCOW9uN5jh2ulspv9vLJxwMO8d10g/cbeylcau9mWJ30E+xcz9f11ER7w/28zqtot7nqXzY3z+Oeb591M73s3svxWZvP3uQ8nndfqt9NI7DIhbThdbmf/mET4ePur2Dozhs7w26/V5cLVcr5cryXvPqcqVSfa++3Gk1tppX27WVVmNrJZbaa4P+9lIsdZrNWLp5/fpSrFbKtXLlnXjz1idxuxVL4/hBt3ew390eLMVaub5ari7FN6vx9vpG3Pj4xo31jTtxvd+Lt/rDWK/Eav3aau1a/d24cftOrFVqlVO+/4Vwuvb/xQnPx4zJ/jo8P611AJwi+n9gGv5V/7+Q52eg/y/y/9z/X9H/n4n+/9PwZP+j0Wg0Tp+Z/WcnPB8zxhcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODMuvjz+wfpYjEfnyvyrxSpV4txVtwb/Y3smZpz47ohhAvP+fyXWQjzxRzHx/kQwlpx/HHl//0MAAAAYJY9elx6mKVuPT8tTntBnKT5dM4uPZhQvfRaZ2LfofQi6rVJVZtL65vUTi+G4g3VRFwYnxYmVe25zJ3obAAAwItBJwAAAAAz7dlfwwcAAABmj/4fAAAAZtPTf7Sc+n///w8AAABm26PHpYfTXgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzJ3t2cIAzFAABO/bsUUVzHiyO4jCM4iBt57RzeRKqIEaSICk8Q9fsgtGlLmx5fDnkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw6+rtfNXsz2dV0XvaY5l3/Q8AAADwwPRy6GU6zkuzzKu8d2/t3u0c9COijojhi8+vq4hRfuMag4hYZBwm3WLLehUAAADwT5rNbvnpGgAAAAAAAAAAAAAAAAAAAIAbXzX/L7U2DgAAAIBnzP8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODE7rycAACDMADtZ4HuP20RdAPBy3uQkGMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+uzMOjVu1Jv+BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ8dOCgCAABBAEY1+xfxYwd7cBsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHS7SfbZr2MUAGEgCIAm+UAqf2btb/2WIrlCxNpDnIElsGm2vTZSz6KPvsb/sm/r03tX3hr8VXP2AAAAAP6gRabLrV564iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICD3Tk0AiAGoSjIcf3Q/6S6CAaPi9k1IJ74AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACs/IvixBc5cfYLAECrufV4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHJAAAAACC/r9uR6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMFEAAAD//5WLGsQ=") r0 = open(&(0x7f0000000100)='./file1\x00', 0x14b042, 0x8c) fallocate(r0, 0x10, 0x63db, 0x7000001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000580)='system.posix_acl_access\x00', &(0x7f00000006c0)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x3}, {0x20, 0x2}}, 0x24, 0x1) 2.53160422s ago: executing program 3 (id=301): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.424326203s ago: executing program 3 (id=302): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000000)='*]!\x00', 0x4000, &(0x7f0000000240)={@align, {0x7, 0x8, 0xd, 0x4}}, 0x10000, &(0x7f0000000280), &(0x7f0000000340)=0x1}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x7fff, 0x4, 0x7f, 0xffff}, {0x2, 0x81, 0x0, 0xd40}, {0x4, 0xa, 0x3, 0xfffffffe}, {0x1000, 0x8, 0x0, 0xa0f}]}) (async) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) (async, rerun: 64) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) lseek(0xffffffffffffffff, 0x80000000008, 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r5) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000110000001500000000000000559d4eed7ef42b010e746f0000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x46, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r6 = socket$tipc(0x1e, 0x4, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 1.891191s ago: executing program 2 (id=303): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x7}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) getdents(r2, 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f0000000300)={0x8, {"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", 0x1000}}, 0x1006) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYBLOB="06"], 0x0) 1.538997521s ago: executing program 4 (id=304): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x808f90, &(0x7f0000000280)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@nomblk_io_submit}, {@usrquota}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@minixdf}, {@usrjquota}, {@bsdgroups}, {@usrjquota}, {@test_dummy_encryption_v1}, {@noblock_validity}, {@jqfmt_vfsold}]}, 0x3, 0x483, &(0x7f0000001900)="$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") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) timer_create(0x0, &(0x7f0000000800)={0x0, 0x21}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x3}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) write$binfmt_script(r2, 0x0, 0xb) splice(r3, 0x0, r2, 0x0, 0x1004, 0x0) (async) write$binfmt_misc(r4, &(0x7f00000000c0), 0xfdef) (async) splice(r1, 0x0, r4, 0x0, 0x80, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) (async) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000120001abed30a9000000000027000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) (async) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r7, 0x81fd) io_submit(r8, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000000), 0x4000, 0xa00}]) 1.475969773s ago: executing program 3 (id=305): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x20a40, 0x0) fcntl$setlease(r0, 0x400, 0x0) mremap(&(0x7f00003ad000/0x400000)=nil, 0x400000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r2, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4089, 0xff9}], 0x1, 0x33, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f0000000700)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0xffffffff}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000500)='\f', 0x1}], 0x1, 0x0, 0x0, 0x20000000}, 0x80) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@dev={0xac, 0x14, 0x14, 0x34}, @in6=@local, 0xffff, 0x8, 0x2, 0x0, 0x2, 0x20, 0x0, 0xc}, {0xfffffffffffffff8, 0x400000000001, 0x1, 0x4003, 0x2, 0x200000000020000, 0x3c, 0xffffffffffff0001}, {0x3, 0x0, 0x80, 0x2}, 0x8000000, 0x0, 0x0, 0x1, 0x1, 0x3}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@multicast1, 0x3503, 0x1, 0x1, 0x0, 0xf000000}}, 0xe8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc8, 0xc8, 0x6, [@ptr={0x3, 0x0, 0x0, 0x2, 0x4}, @var={0x10, 0x0, 0x0, 0xe, 0x3, 0x1}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x4}, @func={0xa, 0x0, 0x0, 0xc, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x3}}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7, 0x5}]}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x1, 0x5}, {0xc, 0x4}, {0x1, 0x3}, {0xf, 0x2}, {0x3}, {0x7, 0x3}, {0x6, 0x3}, {0x8, 0x4}]}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x61, 0x0, 0x4a, 0x3}, @typedef={0x4, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x51, 0x61, 0x2e, 0x61]}}, &(0x7f0000000280)=""/155, 0xe6, 0x9b, 0x1, 0x9}, 0x28) listen(r4, 0x2) read$FUSE(r1, &(0x7f0000001ec0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000003f00)={0x50, 0xfffffffffffffff5, r5, {0x7, 0x2d, 0x7, 0x14004, 0x9, 0xd4, 0x80, 0x5, 0x0, 0x0, 0x20, 0xd}}, 0x50) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x100}}}}}}, 0x0) 1.404597495s ago: executing program 4 (id=306): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x48, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @CTA_EXPECT_TUPLE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000440)=@req={0x5, 0x8, 0x6, 0xff}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 1.171788273s ago: executing program 4 (id=307): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x48, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @CTA_EXPECT_TUPLE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000440)=@req={0x5, 0x8, 0x6, 0xff}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 1.092354175s ago: executing program 5 (id=308): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40002}, 0x2000400c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x660042, 0x0, 0x1, 0x0, &(0x7f0000000d40)) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r5, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x40) 978.438739ms ago: executing program 1 (id=309): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x9, 0x4, 0x3}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f00000000c0)}, 0x20) r2 = socket(0x1e, 0x5, 0x0) sendto$inet_nvme_icreq_pdu(r2, &(0x7f00000001c0)={{0x0, 0x8, 0x80, 0x1}, 0x0, 0x0, 0x1, 0x9ca}, 0x80, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r4, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x2}}, 0x2e) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x58, &(0x7f00000002c0)={@random="a70b49c5294f", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x22, 0x11, 0xff, @empty, @local, {[], {0x0, 0xe22, 0x22, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "00000000000099b30134b93b487f43fe1bd7"}}}}}}}, 0x0) recvmmsg(r4, &(0x7f000000a040)=[{{&(0x7f0000000240)=@x25={0x9, @remote}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000480)=""/1, 0x1}, {&(0x7f00000005c0)=""/26, 0x1a}, {&(0x7f0000000d40)=""/152, 0x98}, {&(0x7f0000000e00)=""/54, 0x36}, {&(0x7f0000000e40)=""/234, 0xea}], 0x5}, 0xfffffff8}, {{&(0x7f0000000fc0)=@rc={0x1f, @none}, 0x80, &(0x7f0000002980)=[{&(0x7f0000001040)=""/12, 0xc}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/82, 0x52}, {&(0x7f0000002740)=""/202, 0xca}, {&(0x7f0000002840)=""/205, 0xcd}, {&(0x7f0000002940)=""/47, 0x2f}], 0x6, &(0x7f0000002a00)=""/21, 0x15}, 0x5}, {{&(0x7f0000002a40)=@alg, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002ac0)=""/70, 0x46}], 0x1, &(0x7f0000002b80)=""/192, 0xc0}, 0x300000}, {{&(0x7f0000002c40)=@ax25={{0x3, @default}, [@remote, @default, @default, @bcast, @default, @netrom, @default, @rose]}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002cc0)=""/145, 0x91}, {&(0x7f0000002d80)=""/15, 0xf}, {&(0x7f0000002dc0)=""/123, 0x7b}, {&(0x7f0000002e40)=""/132, 0x84}, {&(0x7f0000002f00)=""/7, 0x7}], 0x5}, 0xfff}, {{&(0x7f0000002fc0)=@isdn, 0x80, &(0x7f0000004280)=[{&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/143, 0x8f}, {&(0x7f0000004100)=""/214, 0xd6}, {&(0x7f0000004200)=""/45, 0x2d}, {&(0x7f0000004240)}], 0x5, &(0x7f0000004300)=""/4096, 0x1000}, 0x9}, {{0x0, 0x0, &(0x7f0000007540)=[{&(0x7f0000005300)=""/132, 0x84}, {&(0x7f00000053c0)=""/143, 0x8f}, {&(0x7f0000005480)=""/4096, 0x1000}, {&(0x7f0000006480)=""/4096, 0x1000}, {&(0x7f0000007480)=""/187, 0xbb}], 0x5, &(0x7f00000075c0)=""/217, 0xd9}, 0x7}, {{&(0x7f00000076c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000008740)=[{&(0x7f0000007740)=""/4096, 0x1000}], 0x1}, 0x2}, {{&(0x7f0000008780)=@x25, 0x80, &(0x7f0000008d40)=[{&(0x7f0000008800)=""/177, 0xb1}, {&(0x7f00000088c0)=""/166, 0xa6}, {&(0x7f0000008980)=""/65, 0x41}, {&(0x7f0000008a00)=""/229, 0xe5}, {&(0x7f0000008b00)=""/68, 0x44}, {&(0x7f0000008b80)=""/234, 0xea}, {&(0x7f0000008c80)=""/86, 0x56}, {&(0x7f0000008d00)=""/5, 0x5}], 0x8}, 0x6}, {{&(0x7f0000008dc0)=@un=@abs, 0x80, &(0x7f0000009fc0)=[{&(0x7f0000008e40)}, {&(0x7f0000008e80)=""/252, 0xfc}, {&(0x7f0000008f80)=""/43, 0x2b}, {&(0x7f0000008fc0)=""/4096, 0x1000}], 0x4, &(0x7f000000a000)=""/21, 0x15}, 0x6}], 0x9, 0x45833af92e4b39ff, 0x0) 12.003059ms ago: executing program 1 (id=310): sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x804d) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0xa) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', r5, 0x0, 0xfd, 0x6, 0xfffffffc, 0x39, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @remote, 0x8000, 0xba08, 0x2, 0x4}}) setresuid(0xee01, 0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x81861a, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$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") r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r6, &(0x7f00000013c0)=""/4100, 0x1004, 0x2af7) 0s ago: executing program 4 (id=311): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000240)={0x11, {{0x29, 0x0, 0x5000000, @local, 0x7ff}}}, 0x88) r0 = socket$packet(0x11, 0x3, 0x300) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c00200da779e57c52e33a83fdbd563a5b7c6b958cb6e49387a5ba5a89b0887c0292eb888cc8efa81040100d83ba748033542625bc334eaf793332891541000f3c63c0a5f0af254a5bd1f4b81d0c4d88ddcadf07eff7f49004e0b243a8a4d93632fbe9ab868d88310829d8e05a3c0572143a3d3d1472cc5da6f72bb097f5f7b95a09e442c0a1463aaa90db7dcbc542dc5bced278eda11583f810469b706968e793db3230"], 0x1, 0x105dc, &(0x7f0000020c40)="$eJzs3EtvG1UbB/DHzdvrW9oK9QIrRkJIsYStOEkjkBAK0AoqkSrismAFju1Ybm1PFDsXuoZV+QhskRBix2dgw9eoWCAhFkjsikCemaAGuqCpE4fk95Mm/zPHZx6fM/LmeCIHcGxdSn77tRQX4mxETEXE+YisXSqOzGIez0XECxFx4pGjVPT/1XEqIs5FxIVR8bxmqXhp4fcHD796/tZr9795UK799PWXk1s1MGkvRURvLW9v9fJM23neKfrrm50se/ObReYv9O4W52meW62VrMJWfWdcPcu5dj4+XdsYjHK1W2+Mst1ZzfrX+vkbDjbbO3WyC+7U17PzZmsly84gzbJ9L5/XdpH3BsO8TrOo92lWPobDncz7W9utfD1rd7Ns9IdFf143bba2R7lZZPF20Ui7zWweK3u+zYfeu53+xnay2VofdNJ+cr1ae6VaW6jU1tNma9iar9R7zYX5ZLrdHQ2rDFv13mI7TdvdVrWR9srJdLvRqNRqyfSN1kqn3k9qtepcdaZyvVy0Xk7evv1h0m0m06N8s9PfGHa6g2Q1XU/yK8rJbHXu1XLyYi15f2k5WX7v5s2l5Q8+vvHR7TeWbr1VDPrHtJLp2ZnZ2UptpjJbKx/O9Z8q6o9x/VOxD+svPd3lHHc+QABPzP4fmAT7/yfZ/yd7vs+H3RHZ//9y/+KxXv+e2b7xVHyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACOrR9PfvdO1riUn/+/6H+m6Ho2Iq5FxNWIuBIRfzzGVJzaVfNyRJSK9uPGn/zbHL4vRVZhdM3p4jgXEYvF8fDift8FAAAAOLq+/eGzzyOmRs3sz+uTnhAHqfjS5sy46mVf+fxvXNUuZ8W2x1Ttyk7JsbgaEScv/Tymatci4sT5T8ZU7V+Z2hVnHolSHicOcjYAAMDB2L0TGNvuDQAAgEPni0lPgMnIntcW/4tfPAs+nUfxQPDsrjMAAADgP6g06QkAAAAA+y7b//v9PwAAADja8t//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JOdu8lZIobjAPwHHAE/ieHjKqyMSxYcwiO49AB6G3ecwYRwDtx5BAOGTkVA3DhFJu/7PMlMpxP4tUPCoi0UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAW/pWrRZfNp8+N83Z7Zsp8zQAAADANdtqtUgXo7r+PN9/mW+9iYhZREwjYhIR18buvXh6ktiJcTrXrr2+uujD14iUcHhPPx/PIuJdPn68vv3nAAAAAA/VZj1fRvQOl+n09njFI5AnbQal8tKUz5NSaeMU9rFQ2uRXZBHTiKhG3wulzSKi++J9rv31+zcs1NzvRl7l2uCk6NRFt2BjAABAS/TOimKjNwAAAFrnw707wH2k9dr8W/y8Ftyvi7wgODyrAQAAAO11+W/7o87/7QcAAABwB2n8/8f+f3lW4N/3/wv7/wEAAECL1Pv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEvbarXYrOfLpjm7fTNlngYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH6yP+coGMIAEEbnX1xyp+D9jyWD1rY270HgI0OKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJPPffK9YuTXOJL8e9tYus8ka6fG1qmxd26MPphv/wYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABO9ufuBEIgCMJg3/mf02L+YUmDxiBCFSx8zDAPCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsQMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhf25t00YCOM4/NpJlLhNRkhv8TEDDRWCEfiQkCx5BgZgIRoqWotFYAUQcNDSmYLnaf4/na64AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeE+npzc+IiL7fGQe+XD1d7gcfEW+bprB9zWzzXFf/9xyst2NUv7G+L+IiCKyFn4DANC+8r4pFstq3knbTdtL209bTutq9spHAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABndu5gJaooDADwP6MzZq1aqhBBi9qkqVkGbloI7oOgdqKTSGOFzkLFjU8QtXLbK+SuXqEXCFqU4KKFi4I2QRTj3NEjqWjB3It+H/z3/jPDPfecGbjMP+fcAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOJWd9bjUzksR0d+9nzd9/LY2c9j+/ctP/e34ev/dlbTNZhOViHgyX6/d6uBYim5pZfXpdL1eW5Sch6Qn+9iL0h9JYZP0KlHK5+IEAMCZUsmi+e3yS2VzqvlcaSLi95uD9f/1JI9j6v/tjb5KbPQNbG/0Dfxa/tBIz5XW/8MdG2Fh9Bz1wlBj4cXQ0srqzfmF6bnaXO3Z6OjI2J2x2/fujgy1D/KLCQAAAP+jmkVa/5cn/p7/v5jkcXz9P9COh5OPH6Xn6jrf9f+R9if98u4JAADA+Xb56o/vh62+LFWrsTzdaCwOt7Z7j0da2xy6emo9WaT1f9dE3r0CAAAAOmFnvXRg/n82yeOE8/+Db9e20ja7IqI3m/8fnHlen+3ccArtn+4Q7o6IUxyV9xgBAADIV28W6fx/ZXf9f3lvyUM5Im5ca+XZ3wCeqP7//PrBgZvW0/X/o50bYiGVx1vvx+5+PKJ7PO8eAQAAcJZdyKJZ7G9VNqcWf76arFr/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf9ixY5QGgigMwJvdrFZiwEqtvIDoBSIWgth4CFEQPIEI4gHE1tI7WHqH1Ao2FpYpvIG82R2VNAGLXSXfB5P3CEPmZdLkXwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmGu6/91X8TJq+rJ97/nj6iTqy0wN7/frm7GiH3Q59L+z1/cAAAAALIgq5/uiKN7qx8Oo5Tjl/zrvicz/sNL0Oc/P5v5cn+5eN3L+vz7euvw6aNScEx96dn5xutPZN/z7VufuGKabT89eqvSDlEc3a9M63efgdjI5WErtchfTAgC/sZ1r2+T/Q1F3+xwMgIUxbFfxI/9X435nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjCZwAAAP//r+5ZIQ==") r1 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0xd616, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) gettid() mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) sendfile(r1, r1, &(0x7f0000000080)=0x4, 0x80000000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xc, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r2}, 0x14) kernel console output (not intermixed with test programs): EV_CHANGE): hsr_slave_0: link becomes ready [ 24.908189][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.916281][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.926571][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.934860][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.941904][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.949479][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.957760][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.964867][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.997943][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.006643][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.013807][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.021676][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.030617][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.037711][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.045122][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.053034][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.061176][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.069164][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.077170][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.085107][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.102071][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.109725][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.117913][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.126368][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.133396][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.141512][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.149751][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.156816][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.164559][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.182039][ T282] device veth0_vlan entered promiscuous mode [ 25.192005][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.200428][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.208707][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.217655][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.226108][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.234223][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.242158][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.250539][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.260208][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.269141][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.277579][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.285417][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.297396][ T279] device veth0_vlan entered promiscuous mode [ 25.310802][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.318790][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.326901][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.336036][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.344422][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.352691][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.361198][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.368693][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.385839][ T280] device veth0_vlan entered promiscuous mode [ 25.393890][ T281] device veth0_vlan entered promiscuous mode [ 25.404125][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.412499][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.421583][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.430145][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.438487][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.446679][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.454920][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.463064][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.471192][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.478756][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.486361][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.493802][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.503916][ T283] device veth0_vlan entered promiscuous mode [ 25.515434][ T282] device veth1_macvtap entered promiscuous mode [ 25.527073][ T279] device veth1_macvtap entered promiscuous mode [ 25.534089][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.541707][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.549761][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.557998][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.567194][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.575709][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.583257][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.591565][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.599859][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.608351][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.616651][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.624276][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.633586][ T281] device veth1_macvtap entered promiscuous mode [ 25.643311][ T283] device veth1_macvtap entered promiscuous mode [ 25.650780][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.658761][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.667111][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.675413][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.685172][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.693496][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.707479][ T280] device veth1_macvtap entered promiscuous mode [ 25.716966][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.725036][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.733267][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.742046][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.750684][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.759854][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.768567][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.787673][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.796379][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.805268][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.805624][ T282] request_module fs-gadgetfs succeeded, but still no fs? [ 25.815592][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.831127][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.839944][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.853206][ T282] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 25.875508][ T303] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.891250][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.901035][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.910006][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.919457][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.927903][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.936263][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.006745][ T314] ====================================================== [ 26.006745][ T314] WARNING: the mand mount option is being deprecated and [ 26.006745][ T314] will be removed in v5.15! [ 26.006745][ T314] ====================================================== [ 26.051444][ T314] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 26.069122][ T314] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 26.077276][ T314] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 26.086141][ T314] EXT4-fs (loop3): orphan cleanup on readonly fs [ 26.092705][ T314] EXT4-fs warning (device loop3): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 26.107862][ T314] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 26.115649][ T314] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.4: bg 0: block 40: padding at end of block bitmap is not set [ 26.158351][ T314] EXT4-fs (loop3): Remounting filesystem read-only [ 26.174118][ T314] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 26.183177][ T314] EXT4-fs (loop3): 1 truncate cleaned up [ 26.193121][ T314] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,dioread_lock,nouid32,nomblk_io_submit, [ 26.277704][ T314] overlayfs: unrecognized mount option "G#SWbT" or missing value [ 26.679987][ T345] Zero length message leads to an empty skb [ 26.686516][ T346] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 26.753877][ T53] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 26.761564][ T342] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7'. [ 27.038413][ T359] erofs: (device loop4): mounted with root inode @ nid 36. [ 27.114065][ T304] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 27.125669][ T362] SELinux: unknown common database [ 27.133757][ T362] SELinux: failed to load policy [ 27.154788][ T366] xt_hashlimit: size too large, truncated to 1048576 [ 27.174343][ T53] usb 2-1: unable to get BOS descriptor or descriptor too short [ 27.224059][ T53] usb 2-1: not running at top speed; connect to a high speed hub [ 27.304185][ T53] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 4 [ 27.319820][ T376] process 'syz.2.18' launched '/dev/fd/3' with NULL argv: empty string added [ 27.324323][ T53] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 34, changing to 4 [ 27.339786][ T25] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 27.484049][ T304] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64 [ 27.495601][ T304] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 27.505019][ T304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.516405][ T53] usb 2-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 27.526158][ T53] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.535257][ T53] usb 2-1: Product: syz [ 27.539533][ T53] usb 2-1: Manufacturer: syz [ 27.544261][ T351] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 27.551969][ T53] usb 2-1: SerialNumber: syz [ 27.664185][ T25] usb 5-1: not running at top speed; connect to a high speed hub [ 27.744083][ T25] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 27.755380][ T25] usb 5-1: config 1 interface 0 has no altsetting 0 [ 27.795045][ T323] xt_hashlimit: size too large, truncated to 1048576 [ 27.845957][ T24] kauditd_printk_skb: 191 callbacks suppressed [ 27.845971][ T24] audit: type=1400 audit(1781634774.520:264): avc: denied { append } for pid=321 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 27.877991][ T24] audit: type=1400 audit(1781634774.550:265): avc: denied { map } for pid=321 comm="syz.1.2" path="socket:[15622]" dev="sockfs" ino=15622 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.887167][ T379] F2FS-fs (loop2): invalid crc value [ 27.907164][ T24] audit: type=1400 audit(1781634774.550:266): avc: denied { read } for pid=321 comm="syz.1.2" path="socket:[15622]" dev="sockfs" ino=15622 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.914370][ T25] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0a16, bcdDevice= 0.40 [ 27.940246][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.949118][ T25] usb 5-1: Product: Ќ [ 27.953856][ T25] usb 5-1: Manufacturer: ᰁ [ 27.956089][ T379] F2FS-fs (loop2): Found nat_bits in checkpoint [ 27.959960][ T25] usb 5-1: SerialNumber: ᐇ [ 28.001772][ T379] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 28.004964][ T359] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 28.059183][ T24] audit: type=1400 audit(1781634774.730:267): avc: denied { create } for pid=390 comm="syz.0.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.279379][ T397] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.22: inode has both inline data and extents flags [ 28.293865][ T397] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.22: couldn't read orphan inode 15 (err -117) [ 28.305888][ T397] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 28.334224][ T53] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 28.344121][ T401] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 28.367502][ T24] audit: type=1400 audit(1781634775.040:268): avc: denied { write } for pid=396 comm="syz.0.22" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 28.405026][ T53] usb 2-1: USB disconnect, device number 2 [ 28.420088][ T401] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,barrier=0x0000000000000005,user_xattr,noinit_itable,,errors=continue [ 28.428800][ T24] audit: type=1400 audit(1781634775.050:269): avc: denied { add_name } for pid=396 comm="syz.0.22" name="cpuset.effective_mems" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 28.475178][ T24] audit: type=1400 audit(1781634775.050:270): avc: denied { create } for pid=396 comm="syz.0.22" name="cpuset.effective_mems" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 28.496633][ T24] audit: type=1400 audit(1781634775.050:271): avc: denied { read append open } for pid=396 comm="syz.0.22" path="/7/file0/cpuset.effective_mems" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 28.521342][ T24] audit: type=1400 audit(1781634775.070:272): avc: denied { create } for pid=358 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 28.540835][ T24] audit: type=1400 audit(1781634775.140:273): avc: denied { map } for pid=396 comm="syz.0.22" path="/7/file0/cpuset.effective_mems" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 28.584802][ T7] EXT4-fs error (device loop2): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 28.600735][ T7] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 72 with error 28 [ 28.613630][ T7] EXT4-fs (loop2): This should not happen!! Data will be lost [ 28.613630][ T7] [ 28.624515][ T7] EXT4-fs (loop2): Total free blocks count 0 [ 28.630523][ T7] EXT4-fs (loop2): Free/Dirty block details [ 28.636716][ T7] EXT4-fs (loop2): free_blocks=20480 [ 28.642020][ T7] EXT4-fs (loop2): dirty_blocks=80 [ 28.647403][ T7] EXT4-fs (loop2): Block reservation details [ 28.653403][ T7] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 29.024156][ T304] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 29.075446][ T304] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input4 [ 29.095746][ T304] usb 4-1: USB disconnect, device number 2 [ 29.591880][ T359] udc-core: couldn't find an available UDC or it's busy [ 29.599573][ T359] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 29.628209][ T433] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 29.638746][ T433] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 29.684816][ T304] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 29.693569][ T433] F2FS-fs (loop3): Found nat_bits in checkpoint [ 29.738538][ T433] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 29.745908][ T433] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 29.824044][ T25] usbhid 5-1:1.0: can't add hid device: -71 [ 29.831593][ T25] usbhid: probe of 5-1:1.0 failed with error -71 [ 29.839772][ T25] usb 5-1: USB disconnect, device number 2 [ 29.956907][ T447] netlink: 'syz.3.29': attribute type 298 has an invalid length. [ 29.964336][ T304] usb 3-1: device descriptor read/64, error -71 [ 30.194585][ T457] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.32: inode has both inline data and extents flags [ 30.207950][ T457] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.32: couldn't read orphan inode 15 (err -117) [ 30.220071][ T457] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 30.394096][ T304] usb 3-1: device descriptor read/64, error -71 [ 30.427114][ T466] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.34: inode has both inline data and extents flags [ 30.440542][ T466] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.34: couldn't read orphan inode 15 (err -117) [ 30.452764][ T466] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 30.637513][ T449] F2FS-fs (loop3): Test dummy encryption mode enabled [ 30.645352][ T449] F2FS-fs (loop3): invalid crc value [ 30.652592][ T449] F2FS-fs (loop3): Found nat_bits in checkpoint [ 30.664094][ T304] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 30.695017][ T449] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 30.834045][ T421] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 30.935482][ T304] usb 3-1: device descriptor read/64, error -71 [ 30.942270][ T478] tipc: Started in network mode [ 30.947703][ T478] tipc: Own node identity 00000000000000000000030000000001, cluster identity 4711 [ 30.957644][ T478] tipc: Enabling of bearer rejected, failed to enable media [ 31.074120][ T421] usb 5-1: Using ep0 maxpacket: 32 [ 31.129178][ T480] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a800c029, mo2=0003] [ 31.137637][ T480] System zones: 0-7 [ 31.142204][ T480] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,lazytime,nobarrier,delalloc,nombcache,min_batch_time=0x0000000000000007,errors=remount-ro, [ 31.166100][ T480] EXT4-fs error (device loop0): ext4_find_extent:928: inode #2: comm syz.0.37: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 31.182741][ T480] EXT4-fs (loop0): Remounting filesystem read-only [ 31.198333][ T480] EXT4-fs (loop0): Remounting file system with no journal so ignoring journalled data option [ 31.210040][ T480] EXT4-fs error (device loop0): ext4_remount:5882: Abort forced by user [ 31.234084][ T421] usb 5-1: unable to get BOS descriptor or descriptor too short [ 31.296728][ T489] SELinux: unknown common [ 31.301329][ T489] SELinux: failed to load policy [ 31.314115][ T421] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 510, setting to 64 [ 31.325010][ T304] usb 3-1: device descriptor read/64, error -71 [ 31.331272][ T421] usb 5-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 31.444106][ T304] usb usb3-port1: attempt power cycle [ 31.494150][ T421] usb 5-1: New USB device found, idVendor=0499, idProduct=5003, bcdDevice= 0.40 [ 31.503334][ T421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.511407][ T421] usb 5-1: Product: syz [ 31.515634][ T421] usb 5-1: Manufacturer: syz [ 31.520219][ T421] usb 5-1: SerialNumber: syz [ 31.564143][ T5] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 31.767578][ T470] udc-core: couldn't find an available UDC or it's busy [ 31.774599][ T470] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 31.800833][ T470] udc-core: couldn't find an available UDC or it's busy [ 31.807925][ T470] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 31.854069][ T304] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 31.894790][ T421] snd-usb-audio: probe of 5-1:1.0 failed with error -2 [ 31.903802][ T421] usb 5-1: USB disconnect, device number 3 [ 31.934089][ T5] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 31.945151][ T5] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 31.956247][ T5] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 32.006176][ T494] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 32.018422][ T494] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.031708][ T494] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 32.041719][ T304] usb 3-1: device descriptor read/8, error -71 [ 32.043808][ T494] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 32.056235][ T494] System zones: 1-12 [ 32.060922][ T494] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2799: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 32.074145][ T494] EXT4-fs (loop1): 1 truncate cleaned up [ 32.079903][ T494] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,debug,data=journal,,errors=continue [ 32.134152][ T5] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.143609][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.151827][ T5] usb 4-1: Product: syz [ 32.156144][ T5] usb 4-1: Manufacturer: syz [ 32.160770][ T5] usb 4-1: SerialNumber: syz [ 32.186523][ T490] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 32.189984][ T509] netlink: 20 bytes leftover after parsing attributes in process `syz.1.42'. [ 32.203025][ T509] mmap: syz.1.42 (509): VmData 29081600 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 32.241508][ T511] 9pnet: Insufficient options for proto=fd [ 32.294074][ T304] usb 3-1: device descriptor read/8, error -71 [ 32.454301][ T5] cdc_ncm 4-1:1.0: bind() failure [ 32.460452][ T5] cdc_ncm 4-1:1.1: bind() failure [ 32.466564][ T5] usb 4-1: USB disconnect, device number 3 [ 32.499932][ T521] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 32.519811][ T521] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 32.532626][ T519] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 32.541916][ T519] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 32.794047][ T304] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 32.884046][ T290] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 32.964067][ T421] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 33.004188][ T304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.015285][ T304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.025080][ T304] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 33.034264][ T304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.042629][ T491] Bluetooth: hci0: command 0x1003 tx timeout [ 33.048902][ T304] usb 3-1: config 0 descriptor?? [ 33.054005][ T483] Bluetooth: hci0: sending frame failed (-49) [ 33.214024][ T421] usb 5-1: Using ep0 maxpacket: 8 [ 33.264182][ T290] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 33.275284][ T290] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 49455, setting to 1024 [ 33.286693][ T290] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 33.296835][ T290] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 33.305984][ T290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.334124][ T519] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 33.366941][ T24] kauditd_printk_skb: 129 callbacks suppressed [ 33.366954][ T24] audit: type=1400 audit(1781634780.040:403): avc: denied { map } for pid=534 comm="syz.3.49" path="/dev/usbmon0" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 33.433360][ T24] audit: type=1400 audit(1781634780.100:404): avc: denied { write } for pid=537 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.453810][ T24] audit: type=1400 audit(1781634780.100:405): avc: denied { nlmsg_write } for pid=537 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.474240][ T24] audit: type=1400 audit(1781634780.110:406): avc: denied { read } for pid=537 comm="syz.3.50" path="socket:[16012]" dev="sockfs" ino=16012 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.515387][ T421] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0035, bcdDevice= 0.40 [ 33.524998][ T421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.533027][ T421] usb 5-1: Product: syz [ 33.537397][ T421] usb 5-1: Manufacturer: syz [ 33.542004][ T421] usb 5-1: SerialNumber: syz [ 33.577098][ T24] audit: type=1400 audit(1781634780.250:407): avc: denied { mount } for pid=548 comm="syz.2.54" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 33.598802][ T304] usbhid 3-1:0.0: can't add hid device: -71 [ 33.598970][ T304] usbhid: probe of 3-1:0.0 failed with error -71 [ 33.612213][ T304] usb 3-1: USB disconnect, device number 5 [ 33.774045][ T491] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 33.806546][ T24] audit: type=1400 audit(1781634780.480:408): avc: denied { bind } for pid=532 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.827118][ T24] audit: type=1400 audit(1781634780.480:409): avc: denied { setopt } for pid=532 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.885103][ T421] snd-usb-audio: probe of 5-1:1.0 failed with error -2 [ 33.893837][ T421] usb 5-1: USB disconnect, device number 4 [ 34.144129][ T491] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 34.155461][ T491] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 34.168633][ T491] usb 4-1: config 0 interface 0 has no altsetting 0 [ 34.175334][ T491] usb 4-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 34.184587][ T491] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.193453][ T491] usb 4-1: config 0 descriptor?? [ 34.375258][ T290] usb 2-1: USB disconnect, device number 3 [ 34.537977][ T561] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.57: inode has both inline data and extents flags [ 34.551519][ T561] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.57: couldn't read orphan inode 15 (err -117) [ 34.563508][ T561] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 34.594015][ T421] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 34.684707][ T565] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 34.695536][ T565] EXT4-fs (loop2): orphan cleanup on readonly fs [ 34.702133][ T565] EXT4-fs error (device loop2): ext4_find_extent:928: inode #4: comm syz.2.58: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 34.719220][ T565] EXT4-fs (loop2): Remounting filesystem read-only [ 34.725869][ T565] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117 [ 34.735508][ T491] usbhid 4-1:0.0: can't add hid device: -71 [ 34.736109][ T565] EXT4-fs warning (device loop2): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 34.741595][ T491] usbhid: probe of 4-1:0.0 failed with error -71 [ 34.756640][ T565] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 34.766451][ T491] usb 4-1: USB disconnect, device number 4 [ 34.777885][ T565] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=./file1,errors=remount-ro, [ 34.834011][ T421] usb 5-1: Using ep0 maxpacket: 16 [ 34.954118][ T421] usb 5-1: config index 0 descriptor too short (expected 4495, got 71) [ 34.963039][ T421] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 34.971472][ T421] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.982174][ T421] usb 5-1: config 0 has no interface number 0 [ 35.094079][ T491] Bluetooth: hci0: command 0x1001 tx timeout [ 35.100239][ T483] Bluetooth: hci0: sending frame failed (-49) [ 35.154435][ T421] usb 5-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 35.163748][ T421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.171930][ T421] usb 5-1: Product: syz [ 35.176285][ T421] usb 5-1: Manufacturer: syz [ 35.180908][ T421] usb 5-1: SerialNumber: syz [ 35.202542][ T421] usb 5-1: config 0 descriptor?? [ 35.264016][ T290] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 35.286966][ T565] tipc: Started in network mode [ 35.291873][ T565] tipc: Own node identity f6c183cf83be, cluster identity 4711 [ 35.299637][ T565] tipc: Enabled bearer , priority 0 [ 35.308736][ T564] tipc: Disabling bearer [ 35.400957][ T24] audit: type=1400 audit(1781634782.070:410): avc: denied { name_bind } for pid=573 comm="syz.2.61" src=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 35.445709][ T5] usb 5-1: USB disconnect, device number 5 [ 35.464034][ T15] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 35.489532][ T579] netlink: 11 bytes leftover after parsing attributes in process `syz.2.63'. [ 35.499625][ T24] audit: type=1400 audit(1781634782.170:411): avc: denied { read write } for pid=577 comm="syz.2.63" name="fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 35.556627][ T579] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 35.567288][ T579] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000e11d, mo2=0002] [ 35.575930][ T579] System zones: 0-1, 2-3, 5-36, 22-22, 98-101, 102-102 [ 35.583395][ T579] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,nodelalloc,,errors=continue [ 35.794141][ T290] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 35.803322][ T290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.811477][ T290] usb 2-1: Product: syz [ 35.815740][ T290] usb 2-1: Manufacturer: syz [ 35.820464][ T290] usb 2-1: SerialNumber: syz [ 35.834075][ T15] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.845233][ T15] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 35.994973][ T583] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.014159][ T15] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 36.017620][ T583] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,barrier=0x0000000000000005,user_xattr,noinit_itable,,errors=continue [ 36.023558][ T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.057388][ T15] usb 4-1: Product: syz [ 36.061583][ T15] usb 4-1: Manufacturer: syz [ 36.068624][ T15] usb 4-1: SerialNumber: syz [ 36.114486][ T15] cdc_mbim 4-1:1.0: skipping garbage [ 36.126369][ T583] EXT4-fs error (device loop4): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 36.140740][ T583] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 2048 with error 28 [ 36.153338][ T583] EXT4-fs (loop4): This should not happen!! Data will be lost [ 36.153338][ T583] [ 36.163221][ T583] EXT4-fs (loop4): Total free blocks count 0 [ 36.169345][ T583] EXT4-fs (loop4): Free/Dirty block details [ 36.175816][ T583] EXT4-fs (loop4): free_blocks=20480 [ 36.178472][ T290] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 36.181531][ T583] EXT4-fs (loop4): dirty_blocks=4368 [ 36.193198][ T583] EXT4-fs (loop4): Block reservation details [ 36.199241][ T583] EXT4-fs (loop4): i_reserved_data_blocks=273 [ 36.206059][ T290] usb 2-1: 2:1 : no cluster descriptor [ 36.224838][ T7] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28 [ 36.231569][ T290] usb 2-1: USB disconnect, device number 4 [ 36.238044][ T7] EXT4-fs (loop4): This should not happen!! Data will be lost [ 36.238044][ T7] [ 36.314848][ T572] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 36.372886][ T592] 9pnet: Insufficient options for proto=fd [ 36.398751][ T589] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x08afac00, checksum : 0x1119ac00) [ 36.410883][ T589] exFAT-fs (loop2): invalid boot region [ 36.416791][ T589] exFAT-fs (loop2): failed to recognize exfat type [ 36.548450][ T572] udc-core: couldn't find an available UDC or it's busy [ 36.563097][ T572] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 36.588505][ T596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.67'. [ 36.844835][ T572] TCP: tcp_parse_options: Illegal window scaling value 45 > 14 received [ 36.853728][ T572] udc-core: couldn't find an available UDC or it's busy [ 36.861105][ T572] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 36.924566][ T589] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 36.932461][ T589] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 36.943742][ T589] F2FS-fs (loop2): Found nat_bits in checkpoint [ 36.978984][ T589] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 36.986294][ T589] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 37.064040][ T363] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 37.074254][ T572] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 37.084078][ T15] cdc_mbim 4-1:1.0: setting rx_max = 16384 [ 37.104045][ T290] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 37.165294][ T614] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 37.184432][ T421] Bluetooth: hci0: command 0x1009 tx timeout [ 37.304124][ T15] cdc_mbim 4-1:1.0: setting tx_max = 44 [ 37.314372][ T15] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 37.322551][ T15] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 46:43:42:56:f0:22 [ 37.350231][ T15] usb 4-1: USB disconnect, device number 5 [ 37.364389][ T15] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 37.424026][ T363] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.444000][ T363] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 37.463142][ T363] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 37.482558][ T363] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.494438][ T290] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 37.495921][ T363] usb 5-1: config 0 descriptor?? [ 37.517616][ T290] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 37.528837][ T290] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 37.714160][ T290] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.723482][ T290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.731750][ T290] usb 2-1: Product: syz [ 37.736228][ T290] usb 2-1: Manufacturer: syz [ 37.740846][ T290] usb 2-1: SerialNumber: syz [ 37.774043][ T607] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 37.815429][ T647] syz.2.73 uses obsolete (PF_INET,SOCK_PACKET) [ 37.820801][ T650] udc-core: couldn't find an available UDC or it's busy [ 37.828836][ T650] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 37.837087][ T647] udc-core: couldn't find an available UDC or it's busy [ 37.844139][ T647] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 37.874168][ T649] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4159165193 (66546643088 ns) > initial count (58884673200 ns). Using initial count to start timer. [ 37.896649][ T649] kvm: pic: non byte write [ 37.995196][ T607] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 38.035354][ T660] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 38.044505][ T660] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.134064][ T363] usb 5-1: string descriptor 0 read error: -71 [ 38.141015][ T363] usb 5-1: USB disconnect, device number 6 [ 38.262976][ T662] F2FS-fs (loop2): Invalid log blocks per segment (4278190089) [ 38.270638][ T662] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 38.279644][ T662] F2FS-fs (loop2): invalid crc value [ 38.290312][ T662] F2FS-fs (loop2): Found nat_bits in checkpoint [ 38.324860][ T662] F2FS-fs (loop2): recover fsync data on readonly fs [ 38.331830][ T662] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 38.339765][ T662] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 38.362456][ T656] F2FS-fs (loop2): Corrupted max_depth of 3: 255 [ 38.369450][ T656] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 38.674379][ T607] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 38.735778][ T674] EXT4-fs (loop4): Ignoring removed bh option [ 38.775989][ T674] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc, [ 38.835529][ T24] kauditd_printk_skb: 30 callbacks suppressed [ 38.835541][ T24] audit: type=1400 audit(1781634785.510:442): avc: denied { create } for pid=673 comm="syz.4.82" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 38.904125][ T290] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 38.910602][ T290] cdc_ncm 2-1:1.0: setting tx_max = 16384 [ 38.912485][ T24] audit: type=1326 audit(1781634785.510:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=686 comm="syz.2.83" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f33e39f5e59 code=0x7ffc0000 [ 38.922242][ T290] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 39.013822][ T24] audit: type=1326 audit(1781634785.530:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=686 comm="syz.2.83" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f33e39f5e59 code=0x7ffc0000 [ 39.074021][ T24] audit: type=1326 audit(1781634785.530:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=686 comm="syz.2.83" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f33e39f5e59 code=0x7ffc0000 [ 39.110282][ T5] usb 2-1: USB disconnect, device number 5 [ 39.122781][ T5] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 39.138456][ T24] audit: type=1326 audit(1781634785.530:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=686 comm="syz.2.83" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f33e39f5e59 code=0x7ffc0000 [ 39.179857][ T24] audit: type=1326 audit(1781634785.530:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=686 comm="syz.2.83" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f33e39f5e59 code=0x7ffc0000 [ 39.234208][ T24] audit: type=1326 audit(1781634785.530:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=686 comm="syz.2.83" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f33e39f5e59 code=0x7ffc0000 [ 39.334015][ T24] audit: type=1326 audit(1781634785.530:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=686 comm="syz.2.83" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f33e39f5e59 code=0x7ffc0000 [ 39.393221][ T24] audit: type=1326 audit(1781634785.530:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=686 comm="syz.2.83" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f33e39f5e59 code=0x7ffc0000 [ 39.421255][ T24] audit: type=1326 audit(1781634785.530:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=686 comm="syz.2.83" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f33e39f5e59 code=0x7ffc0000 [ 39.454098][ T290] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 39.530554][ T714] capability: warning: `syz.3.88' uses deprecated v2 capabilities in a way that may be insecure [ 39.720272][ T735] incfs: Options parsing error. -22 [ 39.725618][ T735] incfs: mount failed -22 [ 39.735930][ T738] netlink: 64 bytes leftover after parsing attributes in process `syz.3.91'. [ 39.864067][ T290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.883996][ T290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.903986][ T290] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 39.927099][ T290] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 39.947268][ T290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.965012][ T290] usb 3-1: config 0 descriptor?? [ 40.055661][ T753] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 40.062991][ T753] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 40.072729][ T753] F2FS-fs (loop3): invalid crc value [ 40.078981][ T753] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 40.105117][ T753] F2FS-fs (loop3): Start checkpoint disabled! [ 40.112185][ T753] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 40.119444][ T753] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 40.131596][ T753] attempt to access beyond end of device [ 40.131596][ T753] loop3: rw=0, want=45072, limit=40427 [ 40.142792][ T5] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 40.314065][ T15] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 40.424066][ T5] usb 2-1: device descriptor read/64, error -71 [ 40.455554][ T290] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x1 [ 40.463012][ T290] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 40.463019][ T761] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 40.463156][ T761] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 40.470997][ T290] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 40.496880][ T290] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 40.504519][ T290] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 40.507725][ T761] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,stripe=0x0000000000000007,inlinecrypt,errors=remount-ro,nouid32,nodelalloc,delalloc,nogrpid,jqfmt=vfsv0, [ 40.511936][ T290] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 40.512686][ T290] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 40.552523][ T290] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 40.661827][ T767] FAT-fs (loop3): Directory bread(block 64) failed [ 40.668535][ T767] FAT-fs (loop3): Directory bread(block 65) failed [ 40.675331][ T767] FAT-fs (loop3): Directory bread(block 66) failed [ 40.681944][ T767] FAT-fs (loop3): Directory bread(block 67) failed [ 40.688569][ T767] FAT-fs (loop3): Directory bread(block 68) failed [ 40.694289][ T15] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.695173][ T767] FAT-fs (loop3): Directory bread(block 69) failed [ 40.706134][ T15] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 40.711845][ T767] FAT-fs (loop3): Directory bread(block 70) failed [ 40.721416][ T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.728157][ T767] FAT-fs (loop3): Directory bread(block 71) failed [ 40.742178][ T767] FAT-fs (loop3): Directory bread(block 72) failed [ 40.746667][ T15] usb 5-1: config 0 descriptor?? [ 40.748813][ T767] FAT-fs (loop3): Directory bread(block 73) failed [ 40.794551][ T15] usb 5-1: bad CDC descriptors [ 40.814030][ T5] usb 2-1: device descriptor read/64, error -71 [ 40.998676][ T674] overlayfs: failed to verify origin (/, ino=2, err=-28) [ 41.005911][ T674] overlayfs: failed to verify upper root origin [ 41.013414][ T363] usb 5-1: USB disconnect, device number 7 [ 41.084018][ T5] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 41.263439][ T767] attempt to access beyond end of device [ 41.263439][ T767] loop3: rw=2049, want=1228, limit=256 [ 41.275721][ T767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'. [ 41.364003][ T5] usb 2-1: device descriptor read/64, error -71 [ 41.588002][ T782] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 41.665147][ T798] EXT4-fs (loop4): Mount option "journal_async_commit" incompatible with ext2 [ 41.754017][ T5] usb 2-1: device descriptor read/64, error -71 [ 41.774090][ T491] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 41.877686][ T5] usb usb2-port1: attempt power cycle [ 42.244121][ T491] usb 4-1: config 0 interface 0 altsetting 22 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.257373][ T491] usb 4-1: config 0 interface 0 has no altsetting 0 [ 42.264061][ T491] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 42.273198][ T491] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.281924][ T491] usb 4-1: config 0 descriptor?? [ 42.494055][ T5] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 42.584044][ T307] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 42.664078][ T5] usb 2-1: device descriptor read/8, error -71 [ 42.810071][ T829] FAT-fs (loop4): Directory bread(block 64) failed [ 42.816884][ T829] FAT-fs (loop4): Directory bread(block 65) failed [ 42.823500][ T829] FAT-fs (loop4): Directory bread(block 66) failed [ 42.841869][ T829] FAT-fs (loop4): Directory bread(block 67) failed [ 42.844227][ T491] usbhid 4-1:0.0: can't add hid device: -71 [ 42.849033][ T829] FAT-fs (loop4): Directory bread(block 68) failed [ 42.861095][ T829] FAT-fs (loop4): Directory bread(block 69) failed [ 42.867813][ T829] FAT-fs (loop4): Directory bread(block 70) failed [ 42.874848][ T290] usb 3-1: USB disconnect, device number 6 [ 42.874938][ T491] usbhid: probe of 4-1:0.0 failed with error -71 [ 42.882276][ T829] FAT-fs (loop4): Directory bread(block 71) failed [ 42.894177][ T5] usb 2-1: device descriptor read/8, error -71 [ 42.900880][ T829] FAT-fs (loop4): Directory bread(block 72) failed [ 42.907867][ T829] FAT-fs (loop4): Directory bread(block 73) failed [ 42.929457][ T491] usb 4-1: USB disconnect, device number 6 [ 42.979857][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 42.990676][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.994408][ T307] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 43.014204][ T307] usb 1-1: config 0 has no interface number 0 [ 43.017573][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 43.030610][ T307] usb 1-1: config 0 interface 41 has no altsetting 0 [ 43.035787][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.045809][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.054421][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.062733][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.071154][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.094066][ T841] EXT4-fs (loop1): Test dummy encryption mode enabled [ 43.120299][ T841] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.120: inode #1: comm syz.1.120: iget: illegal inode # [ 43.150913][ T841] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.120: error while reading EA inode 1 err=-117 [ 43.175729][ T841] EXT4-fs (loop1): 1 orphan inode deleted [ 43.182546][ T841] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000002000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x0000000000000006,usrjquota=,test_dummy_encryption=v1,noblock_validity,noquota,,errors=continue [ 43.213268][ T840] F2FS-fs (loop4): invalid crc value [ 43.221926][ T840] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 43.234204][ T307] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 43.243514][ T307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.251720][ T307] usb 1-1: Product: syz [ 43.256327][ T307] usb 1-1: Manufacturer: syz [ 43.260943][ T307] usb 1-1: SerialNumber: syz [ 43.270015][ T307] usb 1-1: config 0 descriptor?? [ 43.282579][ T840] F2FS-fs (loop4): Start checkpoint disabled! [ 43.289402][ T840] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 43.425305][ T862] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 43.494079][ T290] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 43.584149][ T491] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 43.824043][ T491] usb 5-1: Using ep0 maxpacket: 16 [ 43.824185][ T290] usb 4-1: not running at top speed; connect to a high speed hub [ 43.914100][ T290] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 251, changing to 4 [ 43.944133][ T491] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.955471][ T491] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 43.961145][ T820] udc-core: couldn't find an available UDC or it's busy [ 43.968809][ T491] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 43.975549][ T307] CoreChips: probe of 1-1:0.41 failed with error -32 [ 43.978213][ T820] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 43.995012][ T491] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.010927][ T491] usb 5-1: config 0 descriptor?? [ 44.104113][ T290] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0078, bcdDevice= 0.40 [ 44.113315][ T290] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.121371][ T290] usb 4-1: Product: syz [ 44.125641][ T290] usb 4-1: Manufacturer: syz [ 44.130270][ T290] usb 4-1: SerialNumber: syz [ 44.511883][ T491] HID 045e:07da: Invalid code 65791 type 1 [ 44.553763][ T491] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0002/input/input6 [ 44.566367][ T491] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 44.664089][ T290] usb 4-1: MIDIStreaming interface descriptor not found [ 44.676130][ T290] usb 4-1: USB disconnect, device number 7 [ 44.884915][ T402] udevd[402]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.079303][ T873] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 45.093693][ T873] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #11: comm syz.3.128: iget: bad extra_isize 90 (inode size 256) [ 45.107414][ T873] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.128: error while reading EA inode 11 err=-117 [ 45.120106][ T873] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #11: comm syz.3.128: iget: bad extra_isize 90 (inode size 256) [ 45.133680][ T873] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.128: error while reading EA inode 11 err=-117 [ 45.146316][ T873] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #18: comm syz.3.128: iget: bad extra_isize 90 (inode size 256) [ 45.159830][ T873] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.128: error while reading EA inode 18 err=-117 [ 45.172311][ T873] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #18: comm syz.3.128: iget: bad extra_isize 90 (inode size 256) [ 45.185838][ T873] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.128: error while reading EA inode 18 err=-117 [ 45.198418][ T873] EXT4-fs (loop3): 1 orphan inode deleted [ 45.204239][ T873] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,dioread_nolock,debug_want_extra_isize=0x000000000000005a,grpid,dioread_nolock,bsdgroups,min_batch_time=0x0000000000000003,,errors=continue [ 45.324275][ T24] kauditd_printk_skb: 208 callbacks suppressed [ 45.324286][ T24] audit: type=1400 audit(1781634792.000:660): avc: denied { create } for pid=839 comm="syz.4.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 45.336732][ T370] usb 5-1: USB disconnect, device number 8 [ 45.379474][ T290] usb 1-1: USB disconnect, device number 2 [ 45.393561][ T878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.129'. [ 45.714226][ T24] audit: type=1400 audit(1781634792.270:661): avc: denied { create } for pid=879 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 46.024484][ T24] audit: type=1400 audit(1781634792.270:662): avc: denied { write } for pid=879 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 46.395890][ T24] audit: type=1400 audit(1781634793.070:663): avc: denied { setopt } for pid=894 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.579536][ T24] audit: type=1400 audit(1781634793.250:664): avc: denied { unlink } for pid=901 comm="syz.4.136" name="#3" dev="tmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 46.579953][ T903] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 46.609905][ T904] cgroup: syz.0.138 (904) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 46.609920][ T904] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 46.634834][ T24] audit: type=1400 audit(1781634793.250:665): avc: denied { create } for pid=902 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 46.650555][ T904] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 46.665157][ T24] audit: type=1400 audit(1781634793.280:666): avc: denied { read } for pid=902 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 46.686968][ T24] audit: type=1400 audit(1781634793.280:667): avc: denied { setopt } for pid=902 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 46.706474][ T24] audit: type=1400 audit(1781634793.320:668): avc: denied { ioctl } for pid=902 comm="syz.0.138" path="socket:[17767]" dev="sockfs" ino=17767 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 46.714749][ T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 46.731122][ T24] audit: type=1400 audit(1781634793.330:669): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 46.789209][ T903] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 46.799506][ T903] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.136: bg 0: block 104: invalid block bitmap [ 46.812154][ T903] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 46.821326][ T903] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.136: invalid indirect mapped block 1 (level 1) [ 46.834872][ T903] EXT4-fs (loop4): 1 truncate cleaned up [ 46.840523][ T903] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 46.850835][ T903] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 46.948900][ T920] EXT4-fs (loop0): Test dummy encryption mode enabled [ 46.959527][ T920] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 46.959527][ T920] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 46.959527][ T920] [ 46.981165][ T920] EXT4-fs (loop0): Ignoring removed oldalloc option [ 46.993988][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 47.005727][ T920] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 47.044026][ T885] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 47.284154][ T25] usb 3-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice= 0.40 [ 47.293368][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.302761][ T945] loop4: p1 < > p2 p3 < > p4 < p5 > [ 47.302999][ T25] usb 3-1: Product: syz [ 47.309710][ T945] loop4: partition table partially beyond EOD, truncated [ 47.312924][ T25] usb 3-1: Manufacturer: syz [ 47.320825][ T945] loop4: p1 start 3405774849 is beyond EOD, truncated [ 47.324419][ T885] usb 4-1: device descriptor read/64, error -71 [ 47.334534][ T945] loop4: p3 start 4284289 is beyond EOD, truncated [ 47.338083][ T25] usb 3-1: SerialNumber: syz [ 47.404004][ T53] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 47.714393][ T53] usb 2-1: device descriptor read/64, error -71 [ 47.724597][ T25] usb 3-1: MIDIStreaming interface descriptor not found [ 47.747198][ T25] usb 3-1: USB disconnect, device number 7 [ 47.755621][ T885] usb 4-1: device descriptor read/64, error -71 [ 47.843173][ T405] udevd[405]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 47.843319][ T328] udevd[328]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 47.857823][ T302] udevd[302]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 47.987135][ T402] udevd[402]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.024258][ T885] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 48.089927][ T954] futex_wake_op: syz.0.150 tries to shift op by -1; fix this program [ 48.124147][ T53] usb 2-1: device descriptor read/64, error -71 [ 48.221311][ T958] netlink: 76 bytes leftover after parsing attributes in process `syz.2.151'. [ 48.384057][ T885] usb 4-1: device descriptor read/64, error -71 [ 48.464086][ T53] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 48.733998][ T53] usb 2-1: device descriptor read/64, error -71 [ 48.773990][ T885] usb 4-1: device descriptor read/64, error -71 [ 48.894175][ T885] usb usb4-port1: attempt power cycle [ 49.124018][ T53] usb 2-1: device descriptor read/64, error -71 [ 49.248399][ T53] usb usb2-port1: attempt power cycle [ 49.314003][ T885] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 49.574051][ T885] usb 4-1: device descriptor read/8, error -71 [ 49.736875][ T53] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 49.889062][ T885] usb 4-1: device descriptor read/8, error -71 [ 49.975669][ T53] usb 2-1: device descriptor read/8, error -71 [ 50.064185][ T999] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.159: Invalid block bitmap block 0 in block_group 0 [ 50.077992][ T999] EXT4-fs error (device loop3): ext4_acquire_dquot:6230: comm syz.3.159: Failed to acquire dquot type 0 [ 50.089788][ T999] EXT4-fs error (device loop3): ext4_free_blocks:5690: comm syz.3.159: Freeing blocks not in datazone - block = 0, count = 4096 [ 50.103243][ T999] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.159: Invalid inode bitmap blk 0 in block_group 0 [ 50.116330][ T999] EXT4-fs error (device loop3) in ext4_free_inode:360: Corrupt filesystem [ 50.116807][ T48] EXT4-fs error (device loop3): ext4_release_dquot:6266: comm kworker/u4:2: Failed to release dquot type 0 [ 50.136628][ T999] EXT4-fs (loop3): 1 orphan inode deleted [ 50.142396][ T999] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; ,errors=continue [ 50.227919][ T1006] EXT4-fs (loop2): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [ 50.310563][ T53] usb 2-1: device descriptor read/8, error -71 [ 50.394043][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 50.504053][ T24] kauditd_printk_skb: 9 callbacks suppressed [ 50.504070][ T24] audit: type=1400 audit(1781634797.120:676): avc: denied { watch watch_reads } for pid=1004 comm="syz.2.161" path="/38/file1" dev="tmpfs" ino=224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.695499][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 50.844253][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.870482][ T25] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 50.934261][ T25] usb 1-1: too many endpoints for config 1 interface 2 altsetting 0: 50, using maximum allowed: 30 [ 50.997043][ T25] usb 1-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 50 [ 51.215627][ T25] usb 1-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice= 0.40 [ 51.225737][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.233835][ T25] usb 1-1: Product: syz [ 51.240805][ T25] usb 1-1: Manufacturer: syz [ 51.246267][ T25] usb 1-1: SerialNumber: syz [ 51.538029][ T1012] netlink: 3741 bytes leftover after parsing attributes in process `syz.4.163'. [ 51.657269][ T5] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 51.756912][ T1038] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 51.766879][ T1038] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 51.774295][ T290] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 51.779107][ T1038] EXT4-fs error (device loop4): ext4_iget_extra_inode:4692: inode #15: comm syz.4.171: corrupted in-inode xattr [ 51.795566][ T1038] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.171: couldn't read orphan inode 15 (err -117) [ 51.807571][ T1038] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue [ 51.884101][ T25] usb 1-1: MIDIStreaming interface descriptor not found [ 51.894809][ T25] usb 1-1: USB disconnect, device number 3 [ 51.908278][ T1044] EXT4-fs (loop4): Test dummy encryption mode enabled [ 51.920043][ T1044] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,inlinecrypt,,errors=continue [ 51.935613][ T1044] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.946230][ T53] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 52.014077][ T290] usb 4-1: Using ep0 maxpacket: 8 [ 52.034185][ T5] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.044780][ T5] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 52.124110][ T5] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 52.133351][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 52.141730][ T290] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.152295][ T5] usb 3-1: SerialNumber: syz [ 52.157191][ T290] usb 4-1: config 0 has no interfaces? [ 52.163288][ T290] usb 4-1: New USB device found, idVendor=056a, idProduct=1801, bcdDevice=99.fb [ 52.165440][ T402] udevd[402]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.174477][ T290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.197409][ T290] usb 4-1: config 0 descriptor?? [ 52.254010][ T53] usb 2-1: Using ep0 maxpacket: 32 [ 52.273127][ T24] audit: type=1400 audit(1781634798.940:677): avc: denied { remount } for pid=1056 comm="syz.0.176" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 52.296064][ T24] audit: type=1400 audit(1781634798.960:678): avc: denied { write } for pid=1056 comm="syz.0.176" name="uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 52.396553][ T1057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.176'. [ 52.405528][ T53] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.420496][ T53] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.431863][ T24] audit: type=1400 audit(1781634799.100:679): avc: denied { write } for pid=1056 comm="syz.0.176" name="/" dev="incremental-fs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.456405][ T1057] incfs_lookup_dentry err:-40 [ 52.463301][ T53] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 52.477132][ T53] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.485550][ T281] ------------[ cut here ]------------ [ 52.486133][ T24] audit: type=1400 audit(1781634799.130:680): avc: denied { add_name } for pid=1056 comm="syz.0.176" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.491077][ T281] WARNING: CPU: 0 PID: 281 at fs/overlayfs/util.c:455 ovl_dir_modified+0x2e7/0x3f0 [ 52.491082][ T281] Modules linked in: [ 52.491103][ T281] CPU: 0 PID: 281 Comm: syz-executor Not tainted syzkaller #0 [ 52.491109][ T281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 52.491122][ T281] RIP: 0010:ovl_dir_modified+0x2e7/0x3f0 [ 52.491135][ T281] Code: c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 41 1f a9 ff 49 ff 04 24 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 89 a8 6e ff <0f> 0b e9 2a ff ff ff e8 7d a8 6e ff 0f 0b 43 80 7c 35 00 00 0f 85 [ 52.491143][ T281] RSP: 0018:ffffc90000b17bf0 EFLAGS: 00010293 [ 52.491154][ T281] RAX: ffffffff81f5f977 RBX: 0000000000000000 RCX: ffff88811e17a780 [ 52.491161][ T281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 52.491170][ T281] RBP: ffffc90000b17c30 R08: ffff88811c968807 R09: 1ffff1102392d100 [ 52.491179][ T281] R10: dffffc0000000000 R11: ffffed102392d101 R12: ffff88811c968760 [ 52.491188][ T281] R13: 1ffff110220ce24a R14: dffffc0000000000 R15: ffff888110671250 [ 52.491198][ T281] FS: 000055555f6dd500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 52.491206][ T281] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.491234][ T281] CR2: 000055555f6f8908 CR3: 0000000124d23000 CR4: 00000000003506b0 [ 52.514417][ T53] usb 2-1: config 0 descriptor?? [ 52.643539][ T281] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.651610][ T281] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.659729][ T24] audit: type=1400 audit(1781634799.130:681): avc: denied { associate } for pid=1056 comm="syz.0.176" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 52.666366][ T1027] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 52.681145][ T281] Call Trace: [ 52.702776][ T281] ovl_do_remove+0x6f3/0xc50 [ 52.710608][ T281] ? may_create+0x7c0/0x7c0 [ 52.715435][ T281] ? ovl_set_redirect+0x620/0x620 [ 52.720721][ T281] ? down_write+0xb2/0x120 [ 52.725514][ T281] ? selinux_inode_rmdir+0x22/0x30 [ 52.730713][ T281] ovl_rmdir+0x1a/0x20 [ 52.735105][ T281] vfs_rmdir+0x1ab/0x3c0 [ 52.739441][ T281] incfs_kill_sb+0xf7/0x200 [ 52.742568][ T1027] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,inode_readahead_blks=0x0000000000002000,nodiscard,dioread_nolock, [ 52.744605][ T281] deactivate_locked_super+0xa0/0x100 [ 52.765156][ T281] deactivate_super+0xaf/0xe0 [ 52.769896][ T281] cleanup_mnt+0x44f/0x500 [ 52.774342][ T1027] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.784763][ T281] __cleanup_mnt+0x19/0x20 [ 52.789259][ T281] task_work_run+0x127/0x190 [ 52.793916][ T281] exit_to_user_mode_loop+0xcb/0xe0 [ 52.801017][ T281] exit_to_user_mode_prepare+0x76/0xa0 [ 52.806601][ T281] syscall_exit_to_user_mode+0x1d/0x40 [ 52.812127][ T281] do_syscall_64+0x3d/0x40 [ 52.816724][ T281] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 52.822674][ T281] RIP: 0033:0x7fbc328f2097 [ 52.827340][ T281] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 52.829238][ T1027] netlink: 'syz.2.169': attribute type 13 has an invalid length. [ 52.847125][ T281] RSP: 002b:00007ffef0ebde78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 52.864246][ T281] RAX: 0000000000000000 RBX: 00007fbc329861ca RCX: 00007fbc328f2097 [ 52.872305][ T281] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef0ebdf30 [ 52.880565][ T281] RBP: 00007ffef0ebdf30 R08: 00007ffef0ebef30 R09: 00000000ffffffff [ 52.881044][ T1027] netlink: 504 bytes leftover after parsing attributes in process `syz.2.169'. [ 52.888892][ T281] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef0ebefc0 [ 52.905856][ T281] R13: 00007fbc329861ca R14: 000000000000cccb R15: 00007ffef0ebf000 [ 52.913916][ T281] ---[ end trace d2f26214fb9bf2e2 ]--- [ 52.919685][ T281] ------------[ cut here ]------------ [ 52.925253][ T281] WARNING: CPU: 1 PID: 281 at fs/overlayfs/util.c:455 ovl_dir_modified+0x2e7/0x3f0 [ 52.934789][ T281] Modules linked in: [ 52.938771][ T281] CPU: 1 PID: 281 Comm: syz-executor Tainted: G W syzkaller #0 [ 52.947723][ T281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 52.958021][ T281] RIP: 0010:ovl_dir_modified+0x2e7/0x3f0 [ 52.963809][ T281] Code: c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 41 1f a9 ff 49 ff 04 24 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 89 a8 6e ff <0f> 0b e9 2a ff ff ff e8 7d a8 6e ff 0f 0b 43 80 7c 35 00 00 0f 85 [ 52.983524][ T281] RSP: 0018:ffffc90000b17bf0 EFLAGS: 00010293 [ 52.989733][ T281] RAX: ffffffff81f5f977 RBX: 0000000000000000 RCX: ffff88811e17a780 [ 52.991892][ T1055] F2FS-fs (loop4): Test dummy encryption mode enabled [ 52.997982][ T281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.012931][ T281] RBP: ffffc90000b17c30 R08: ffff88811c968807 R09: 1ffff1102392d100 [ 53.021047][ T281] R10: dffffc0000000000 R11: ffffed102392d101 R12: ffff88811c968760 [ 53.027792][ T1055] F2FS-fs (loop4): invalid crc value [ 53.029246][ T281] R13: 1ffff110220ce24a R14: dffffc0000000000 R15: ffff888110671250 [ 53.042449][ T281] FS: 000055555f6dd500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 53.051547][ T281] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.058322][ T281] CR2: 00007f817d5dc540 CR3: 0000000124d23000 CR4: 00000000003506a0 [ 53.066553][ T281] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.071523][ T1055] F2FS-fs (loop4): Found nat_bits in checkpoint [ 53.075352][ T281] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.089110][ T281] Call Trace: [ 53.092426][ T281] ovl_do_remove+0x6f3/0xc50 [ 53.097213][ T281] ? may_create+0x7c0/0x7c0 [ 53.101830][ T281] ? ovl_set_redirect+0x620/0x620 [ 53.107165][ T281] ? down_write+0xb2/0x120 [ 53.112138][ T281] ? selinux_inode_rmdir+0x22/0x30 [ 53.117447][ T281] ovl_rmdir+0x1a/0x20 [ 53.121537][ T281] vfs_rmdir+0x1ab/0x3c0 [ 53.126152][ T281] incfs_kill_sb+0x181/0x200 [ 53.130769][ T281] deactivate_locked_super+0xa0/0x100 [ 53.136417][ T281] deactivate_super+0xaf/0xe0 [ 53.141119][ T281] cleanup_mnt+0x44f/0x500 [ 53.145748][ T281] __cleanup_mnt+0x19/0x20 [ 53.150271][ T281] task_work_run+0x127/0x190 [ 53.155175][ T281] exit_to_user_mode_loop+0xcb/0xe0 [ 53.160504][ T281] exit_to_user_mode_prepare+0x76/0xa0 [ 53.165607][ T1055] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 53.166709][ T281] syscall_exit_to_user_mode+0x1d/0x40 [ 53.180371][ T281] do_syscall_64+0x3d/0x40 [ 53.184990][ T281] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 53.191024][ T281] RIP: 0033:0x7fbc328f2097 [ 53.195834][ T281] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 53.215748][ T24] audit: type=1400 audit(1781634799.870:682): avc: denied { ioctl } for pid=1054 comm="syz.4.175" path="socket:[17235]" dev="sockfs" ino=17235 ioctlcmd=0x586d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.224220][ T281] RSP: 002b:00007ffef0ebde78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 53.250972][ T281] RAX: 0000000000000000 RBX: 00007fbc329861ca RCX: 00007fbc328f2097 [ 53.259121][ T281] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef0ebdf30 [ 53.259665][ T1067] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 53.275550][ T281] RBP: 00007ffef0ebdf30 R08: 00007ffef0ebef30 R09: 00000000ffffffff [ 53.283554][ T281] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef0ebefc0 [ 53.298576][ T281] R13: 00007fbc329861ca R14: 000000000000cccb R15: 00007ffef0ebf000 [ 53.312847][ T281] ---[ end trace d2f26214fb9bf2e3 ]--- [ 53.347990][ T1074] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 53.359292][ T300] tipc: Left network mode [ 53.381132][ T1074] EXT4-fs (loop1): Test dummy encryption mode enabled [ 53.397139][ T1074] EXT4-fs (loop1): Unrecognized mount option "smackfsroot=nogrpid" or missing value [ 53.414117][ T53] usbhid 2-1:0.0: can't add hid device: -71 [ 53.420207][ T53] usbhid: probe of 2-1:0.0 failed with error -71 [ 53.429650][ T53] usb 2-1: USB disconnect, device number 14 [ 53.483711][ T24] audit: type=1400 audit(1781634800.150:683): avc: denied { mounton } for pid=1077 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 53.486202][ T5] usb 3-1: 0:2 : does not exist [ 53.539421][ T5] usb 3-1: USB disconnect, device number 8 [ 53.570540][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.577758][ T1077] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.585778][ T1077] device bridge_slave_0 entered promiscuous mode [ 53.603127][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.614835][ T1077] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.622553][ T1077] device bridge_slave_1 entered promiscuous mode [ 54.674616][ T491] usb 4-1: USB disconnect, device number 12 [ 54.759149][ T1091] netlink: 'syz.2.183': attribute type 4 has an invalid length. [ 54.866816][ T1090] netlink: 'syz.2.183': attribute type 4 has an invalid length. [ 54.886434][ T1105] netlink: 20 bytes leftover after parsing attributes in process `syz.1.187'. [ 54.900788][ T1105] netlink: 20 bytes leftover after parsing attributes in process `syz.1.187'. [ 54.932274][ T1105] netlink: 20 bytes leftover after parsing attributes in process `syz.1.187'. [ 54.945414][ T302] udevd[302]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.963021][ T1114] device erspan1 entered promiscuous mode [ 54.979752][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.987496][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.001736][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.010327][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.018625][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.025673][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.033515][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.042091][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.050860][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.057955][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.066450][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.076063][ T1114] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.190: inode has both inline data and extents flags [ 55.100219][ T947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.110434][ T947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.116883][ T1114] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.190: couldn't read orphan inode 15 (err -117) [ 55.120915][ T947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.134275][ T290] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 55.141535][ T947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.153638][ T1114] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,delalloc,nodiscard,,errors=continue [ 55.170390][ T300] device bridge_slave_1 left promiscuous mode [ 55.180913][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.188888][ T300] device bridge_slave_0 left promiscuous mode [ 55.195148][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.251221][ T300] device veth1_macvtap left promiscuous mode [ 55.257414][ T307] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 55.270975][ T300] device veth0_vlan left promiscuous mode [ 55.334550][ T24] audit: type=1400 audit(1781634802.010:684): avc: denied { mounton } for pid=1122 comm="syz.1.192" path="/26/file0" dev="tmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 55.396744][ T1124] EXT4-fs (loop1): Test dummy encryption mode enabled [ 55.504060][ T307] usb 3-1: Using ep0 maxpacket: 16 [ 55.510017][ T1124] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003] [ 55.524123][ T290] usb 5-1: config 1 has an invalid interface number: 5 but max is 2 [ 55.535448][ T947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.544175][ T290] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.544690][ T947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.565077][ T1124] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,min_batch_time=0x0000000000000004,noblock_validity,test_dummy_encryption,errors=continue,nolazytime,delalloc,barrier,,errors=continue [ 55.589949][ T1077] device veth0_vlan entered promiscuous mode [ 55.596134][ T290] usb 5-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 55.607081][ T947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.615673][ T947] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.623162][ T947] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.630926][ T290] usb 5-1: config 1 has no interface number 3 [ 55.637249][ T307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.648697][ T290] usb 5-1: config 1 interface 5 altsetting 0 has an ignored endpoint with address 0x1, skipping [ 55.664163][ T307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.680542][ T1077] device veth1_macvtap entered promiscuous mode [ 55.696479][ T947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.714463][ T307] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 55.731808][ T307] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 55.748522][ T307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.770698][ T947] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.779477][ T307] usb 3-1: config 0 descriptor?? [ 55.789188][ T947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.798105][ T947] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.809908][ T947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.822405][ T24] audit: type=1400 audit(1781634802.490:685): avc: denied { mount } for pid=1077 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.859937][ T24] audit: type=1400 audit(1781634802.520:686): avc: denied { mounton } for pid=1077 comm="syz-executor" path="/root/syzkaller.ofJf2o/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 55.894248][ T290] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 55.904227][ T290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.917683][ T290] usb 5-1: Product: syz [ 55.924374][ T290] usb 5-1: Manufacturer: syz [ 55.933328][ T290] usb 5-1: SerialNumber: syz [ 56.205715][ T1103] udc-core: couldn't find an available UDC or it's busy [ 56.218174][ T1103] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 56.364052][ T290] usb 5-1: unit 4 not found! [ 56.368783][ T290] usb 5-1: unit 51 not found! [ 56.387770][ T290] usb 5-1: USB disconnect, device number 9 [ 56.408229][ T402] udevd[402]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.544024][ T307] usbhid 3-1:0.0: can't add hid device: -71 [ 56.552403][ T307] usbhid: probe of 3-1:0.0 failed with error -71 [ 56.568609][ T307] usb 3-1: USB disconnect, device number 9 [ 56.796693][ T1139] F2FS-fs (loop5): invalid crc value [ 56.826121][ T1139] F2FS-fs (loop5): Found nat_bits in checkpoint [ 56.866309][ T1139] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 56.873748][ T1139] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 57.022988][ T24] audit: type=1400 audit(1781634803.690:687): avc: denied { create } for pid=1159 comm="syz.2.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 57.038459][ T1160] Unknown ioctl 35313 [ 57.066394][ T24] audit: type=1400 audit(1781634803.690:688): avc: denied { getopt } for pid=1159 comm="syz.2.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 57.091457][ T24] audit: type=1400 audit(1781634803.690:689): avc: denied { ioctl } for pid=1159 comm="syz.2.201" path="socket:[18398]" dev="sockfs" ino=18398 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 57.224062][ T53] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 57.384040][ T491] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 57.391728][ T885] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 57.464038][ T53] usb 5-1: Using ep0 maxpacket: 8 [ 57.584144][ T53] usb 5-1: too many endpoints for config 0 interface 0 altsetting 64: 253, using maximum allowed: 30 [ 57.595500][ T53] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.606778][ T53] usb 5-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 57.619884][ T53] usb 5-1: config 0 interface 0 has no altsetting 0 [ 57.626517][ T53] usb 5-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 57.635659][ T491] usb 3-1: Using ep0 maxpacket: 32 [ 57.640821][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.649524][ T53] usb 5-1: config 0 descriptor?? [ 57.754140][ T491] usb 3-1: config index 0 descriptor too short (expected 164, got 36) [ 57.762470][ T491] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.773428][ T491] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.783276][ T491] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 57.792398][ T491] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.801184][ T491] usb 3-1: config 0 descriptor?? [ 57.910832][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 57.918878][ T885] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 57.928781][ T885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.944324][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.960995][ T885] usb 6-1: Product: syz [ 57.965798][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 57.978656][ T885] usb 6-1: Manufacturer: syz [ 57.983447][ T885] usb 6-1: SerialNumber: syz [ 57.994167][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.013448][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.030717][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.043433][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.052514][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.107651][ T24] audit: type=1400 audit(1781634804.780:690): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 58.149887][ T24] audit: type=1400 audit(1781634804.800:691): avc: denied { read write } for pid=279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 58.177531][ T24] audit: type=1400 audit(1781634804.800:692): avc: denied { open } for pid=279 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 58.179381][ T1156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.198'. [ 58.202449][ T24] audit: type=1400 audit(1781634804.800:693): avc: denied { ioctl } for pid=279 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 58.236459][ T24] audit: type=1400 audit(1781634804.850:694): avc: denied { prog_load } for pid=1155 comm="syz.4.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 58.258421][ T1156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.198'. [ 58.275628][ T53] hid (null): usage index exceeded [ 58.281923][ T491] logitech 0003:046D:C29C.0003: unknown main item tag 0x2 [ 58.291466][ T53] hid (null): unknown global tag 0xc [ 58.299038][ T53] hid (null): unknown global tag 0xd [ 58.304921][ T491] logitech 0003:046D:C29C.0003: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0 [ 58.317897][ T53] wacom 0003:056A:003F.0004: ignoring exceeding usage max [ 58.326986][ T53] wacom 0003:056A:003F.0004: usage index exceeded [ 58.333465][ T53] wacom 0003:056A:003F.0004: item 0 4 2 0 parsing failed [ 58.341321][ T53] wacom 0003:056A:003F.0004: parse failed [ 58.347342][ T53] wacom: probe of 0003:056A:003F.0004 failed with error -22 [ 58.417882][ T1183] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 58.474956][ T885] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 58.503317][ T885] usb 5-1: USB disconnect, device number 10 [ 58.662972][ T1183] F2FS-fs (loop3): invalid crc value [ 58.678603][ T1183] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 58.699069][ T1179] F2FS-fs (loop1): invalid crc value [ 58.711420][ T1183] F2FS-fs (loop3): recover fsync data on readonly fs [ 58.714528][ T491] logitech 0003:046D:C29C.0003: no inputs found [ 58.719035][ T1183] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 58.731358][ T1183] F2FS-fs (loop3): checkpoint=disable on readonly fs [ 58.739302][ T491] usb 3-1: USB disconnect, device number 10 [ 58.747132][ T1179] F2FS-fs (loop1): Found nat_bits in checkpoint [ 58.784185][ T1191] fido_id[1191]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 58.799382][ T1179] F2FS-fs (loop1): sanity_check_inode: inode (ino=3) has casefold flag, but casefold feature is off [ 58.810372][ T1179] F2FS-fs (loop1): Failed to read root inode [ 59.042165][ T1194] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 59.075083][ T1194] EXT4-fs (loop3): resizing filesystem from 512 to 0 blocks [ 59.082807][ T1194] EXT4-fs warning (device loop3): ext4_resize_fs:1982: can't shrink FS - resize aborted [ 59.100365][ T1199] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.210: iget: bad i_size value: 38620345925642 [ 59.123542][ T1199] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.210: couldn't read orphan inode 15 (err -117) [ 59.136036][ T1199] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue [ 59.252620][ T1214] fuse: Unknown parameter 'subj_role' [ 59.261350][ T1199] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.210: bg 0: block 5: invalid block bitmap [ 59.301093][ T1199] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 59.348185][ T1199] EXT4-fs (loop4): This should not happen!! Data will be lost [ 59.348185][ T1199] [ 59.372708][ T1199] EXT4-fs (loop4): Total free blocks count 0 [ 59.386820][ T1199] EXT4-fs (loop4): Free/Dirty block details [ 59.400534][ T1199] EXT4-fs (loop4): free_blocks=0 [ 59.411655][ T1199] EXT4-fs (loop4): dirty_blocks=3008 [ 59.417097][ T1199] EXT4-fs (loop4): Block reservation details [ 59.423151][ T1199] EXT4-fs (loop4): i_reserved_data_blocks=3008 [ 59.443758][ T1210] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 956 with error 28 [ 59.476925][ T1210] EXT4-fs (loop4): This should not happen!! Data will be lost [ 59.476925][ T1210] [ 59.514774][ T1220] FAT-fs (loop1): Directory bread(block 64) failed [ 59.527959][ T1220] FAT-fs (loop1): Directory bread(block 65) failed [ 59.537931][ T1220] FAT-fs (loop1): Directory bread(block 66) failed [ 59.546712][ T1220] FAT-fs (loop1): Directory bread(block 67) failed [ 59.554294][ T1220] FAT-fs (loop1): Directory bread(block 68) failed [ 59.564096][ T1220] FAT-fs (loop1): Directory bread(block 69) failed [ 59.584025][ T1220] FAT-fs (loop1): Directory bread(block 70) failed [ 59.597563][ T1220] FAT-fs (loop1): Directory bread(block 71) failed [ 59.609453][ T1220] FAT-fs (loop1): Directory bread(block 72) failed [ 59.616442][ T53] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 59.639877][ T1220] FAT-fs (loop1): Directory bread(block 73) failed [ 59.678863][ T1220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53520 sclass=netlink_route_socket pid=1220 comm=syz.1.215 [ 59.864777][ T1232] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 59.874000][ T53] usb 3-1: Using ep0 maxpacket: 32 [ 59.884006][ T1232] EXT4-fs (loop4): filesystem is read-only [ 59.890638][ T1232] EXT4-fs (loop4): invalid inodes per group: 5 [ 59.890638][ T1232] [ 59.994008][ T53] usb 3-1: config index 0 descriptor too short (expected 164, got 36) [ 60.004199][ T53] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.015270][ T53] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.025234][ T53] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 60.037137][ T53] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.056549][ T53] usb 3-1: config 0 descriptor?? [ 60.142295][ T885] usb 6-1: USB disconnect, device number 2 [ 60.157242][ T885] usblp0: removed [ 60.173307][ T947] attempt to access beyond end of device [ 60.173307][ T947] loop1: rw=1, want=1768, limit=256 [ 60.189505][ T947] attempt to access beyond end of device [ 60.189505][ T947] loop1: rw=1, want=1928, limit=256 [ 60.205086][ T947] attempt to access beyond end of device [ 60.205086][ T947] loop1: rw=1, want=9104, limit=256 [ 60.226977][ T947] attempt to access beyond end of device [ 60.226977][ T947] loop1: rw=1, want=24240, limit=256 [ 60.248128][ T947] attempt to access beyond end of device [ 60.248128][ T947] loop1: rw=1, want=33800, limit=256 [ 60.305014][ T1219] cgroup: Invalid name [ 60.455427][ T1253] exfat: Deprecated parameter 'utf8' [ 60.460948][ T1253] exfat: Deprecated parameter 'namecase' [ 60.467008][ T1253] exfat: Deprecated parameter 'namecase' [ 60.472771][ T1253] exfat: Deprecated parameter 'utf8' [ 60.516386][ T1253] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 60.534827][ T53] logitech 0003:046D:C29C.0005: unknown main item tag 0x2 [ 60.552884][ T53] logitech 0003:046D:C29C.0005: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0 [ 60.574024][ T885] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 60.601909][ T1308] x_tables: duplicate underflow at hook 1 [ 60.730185][ T1317] xt_ecn: cannot match TCP bits for non-tcp packets [ 60.788865][ T1318] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.227: Invalid block bitmap block 0 in block_group 0 [ 60.802602][ T1318] EXT4-fs error (device loop1): ext4_acquire_dquot:6230: comm syz.1.227: Failed to acquire dquot type 0 [ 60.814157][ T1318] EXT4-fs error (device loop1): ext4_free_blocks:5690: comm syz.1.227: Freeing blocks not in datazone - block = 0, count = 4096 [ 60.827815][ T1318] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.227: Invalid inode bitmap blk 0 in block_group 0 [ 60.840718][ T1318] EXT4-fs error (device loop1) in ext4_free_inode:360: Corrupt filesystem [ 60.848689][ T947] __quota_error: 63 callbacks suppressed [ 60.848729][ T947] Quota error (device loop1): remove_tree: Getting block too big (0 >= 8) [ 60.849545][ T885] usb 6-1: Using ep0 maxpacket: 16 [ 60.857541][ T947] EXT4-fs error (device loop1): ext4_release_dquot:6266: comm kworker/u4:4: Failed to release dquot type 0 [ 60.864068][ T1318] EXT4-fs (loop1): 1 orphan inode deleted [ 60.885938][ T1318] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; ,errors=continue [ 60.944101][ T53] logitech 0003:046D:C29C.0005: no inputs found [ 60.952096][ T53] usb 3-1: USB disconnect, device number 11 [ 60.960678][ T24] audit: type=1400 audit(1781634807.630:756): avc: denied { read } for pid=1327 comm="syz.3.229" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 60.983404][ T24] audit: type=1400 audit(1781634807.630:757): avc: denied { open } for pid=1327 comm="syz.3.229" path="/dev/ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 61.007460][ T24] audit: type=1400 audit(1781634807.630:758): avc: denied { ioctl } for pid=1327 comm="syz.3.229" path="/dev/ppp" dev="devtmpfs" ino=153 ioctlcmd=0x7456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 61.032322][ T24] audit: type=1400 audit(1781634807.630:759): avc: denied { write } for pid=1327 comm="syz.3.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.054419][ T24] audit: type=1400 audit(1781634807.630:760): avc: denied { read } for pid=1327 comm="syz.3.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.060899][ T1329] fido_id[1329]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 61.075546][ T24] audit: type=1400 audit(1781634807.630:761): avc: denied { ioctl } for pid=1327 comm="syz.3.229" path="socket:[18782]" dev="sockfs" ino=18782 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.214252][ T885] usb 6-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice= 0.40 [ 61.223707][ T885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.231922][ T885] usb 6-1: Product: syz [ 61.236190][ T885] usb 6-1: Manufacturer: syz [ 61.240918][ T885] usb 6-1: SerialNumber: syz [ 61.414028][ T491] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 61.538138][ T24] audit: type=1400 audit(1781634808.210:762): avc: denied { setopt } for pid=1334 comm="syz.1.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.561221][ T24] audit: type=1400 audit(1781634808.210:763): avc: denied { ioctl } for pid=1335 comm="syz.2.234" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 61.586079][ T24] audit: type=1400 audit(1781634808.210:764): avc: denied { mount } for pid=1338 comm="syz.4.233" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 61.654055][ T885] usb 6-1: MIDIStreaming interface descriptor not found [ 61.696574][ T885] usb 6-1: USB disconnect, device number 3 [ 61.779309][ T1347] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 61.800192][ T1356] mmap: syz.1.238 (1356) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 61.854119][ T491] usb 4-1: not running at top speed; connect to a high speed hub [ 61.879369][ T1363] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.239: inode has both inline data and extents flags [ 61.893078][ T1363] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.239: couldn't read orphan inode 15 (err -117) [ 61.905097][ T1363] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 61.944228][ T491] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid wMaxPacketSize 0 [ 61.954821][ T491] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 61.968641][ T491] usb 4-1: config 1 interface 0 has no altsetting 0 [ 61.975638][ T1303] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 61.994315][ T1303] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 62.063480][ T1375] xt_TCPMSS: Only works on TCP SYN packets [ 62.077726][ T53] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 62.111351][ T1381] exfat: Deprecated parameter 'namecase' [ 62.117409][ T1381] exfat: Deprecated parameter 'namecase' [ 62.134103][ T491] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 62.143290][ T491] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.153292][ T1381] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 62.163750][ T491] usb 4-1: Product: syz [ 62.165419][ T1304] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 62.173908][ T491] usb 4-1: Manufacturer: syz [ 62.179908][ T1381] exFAT-fs (loop5): IO charset macromanian3oet=cp1251 not found [ 62.190572][ T491] usb 4-1: SerialNumber: syz [ 62.214191][ T1328] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 62.324135][ T53] usb 3-1: Using ep0 maxpacket: 8 [ 62.374084][ T1302] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 62.454016][ T1304] usb 5-1: device descriptor read/64, error -71 [ 62.524109][ T53] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.535188][ T53] usb 3-1: config 1 interface 0 has no altsetting 0 [ 62.624086][ T1302] usb 6-1: Using ep0 maxpacket: 16 [ 62.655343][ T1328] udc-core: couldn't find an available UDC or it's busy [ 62.662390][ T1328] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 62.695710][ T491] usb 4-1: USB disconnect, device number 13 [ 62.744274][ T1302] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 62.752562][ T1302] usb 6-1: config 0 has no interface number 0 [ 62.758796][ T1302] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 62.768831][ T1302] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 62.779002][ T1302] usb 6-1: config 0 interface 41 has no altsetting 0 [ 62.844028][ T1304] usb 5-1: device descriptor read/64, error -71 [ 62.944150][ T1302] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 62.953275][ T1302] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.961510][ T1302] usb 6-1: Product: syz [ 62.965940][ T1302] usb 6-1: Manufacturer: syz [ 62.970549][ T1302] usb 6-1: SerialNumber: syz [ 62.976424][ T1302] usb 6-1: config 0 descriptor?? [ 62.994149][ T1383] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 63.001199][ T1383] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 63.139776][ T1304] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 63.263055][ T1394] netlink: 'syz.1.247': attribute type 3 has an invalid length. [ 63.274257][ T1382] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 63.281243][ T1382] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 63.503999][ T1304] usb 5-1: device descriptor read/64, error -71 [ 63.534275][ T1302] sr9700 6-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 63.555228][ T1302] usb 6-1: USB disconnect, device number 4 [ 63.904003][ T1304] usb 5-1: device descriptor read/64, error -71 [ 64.024386][ T1304] usb usb5-port1: attempt power cycle [ 64.434057][ T1304] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 64.604055][ T1304] usb 5-1: device descriptor read/8, error -71 [ 64.723893][ T1418] SELinux: Context : is not valid (left unmapped). [ 64.774241][ T53] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.40 [ 64.783464][ T53] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.791533][ T53] usb 3-1: Product: 鹙獝퇵欦懓졉ꐺ魹ᮁ띉롱䄷䦬珔唅À輥Ɏ꘥㗢⣋䘮쎚訙憗㊤畄컮Ꮢ冺粏斀訸ꠞ䛍ᵍ뼂곔ꊒ㤦⎼鉴♀葑䓋ⵚ፳鋎끓⃧㉏룙脔韛蝴᭺⟇풶ⷞﰗ옍䞻鄉胘귺褅໺嗊ņ៧맓謈ဟ댣訇ɒ賸빯쾑⤢鰱贈鼪ᚘ읓ꬺዺ鰺έ醫 [ 64.844005][ T1304] usb 5-1: device descriptor read/8, error -71 [ 64.865364][ T1414] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,norecovery,min_batch_time=0x00000000000c0000,inode_readahead_blks=0x0000000000200000,bsdgroups,noblock_validity,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,delalloc,resuid=0x00000000 [ 64.912088][ T1430] device bond_slave_0 entered promiscuous mode [ 64.923262][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 64.956737][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.994347][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 65.024390][ T53] usb 3-1: can't set config #1, error -71 [ 65.034347][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 65.049401][ T53] usb 3-1: USB disconnect, device number 12 [ 65.074351][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.096262][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.106456][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.127080][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.138698][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.154673][ T1302] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 65.166781][ T1441] netlink: 4 bytes leftover after parsing attributes in process `syz.5.262'. [ 65.381599][ T1460] Module has invalid ELF structures [ 65.637869][ T1458] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 65.656540][ T1458] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 65.695889][ T1458] F2FS-fs (loop2): invalid crc value [ 65.728601][ T1458] F2FS-fs (loop2): Found nat_bits in checkpoint [ 65.799862][ T1458] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 65.813520][ T1458] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 69.494091][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 78.774130][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 97.334129][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 105.934214][ T1471] exfat: Deprecated parameter 'utf8' [ 107.135770][ T1470] exfat: Deprecated parameter 'utf8' [ 107.141191][ T1470] exfat: Bad value for 'errors' [ 107.203555][ T1471] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 107.322984][ T1477] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 107.456656][ T1477] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 107.542604][ T24] kauditd_printk_skb: 25 callbacks suppressed [ 107.542628][ T24] audit: type=1400 audit(1781634854.210:790): avc: denied { ioctl } for pid=1469 comm="syz.5.268" path="socket:[19855]" dev="sockfs" ino=19855 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.684494][ T1477] F2FS-fs (loop3): invalid crc value [ 107.833923][ C0] sched: RT throttling activated [ 107.835341][ T1477] F2FS-fs (loop3): Found nat_bits in checkpoint [ 107.852451][ T1470] xt_hashlimit: size too large, truncated to 1048576 [ 108.139788][ T1477] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 108.146950][ T1477] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 108.183970][ T304] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 108.234639][ T24] audit: type=1400 audit(1781634854.910:791): avc: denied { create } for pid=1475 comm="syz.3.271" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 108.268580][ T24] audit: type=1400 audit(1781634854.930:792): avc: denied { remove_name } for pid=1475 comm="syz.3.271" name="bus" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.321756][ T24] audit: type=1400 audit(1781634854.930:793): avc: denied { rename } for pid=1475 comm="syz.3.271" name="bus" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 108.374256][ T24] audit: type=1400 audit(1781634854.930:794): avc: denied { rmdir } for pid=1475 comm="syz.3.271" name="file0" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 108.433977][ T24] audit: type=1400 audit(1781634854.930:795): avc: denied { mounton } for pid=1475 comm="syz.3.271" path="/59/file0/file0" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 108.463990][ T885] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 108.804011][ T885] usb 3-1: Using ep0 maxpacket: 16 [ 108.865238][ T24] audit: type=1400 audit(1781634855.540:796): avc: denied { rename } for pid=1475 comm="syz.3.271" name="file1" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 108.911647][ T24] audit: type=1400 audit(1781634855.580:797): avc: denied { setopt } for pid=1475 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 109.042351][ T1518] Module has invalid ELF structures [ 109.124787][ T280] attempt to access beyond end of device [ 109.124787][ T280] loop3: rw=2049, want=40968, limit=40427 [ 109.144078][ T885] usb 3-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice= 0.40 [ 109.153165][ T885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.173988][ T885] usb 3-1: Product: syz [ 109.178203][ T885] usb 3-1: Manufacturer: syz [ 109.182817][ T885] usb 3-1: SerialNumber: syz [ 109.304887][ T1520] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 32767 [ 109.368354][ T1523] 9pnet: Insufficient options for proto=fd [ 109.481371][ T1525] netlink: 128 bytes leftover after parsing attributes in process `syz.1.282'. [ 109.534073][ T1525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'. [ 109.542949][ T1525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'. [ 109.574027][ T885] usb 3-1: MIDIStreaming interface descriptor not found [ 109.587833][ T885] usb 3-1: USB disconnect, device number 13 [ 110.131331][ T1491] udevd[1491]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 110.593982][ T885] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 110.616729][ T24] audit: type=1400 audit(1781634857.290:798): avc: denied { getopt } for pid=1543 comm="syz.5.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.707981][ T1546] EXT4-fs (loop3): Ignoring removed nobh option [ 110.727979][ T1546] EXT4-fs (loop3): orphan cleanup on readonly fs [ 110.745775][ T1546] EXT4-fs warning (device loop3): ext4_xattr_inode_get:492: inode #11: comm syz.3.287: ea_inode file size=1535 entry size=6 [ 110.764060][ T1546] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2799: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 110.787725][ T1546] EXT4-fs error (device loop3) in ext4_do_update_inode:5362: error 27 [ 110.797259][ T1546] EXT4-fs error (device loop3): ext4_dirty_inode:6181: inode #15: comm syz.3.287: mark_inode_dirty error [ 110.808813][ T1546] EXT4-fs error (device loop3) in ext4_do_update_inode:5362: error 27 [ 110.817221][ T1546] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2943: inode #15: comm syz.3.287: mark_inode_dirty error [ 110.829620][ T1546] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2946: inode #15: comm syz.3.287: mark inode dirty (error -27) [ 110.842445][ T1546] EXT4-fs warning (device loop3): ext4_evict_inode:305: xattr delete (err -27) [ 110.851592][ T1546] EXT4-fs (loop3): 1 orphan inode deleted [ 110.858076][ T1546] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,min_batch_time=0x000000000000b656,block_validity,,errors=continue [ 110.887336][ T24] audit: type=1400 audit(1781634857.560:799): avc: denied { ioctl } for pid=1549 comm="syz.5.288" path="socket:[19974]" dev="sockfs" ino=19974 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.044065][ T885] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.144051][ T885] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 8.40 [ 111.153235][ T885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 111.161330][ T885] usb 3-1: SerialNumber: syz [ 111.214409][ T885] cdc_ether 3-1:1.0: skipping garbage [ 111.219955][ T885] usb 3-1: bad CDC descriptors [ 111.244476][ T1563] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 111.253751][ T1563] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 111.264018][ T1563] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288) [ 111.274077][ T1299] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 111.276198][ T1563] F2FS-fs (loop3): invalid crc value [ 111.287234][ T1563] F2FS-fs (loop3): invalid crc value [ 111.292930][ T1563] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 111.435940][ T1569] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 111.450193][ T1569] EXT4-fs (loop3): 1 truncate cleaned up [ 111.456018][ T1569] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 111.465162][ T1569] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev loop3, type ext4) errno=-22 [ 111.654047][ T1299] usb 5-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 111.673124][ T1299] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 111.706729][ T1299] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.732345][ T1299] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 111.754485][ T1574] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 111.829292][ T1574] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2799: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 111.842983][ T1574] EXT4-fs (loop3): 1 truncate cleaned up [ 111.848802][ T1574] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,noquota,,errors=continue [ 111.876040][ T1299] usb 5-1: config 0 interface 0 has no altsetting 0 [ 111.889238][ T1299] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 111.895071][ T1578] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 111.910941][ T1578] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 111.928921][ T1299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.958740][ T1299] usb 5-1: config 0 descriptor?? [ 112.068196][ T7] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 112.404019][ T885] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 112.533985][ T304] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 112.697873][ T885] usb 6-1: device descriptor read/64, error -71 [ 112.894302][ T304] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.905994][ T304] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 113.074256][ T304] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.083815][ T304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.093013][ T304] usb 2-1: Product: syz [ 113.097840][ T885] usb 6-1: device descriptor read/64, error -71 [ 113.105037][ T304] usb 2-1: Manufacturer: syz [ 113.110122][ T304] usb 2-1: SerialNumber: syz [ 113.212438][ T304] cdc_mbim 2-1:1.0: skipping garbage [ 113.374082][ T885] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 113.408407][ T1583] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 113.419032][ T25] usb 3-1: USB disconnect, device number 14 [ 113.529358][ T1590] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.299: inode has both inline data and extents flags [ 113.596479][ T1590] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.299: couldn't read orphan inode 15 (err -117) [ 113.668473][ T1590] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 113.683975][ T885] usb 6-1: device descriptor read/64, error -71 [ 113.697985][ T1299] usbhid 5-1:0.0: can't add hid device: -71 [ 113.702932][ T1583] x_tables: ip_tables: CONNSECMARK.0 target: invalid size 8 (kernel) != (user) 0 [ 113.714376][ T1299] usbhid: probe of 5-1:0.0 failed with error -71 [ 113.725815][ T1299] usb 5-1: USB disconnect, device number 15 [ 113.824886][ T24] kauditd_printk_skb: 5 callbacks suppressed [ 113.824900][ T24] audit: type=1400 audit(1781634860.500:805): avc: denied { sys_admin } for pid=1597 comm="syz.3.302" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 113.886146][ T1598] overlayfs: overlapping lowerdir path [ 113.892484][ T1603] 9pnet: Insufficient options for proto=fd [ 113.954026][ T304] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS [ 113.961249][ T304] cdc_mbim 2-1:1.0: bind() failure [ 113.973869][ T304] cdc_ncm 2-1:1.1: bind() failure [ 114.073971][ T885] usb 6-1: device descriptor read/64, error -71 [ 114.194032][ T885] usb usb6-port1: attempt power cycle [ 114.285306][ T1594] F2FS-fs (loop2): invalid crc value [ 114.313458][ T1594] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 114.354006][ T1594] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 114.603979][ T885] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 114.778692][ T1628] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 114.786301][ T1628] EXT4-fs (loop4): Test dummy encryption mode enabled [ 114.795934][ T1628] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.304: inode #1: comm syz.4.304: iget: illegal inode # [ 114.809295][ T1628] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.304: error while reading EA inode 1 err=-117 [ 114.814469][ T885] usb 6-1: device descriptor read/8, error -71 [ 114.823145][ T1628] EXT4-fs (loop4): 1 orphan inode deleted [ 114.833904][ T1628] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,nomblk_io_submit,usrquota,init_itable=0x0000000000000009,minixdf,usrjquota=,bsdgroups,usrjquota=,test_dummy_encryption=v1,noblock_validity,jqfmt=vfsold,,errors=continue [ 114.984724][ T1640] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.306: inode has both inline data and extents flags [ 114.999329][ T1640] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.306: couldn't read orphan inode 15 (err -117) [ 115.012454][ T1640] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 115.114073][ T885] usb 6-1: device descriptor read/8, error -71 [ 115.264554][ T304] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 115.294369][ T491] usb 2-1: USB disconnect, device number 16 [ 115.311940][ T1648] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.307: inode has both inline data and extents flags [ 115.475372][ T1648] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.307: couldn't read orphan inode 15 (err -117) [ 115.513988][ T304] usb 3-1: Using ep0 maxpacket: 16 [ 115.565361][ T1648] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 115.634255][ T304] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.769496][ T304] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.883465][ T1654] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 115.892983][ T1654] EXT4-fs error (device loop5): ext4_iget_extra_inode:4692: inode #15: comm syz.5.308: corrupted in-inode xattr [ 115.906402][ T1654] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.308: couldn't read orphan inode 15 (err -117) [ 115.918731][ T1654] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue [ 116.234076][ T304] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 116.262216][ T304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.284061][ T304] usb 3-1: Product: syz [ 116.288269][ T304] usb 3-1: Manufacturer: syz [ 116.313191][ T304] usb 3-1: SerialNumber: syz [ 116.449646][ T1622] ================================================================== [ 116.457776][ T1622] BUG: KASAN: use-after-free in unaccount_page_cache_page+0x9dc/0xac0 [ 116.465943][ T1622] Read of size 4 at addr ffff888126c2a470 by task syz.3.302/1622 [ 116.473897][ T1622] [ 116.476262][ T1622] CPU: 1 PID: 1622 Comm: syz.3.302 Tainted: G W syzkaller #0 [ 116.484947][ T1622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 116.495040][ T1622] Call Trace: [ 116.498356][ T1622] __dump_stack+0x21/0x24 [ 116.502713][ T1622] dump_stack_lvl+0x1a7/0x208 [ 116.507595][ T1622] ? show_regs_print_info+0x18/0x18 [ 116.512822][ T1622] ? thaw_kernel_threads+0x220/0x220 [ 116.518146][ T1622] print_address_description+0x7f/0x2c0 [ 116.523718][ T1622] ? unaccount_page_cache_page+0x9dc/0xac0 [ 116.529549][ T1622] kasan_report+0x100/0x140 [ 116.534073][ T1622] ? unaccount_page_cache_page+0x9dc/0xac0 [ 116.539906][ T1622] __asan_report_load4_noabort+0x14/0x20 [ 116.545559][ T1622] unaccount_page_cache_page+0x9dc/0xac0 [ 116.551204][ T1622] __delete_from_page_cache+0xc3/0x470 [ 116.556756][ T1622] ? memset+0x35/0x40 [ 116.560751][ T1622] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 116.567781][ T1622] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 116.573247][ T1622] ? __kasan_check_read+0x11/0x20 [ 116.578280][ T1622] ? workingset_eviction+0x3dc/0x940 [ 116.583575][ T1622] __remove_mapping+0x581/0x6b0 [ 116.588430][ T1622] shrink_page_list+0x21ee/0x4160 [ 116.593457][ T1622] ? shrink_page_list+0x1f21/0x4160 [ 116.598663][ T1622] ? reclaim_clean_pages_from_list+0x740/0x740 [ 116.604826][ T1622] ? shrink_inactive_list+0xef0/0xef0 [ 116.610202][ T1622] ? _raw_spin_lock_irq+0x95/0xf0 [ 116.615236][ T1622] ? __count_memcg_events+0x89/0x210 [ 116.620528][ T1622] shrink_inactive_list+0x90c/0xef0 [ 116.625736][ T1622] ? shrink_active_list+0xe00/0xe00 [ 116.630939][ T1622] ? blk_flush_plug_list+0x40b/0x450 [ 116.636228][ T1622] ? __kasan_check_read+0x11/0x20 [ 116.641253][ T1622] ? __kasan_check_read+0x11/0x20 [ 116.646284][ T1622] ? lruvec_lru_size+0x230/0x250 [ 116.651223][ T1622] ? blk_start_plug+0x5a/0x170 [ 116.655990][ T1622] shrink_lruvec+0x2806/0x2d70 [ 116.660764][ T1622] ? do_shrink_slab+0x107/0x840 [ 116.665616][ T1622] ? __kasan_check_write+0x14/0x20 [ 116.670731][ T1622] ? down_read_trylock+0x106/0x160 [ 116.675844][ T1622] ? __init_rwsem+0x1c0/0x1c0 [ 116.680524][ T1622] ? mem_cgroup_shrink_node+0x4c0/0x4c0 [ 116.686073][ T1622] ? __kasan_check_write+0x14/0x20 [ 116.691190][ T1622] ? up_read+0x12/0x50 [ 116.695278][ T1622] ? shrink_slab+0x671/0x830 [ 116.699876][ T1622] ? __kasan_check_read+0x11/0x20 [ 116.704909][ T1622] ? inactive_is_low+0x17a/0x2f0 [ 116.709853][ T1622] ? __kasan_check_write+0x14/0x20 [ 116.714972][ T1622] shrink_node+0xee0/0x2690 [ 116.720221][ T1622] do_try_to_free_pages+0x602/0x1590 [ 116.725619][ T1622] ? try_to_free_pages+0xc20/0xc20 [ 116.730753][ T1622] ? __alloc_pages_nodemask+0x29a/0x640 [ 116.736319][ T1622] try_to_free_mem_cgroup_pages+0x261/0x610 [ 116.742228][ T1622] ? shrink_lruvec+0x2d70/0x2d70 [ 116.747199][ T1622] ? _raw_spin_unlock_irq+0x4e/0x70 [ 116.752404][ T1622] ? psi_memstall_enter+0xe6/0x150 [ 116.758064][ T1622] try_charge+0x426/0x1580 [ 116.762493][ T1622] ? __memcg_kmem_charge+0x150/0x150 [ 116.767802][ T1622] ? __kasan_check_write+0x14/0x20 [ 116.772943][ T1622] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 116.778780][ T1622] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 116.784336][ T1622] __mem_cgroup_charge+0x148/0x6d0 [ 116.789457][ T1622] shmem_add_to_page_cache+0x569/0xe10 [ 116.794941][ T1622] ? shmem_alloc_page+0x380/0x380 [ 116.799993][ T1622] ? kvm_sched_clock_read+0x18/0x40 [ 116.805502][ T1622] ? find_lock_entry+0x4b/0x200 [ 116.810395][ T1622] shmem_getpage_gfp+0x907/0x20f0 [ 116.815465][ T1622] shmem_write_begin+0xce/0x1b0 [ 116.820340][ T1622] generic_perform_write+0x2ce/0x540 [ 116.825675][ T1622] ? atime_needs_update+0x5b0/0x5b0 [ 116.830901][ T1622] ? grab_cache_page_write_begin+0xb0/0xb0 [ 116.836722][ T1622] ? file_remove_privs+0x590/0x590 [ 116.841857][ T1622] ? __kasan_check_write+0x14/0x20 [ 116.846988][ T1622] ? down_write+0xb2/0x120 [ 116.851427][ T1622] __generic_file_write_iter+0x24b/0x480 [ 116.857082][ T1622] ? generic_write_checks+0x3df/0x480 [ 116.862496][ T1622] generic_file_write_iter+0xa9/0x1d0 [ 116.867888][ T1622] __kernel_write+0x5a5/0x9d0 [ 116.872588][ T1622] ? vfs_read+0xa50/0xa50 [ 116.876931][ T1622] ? populate_vma_page_range+0xf0/0xf0 [ 116.882412][ T1622] ? __kasan_check_write+0x14/0x20 [ 116.887539][ T1622] dump_emit+0x255/0x380 [ 116.891810][ T1622] ? wait_for_dump_helpers+0x380/0x380 [ 116.897288][ T1622] dump_user_range+0x6a/0x1a0 [ 116.901991][ T1622] elf_core_dump+0x27af/0x2c20 [ 116.906774][ T1622] ? load_elf_binary+0x2910/0x2910 [ 116.911896][ T1622] ? __fsnotify_parent+0x6db/0x7c0 [ 116.917036][ T1622] ? do_truncate+0x1c6/0x240 [ 116.921642][ T1622] ? putname+0xfe/0x150 [ 116.925824][ T1622] ? __kasan_check_read+0x11/0x20 [ 116.930873][ T1622] ? __ia32_sys_unshare+0x40/0x40 [ 116.935914][ T1622] do_coredump+0x1be6/0x2910 [ 116.940532][ T1622] ? simple_acl_create+0x1c0/0x1c0 [ 116.945666][ T1622] ? debug_smp_processor_id+0x17/0x20 [ 116.951053][ T1622] ? kmem_cache_free+0x100/0x2d0 [ 116.956024][ T1622] ? ____kasan_slab_free+0x130/0x160 [ 116.961351][ T1622] ? get_signal+0xbdb/0x1300 [ 116.965954][ T1622] ? kmem_cache_free+0x100/0x2d0 [ 116.970909][ T1622] get_signal+0xf4c/0x1300 [ 116.975343][ T1622] arch_do_signal_or_restart+0xe7/0x11b0 [ 116.981178][ T1622] ? force_sig_info_to_task+0x26d/0x2e0 [ 116.986754][ T1622] ? force_sig_fault+0xd7/0x130 [ 116.991712][ T1622] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 116.997360][ T1622] ? __bad_area_nosemaphore+0x410/0x410 [ 117.002927][ T1622] exit_to_user_mode_loop+0xa2/0xe0 [ 117.008141][ T1622] exit_to_user_mode_prepare+0x76/0xa0 [ 117.013611][ T1622] irqentry_exit_to_user_mode+0x9/0x10 [ 117.019079][ T1622] irqentry_exit+0x12/0x60 [ 117.023507][ T1622] exc_page_fault+0x67/0xc0 [ 117.028055][ T1622] ? asm_exc_page_fault+0x8/0x30 [ 117.032999][ T1622] asm_exc_page_fault+0x1e/0x30 [ 117.037857][ T1622] RIP: 0033:0x7f4dc1f38b27 [ 117.042282][ T1622] Code: e8 8e fa ff ff 89 f2 48 8d 3d c5 3e 1b 00 48 8d 35 be f8 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 117.062158][ T1622] RSP: 002b:00007f4dc0a9d120 EFLAGS: 00010202 [ 117.068235][ T1622] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f4dc2082e59 [ 117.076218][ T1622] RDX: 00007f4dc0a9d140 RSI: 00007f4dc0a9d270 RDI: 000000000000000b [ 117.084195][ T1622] RBP: 00007f4dc2118d6f R08: 0000000000000000 R09: 0000000000000000 [ 117.092288][ T1622] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 117.100265][ T1622] R13: 00007f4dc22fc128 R14: 00007f4dc22fc090 R15: 00007ffe49267598 [ 117.108244][ T1622] [ 117.110583][ T1622] Allocated by task 1183: [ 117.115024][ T1622] __kasan_kmalloc+0xd4/0x100 [ 117.119708][ T1622] kmem_cache_alloc_trace+0x179/0x2e0 [ 117.125083][ T1622] alloc_super+0x5a/0x7d0 [ 117.129436][ T1622] sget+0x1e2/0x4c0 [ 117.133260][ T1622] mount_bdev+0xec/0x380 [ 117.137511][ T1622] f2fs_mount+0x34/0x40 [ 117.141673][ T1622] legacy_get_tree+0xed/0x190 [ 117.146360][ T1622] vfs_get_tree+0x89/0x260 [ 117.150784][ T1622] do_new_mount+0x25a/0xa30 [ 117.155291][ T1622] path_mount+0x581/0xca0 [ 117.159628][ T1622] __se_sys_mount+0x320/0x390 [ 117.164307][ T1622] __x64_sys_mount+0xbf/0xd0 [ 117.168901][ T1622] do_syscall_64+0x31/0x40 [ 117.173321][ T1622] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 117.179209][ T1622] [ 117.181553][ T1622] Freed by task 53: [ 117.185370][ T1622] kasan_set_track+0x4a/0x70 [ 117.189990][ T1622] kasan_set_free_info+0x23/0x40 [ 117.194933][ T1622] ____kasan_slab_free+0x125/0x160 [ 117.200048][ T1622] __kasan_slab_free+0x11/0x20 [ 117.204825][ T1622] slab_free_freelist_hook+0xc5/0x190 [ 117.210222][ T1622] kfree+0xc0/0x270 [ 117.214040][ T1622] destroy_super_work+0x40/0x50 [ 117.218894][ T1622] process_one_work+0x6fd/0xbc0 [ 117.223750][ T1622] worker_thread+0xa8e/0x13c0 [ 117.228428][ T1622] kthread+0x324/0x3b0 [ 117.232507][ T1622] ret_from_fork+0x1f/0x30 [ 117.236928][ T1622] [ 117.239268][ T1622] Last potentially related work creation: [ 117.245005][ T1622] kasan_save_stack+0x3a/0x60 [ 117.249700][ T1622] __kasan_record_aux_stack+0xd2/0x100 [ 117.255319][ T1622] kasan_record_aux_stack_noalloc+0xb/0x10 [ 117.261430][ T1622] insert_work+0x51/0x320 [ 117.265770][ T1622] __queue_work+0x91f/0xca0 [ 117.270295][ T1622] queue_work_on+0xe6/0x140 [ 117.274820][ T1622] destroy_super_rcu+0xd1/0xe0 [ 117.279592][ T1622] rcu_do_batch+0x488/0xaf0 [ 117.284103][ T1622] rcu_core+0x50a/0xca0 [ 117.288268][ T1622] rcu_core_si+0x9/0x10 [ 117.292430][ T1622] __do_softirq+0x255/0x563 [ 117.296934][ T1622] [ 117.299278][ T1622] Second to last potentially related work creation: [ 117.305877][ T1622] kasan_save_stack+0x3a/0x60 [ 117.310564][ T1622] __kasan_record_aux_stack+0xd2/0x100 [ 117.316031][ T1622] kasan_record_aux_stack_noalloc+0xb/0x10 [ 117.321841][ T1622] call_rcu+0x11a/0x1090 [ 117.326102][ T1622] __put_super+0x254/0x2b0 [ 117.330524][ T1622] deactivate_locked_super+0xd4/0x100 [ 117.335913][ T1622] mount_bdev+0x288/0x380 [ 117.340253][ T1622] f2fs_mount+0x34/0x40 [ 117.344500][ T1622] legacy_get_tree+0xed/0x190 [ 117.349181][ T1622] vfs_get_tree+0x89/0x260 [ 117.353604][ T1622] do_new_mount+0x25a/0xa30 [ 117.358111][ T1622] path_mount+0x581/0xca0 [ 117.362478][ T1622] __se_sys_mount+0x320/0x390 [ 117.367158][ T1622] __x64_sys_mount+0xbf/0xd0 [ 117.371765][ T1622] do_syscall_64+0x31/0x40 [ 117.376185][ T1622] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 117.382092][ T1622] [ 117.384449][ T1622] The buggy address belongs to the object at ffff888126c2a000 [ 117.384449][ T1622] which belongs to the cache kmalloc-2k of size 2048 [ 117.398510][ T1622] The buggy address is located 1136 bytes inside of [ 117.398510][ T1622] 2048-byte region [ffff888126c2a000, ffff888126c2a800) [ 117.411952][ T1622] The buggy address belongs to the page: [ 117.417607][ T1622] page:ffffea00049b0a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x126c28 [ 117.427852][ T1622] head:ffffea00049b0a00 order:3 compound_mapcount:0 compound_pincount:0 [ 117.436187][ T1622] flags: 0x4000000000010200(slab|head) [ 117.441657][ T1622] raw: 4000000000010200 0000000000000000 0000000100000001 ffff888100042d80 [ 117.450249][ T1622] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 117.458830][ T1622] page dumped because: kasan: bad access detected [ 117.465243][ T1622] page_owner tracks the page as allocated [ 117.470971][ T1622] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 283, ts 24283190857, free_ts 0 [ 117.489105][ T1622] prep_new_page+0x176/0x190 [ 117.493702][ T1622] get_page_from_freelist+0x225f/0x23f0 [ 117.499251][ T1622] __alloc_pages_nodemask+0x29a/0x640 [ 117.504656][ T1622] new_slab+0x84/0x3f0 [ 117.508731][ T1622] ___slab_alloc+0x2f8/0x4c0 [ 117.513324][ T1622] __slab_alloc+0x63/0xa0 [ 117.517663][ T1622] __kmalloc+0x1f9/0x330 [ 117.521952][ T1622] __register_sysctl_table+0xeb/0x1240 [ 117.527416][ T1622] register_net_sysctl+0x2c/0x40 [ 117.532361][ T1622] __addrconf_sysctl_register+0x277/0x3e0 [ 117.538083][ T1622] addrconf_sysctl_register+0x147/0x1a0 [ 117.543634][ T1622] ipv6_add_dev+0xbb2/0x10b0 [ 117.548234][ T1622] addrconf_notify+0x582/0xea0 [ 117.553003][ T1622] raw_notifier_call_chain+0x90/0x100 [ 117.558897][ T1622] call_netdevice_notifiers+0x119/0x190 [ 117.564450][ T1622] register_netdevice+0x100a/0x13a0 [ 117.569644][ T1622] page_owner free stack trace missing [ 117.575016][ T1622] [ 117.577344][ T1622] Memory state around the buggy address: [ 117.582982][ T1622] ffff888126c2a300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 117.591049][ T1622] ffff888126c2a380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 117.599114][ T1622] >ffff888126c2a400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 117.607177][ T1622] ^ [ 117.614902][ T1622] ffff888126c2a480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 117.622982][ T1622] ffff888126c2a500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 117.631061][ T1622] ================================================================== [ 117.639138][ T1622] Disabling lock debugging due to kernel taint [ 117.672660][ T24] audit: type=1400 audit(1781634864.340:806): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 117.753119][ T24] audit: type=1400 audit(1781634864.370:807): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.818426][ T24] audit: type=1400 audit(1781634864.370:808): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.854024][ T304] usb 3-1: 0:2 : does not exist [ 117.888354][ T24] audit: type=1400 audit(1781634864.370:809): avc: denied { add_name } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.904725][ T304] usb 3-1: USB disconnect, device number 15 [ 117.918710][ T1667] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.310: Invalid block bitmap block 0 in block_group 0 [ 117.936538][ T1667] Quota error (device loop1): write_blk: dquota write failed [ 117.944690][ T1667] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 117.954986][ T1667] EXT4-fs error (device loop1): ext4_acquire_dquot:6230: comm syz.1.310: Failed to acquire dquot type 0 [ 117.967370][ T1667] EXT4-fs error (device loop1): ext4_free_blocks:5690: comm syz.1.310: Freeing blocks not in datazone - block = 0, count = 4096 [ 117.977342][ T24] audit: type=1400 audit(1781634864.370:810): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 118.002028][ T1667] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.310: Invalid inode bitmap blk 0 in block_group 0 [ 118.014728][ T300] Quota error (device loop1): remove_tree: Getting block too big (0 >= 8) [ 118.023336][ T300] EXT4-fs error (device loop1): ext4_release_dquot:6266: comm kworker/u4:3: Failed to release dquot type 0 [ 118.039492][ T1667] EXT4-fs error (device loop1) in ext4_free_inode:360: Corrupt filesystem [ 118.057905][ T24] audit: type=1400 audit(1781634864.370:811): avc: denied { append open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 118.064831][ T1667] EXT4-fs (loop1): 1 orphan inode deleted [ 118.144870][ T1487] udevd[1487]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 118.163999][ T1667] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; ,errors=continue [ 118.876893][ T1669] F2FS-fs (loop4): Test dummy encryption mode enabled [ 118.894466][ T1669] F2FS-fs (loop4): invalid crc value [ 118.912889][ T1669] F2FS-fs (loop4): Found nat_bits in checkpoint [ 118.979898][ T1669] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 119.086530][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 119.086545][ T24] audit: type=1400 audit(1781634865.760:813): avc: denied { ioctl } for pid=1668 comm="syz.4.311" path="socket:[19284]" dev="sockfs" ino=19284 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.778548][ T1623] syz.3.302 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 119.794822][ T1623] CPU: 1 PID: 1623 Comm: syz.3.302 Tainted: G B W syzkaller #0 [ 119.803529][ T1623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 119.813704][ T1623] Call Trace: [ 119.817016][ T1623] __dump_stack+0x21/0x24 [ 119.821361][ T1623] dump_stack_lvl+0x1a7/0x208 [ 119.826054][ T1623] ? show_regs_print_info+0x18/0x18 [ 119.831283][ T1623] ? ___ratelimit+0x421/0x5a0 [ 119.835985][ T1623] ? _raw_spin_lock+0x94/0xf0 [ 119.840681][ T1623] dump_stack+0x15/0x1c [ 119.844866][ T1623] dump_header+0xd9/0x650 [ 119.849215][ T1623] oom_kill_process+0x1fa/0x2c0 [ 119.854081][ T1623] out_of_memory+0x879/0xce0 [ 119.858756][ T1623] ? unregister_oom_notifier+0x20/0x20 [ 119.864214][ T1623] ? mutex_lock_killable+0x92/0xf0 [ 119.869320][ T1623] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 119.875814][ T1623] ? __alloc_pages_nodemask+0x29a/0x640 [ 119.881355][ T1623] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 119.886895][ T1623] ? mem_cgroup_oom_trylock+0x340/0x340 [ 119.892449][ T1623] ? _raw_spin_trylock_bh+0x150/0x150 [ 119.897816][ T1623] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 119.903360][ T1623] try_charge+0xfa9/0x1580 [ 119.907879][ T1623] ? __memcg_kmem_charge+0x150/0x150 [ 119.913185][ T1623] ? __kasan_check_write+0x14/0x20 [ 119.918293][ T1623] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 119.924092][ T1623] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 119.929722][ T1623] __mem_cgroup_charge+0x148/0x6d0 [ 119.934845][ T1623] shmem_add_to_page_cache+0x569/0xe10 [ 119.940312][ T1623] ? shmem_alloc_page+0x380/0x380 [ 119.945333][ T1623] ? _raw_spin_lock_irqsave+0x130/0x130 [ 119.950875][ T1623] ? find_lock_entry+0x4b/0x200 [ 119.955726][ T1623] shmem_getpage_gfp+0x907/0x20f0 [ 119.960778][ T1623] shmem_write_begin+0xce/0x1b0 [ 119.965628][ T1623] generic_perform_write+0x2ce/0x540 [ 119.971004][ T1623] ? atime_needs_update+0x5b0/0x5b0 [ 119.976200][ T1623] ? grab_cache_page_write_begin+0xb0/0xb0 [ 119.981999][ T1623] ? file_remove_privs+0x590/0x590 [ 119.987108][ T1623] ? __kasan_check_write+0x14/0x20 [ 119.992229][ T1623] ? down_write+0xb2/0x120 [ 119.996969][ T1623] __generic_file_write_iter+0x24b/0x480 [ 120.002607][ T1623] ? generic_write_checks+0x3df/0x480 [ 120.007984][ T1623] generic_file_write_iter+0xa9/0x1d0 [ 120.013349][ T1623] __kernel_write+0x5a5/0x9d0 [ 120.018024][ T1623] ? vfs_read+0xa50/0xa50 [ 120.022382][ T1623] ? populate_vma_page_range+0xf0/0xf0 [ 120.027853][ T1623] ? __kasan_check_write+0x14/0x20 [ 120.032969][ T1623] dump_emit+0x255/0x380 [ 120.037212][ T1623] ? wait_for_dump_helpers+0x380/0x380 [ 120.042670][ T1623] ? dump_user_range+0xe0/0x1a0 [ 120.047525][ T1623] dump_user_range+0x6a/0x1a0 [ 120.052198][ T1623] elf_core_dump+0x27af/0x2c20 [ 120.056963][ T1623] ? load_elf_binary+0x2910/0x2910 [ 120.062073][ T1623] ? __fsnotify_parent+0x6db/0x7c0 [ 120.067188][ T1623] ? do_truncate+0x1c6/0x240 [ 120.071770][ T1623] ? putname+0xfe/0x150 [ 120.075922][ T1623] ? __kasan_check_read+0x11/0x20 [ 120.080955][ T1623] ? __ia32_sys_unshare+0x40/0x40 [ 120.085992][ T1623] do_coredump+0x1be6/0x2910 [ 120.090580][ T1623] ? simple_acl_create+0x1c0/0x1c0 [ 120.095714][ T1623] ? debug_smp_processor_id+0x17/0x20 [ 120.101098][ T1623] ? kmem_cache_free+0x100/0x2d0 [ 120.106039][ T1623] ? ____kasan_slab_free+0x130/0x160 [ 120.111370][ T1623] ? get_signal+0xbdb/0x1300 [ 120.115959][ T1623] ? kmem_cache_free+0x100/0x2d0 [ 120.120891][ T1623] get_signal+0xf4c/0x1300 [ 120.125345][ T1623] arch_do_signal_or_restart+0xe7/0x11b0 [ 120.130993][ T1623] ? force_sig_info_to_task+0x26d/0x2e0 [ 120.136540][ T1623] ? force_sig_fault+0xd7/0x130 [ 120.141386][ T1623] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 120.147016][ T1623] ? __bad_area_nosemaphore+0x410/0x410 [ 120.152575][ T1623] exit_to_user_mode_loop+0xa2/0xe0 [ 120.157769][ T1623] exit_to_user_mode_prepare+0x76/0xa0 [ 120.163223][ T1623] irqentry_exit_to_user_mode+0x9/0x10 [ 120.168689][ T1623] irqentry_exit+0x12/0x60 [ 120.173100][ T1623] exc_page_fault+0x67/0xc0 [ 120.178284][ T1623] ? asm_exc_page_fault+0x8/0x30 [ 120.183233][ T1623] asm_exc_page_fault+0x1e/0x30 [ 120.188096][ T1623] RIP: 0033:0x7f4dc1f38b27 [ 120.192509][ T1623] Code: e8 8e fa ff ff 89 f2 48 8d 3d c5 3e 1b 00 48 8d 35 be f8 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 120.212327][ T1623] RSP: 002b:00007f4dc0a9d120 EFLAGS: 00010202 [ 120.218388][ T1623] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f4dc2082e59 [ 120.226374][ T1623] RDX: 00007f4dc0a9d140 RSI: 00007f4dc0a9d270 RDI: 000000000000000b [ 120.234402][ T1623] RBP: 00007f4dc2118d6f R08: 0000000000000000 R09: 0000000000000000 [ 120.242387][ T1623] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 120.250370][ T1623] R13: 00007f4dc22fc128 R14: 00007f4dc22fc090 R15: 00007ffe49267598 [ 120.258473][ T1623] memory: usage 307200kB, limit 307200kB, failcnt 10312 [ 120.265641][ T1623] memory+swap: usage 421576kB, limit 9007199254740988kB, failcnt 0 [ 120.273577][ T1623] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 120.280463][ T1623] Memory cgroup stats for /syz3: [ 120.280614][ T1623] anon 2920448 [ 120.280614][ T1623] file 300883968 [ 120.280614][ T1623] kernel_stack 0 [ 120.280614][ T1623] percpu 0 [ 120.280614][ T1623] sock 0 [ 120.280614][ T1623] shmem 300748800 [ 120.280614][ T1623] file_mapped 135168 [ 120.280614][ T1623] file_dirty 135168 [ 120.280614][ T1623] file_writeback 0 [ 120.280614][ T1623] anon_thp 0 [ 120.280614][ T1623] inactive_anon 312209408 [ 120.280614][ T1623] active_anon 2162688 [ 120.280614][ T1623] inactive_file 163840 [ 120.280614][ T1623] active_file 57344 [ 120.280614][ T1623] unevictable 0 [ 120.280614][ T1623] slab_reclaimable 0 [ 120.280614][ T1623] slab_unreclaimable 0 [ 120.280614][ T1623] slab 0 [ 120.280614][ T1623] workingset_refault_anon 0 [ 120.280614][ T1623] workingset_refault_file 957 [ 120.280614][ T1623] workingset_activate_anon 0 [ 120.280614][ T1623] workingset_activate_file 957 [ 120.280614][ T1623] workingset_restore_anon 0 [ 120.280614][ T1623] workingset_restore_file 495 [ 120.374993][ T1623] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.302,pid=1614,uid=0 [ 120.389777][ T1623] Memory cgroup out of memory: Killed process 1614 (syz.3.302) total-vm:90448kB, anon-rss:1376kB, file-rss:52988kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 120.407245][ T27] oom_reaper: reaped process 1614 (syz.3.302), now anon-rss:0kB, file-rss:53504kB, shmem-rss:0kB [ 120.418047][ T1623] syz.3.302 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 120.427928][ T1623] CPU: 1 PID: 1623 Comm: syz.3.302 Tainted: G B W syzkaller #0 [ 120.436611][ T1623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 120.446676][ T1623] Call Trace: [ 120.449988][ T1623] __dump_stack+0x21/0x24 [ 120.454328][ T1623] dump_stack_lvl+0x1a7/0x208 [ 120.459003][ T1623] ? show_regs_print_info+0x18/0x18 [ 120.464223][ T1623] dump_stack+0x15/0x1c [ 120.468377][ T1623] dump_header+0xd9/0x650 [ 120.472707][ T1623] oom_kill_process+0x1fa/0x2c0 [ 120.477560][ T1623] out_of_memory+0x879/0xce0 [ 120.482154][ T1623] ? unregister_oom_notifier+0x20/0x20 [ 120.487608][ T1623] ? mutex_lock_killable+0xdf/0xf0 [ 120.492726][ T1623] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 120.499222][ T1623] ? __alloc_pages_nodemask+0x29a/0x640 [ 120.504784][ T1623] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 120.510328][ T1623] ? mem_cgroup_oom_trylock+0x340/0x340 [ 120.515885][ T1623] ? _raw_spin_trylock_bh+0x150/0x150 [ 120.521262][ T1623] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 120.526927][ T1623] try_charge+0xfa9/0x1580 [ 120.531373][ T1623] ? __memcg_kmem_charge+0x150/0x150 [ 120.536668][ T1623] ? __kasan_check_write+0x14/0x20 [ 120.541786][ T1623] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 120.547596][ T1623] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 120.553149][ T1623] __mem_cgroup_charge+0x148/0x6d0 [ 120.558261][ T1623] shmem_add_to_page_cache+0x569/0xe10 [ 120.563721][ T1623] ? shmem_alloc_page+0x380/0x380 [ 120.568751][ T1623] ? _raw_spin_lock_irqsave+0x130/0x130 [ 120.574290][ T1623] ? find_lock_entry+0x4b/0x200 [ 120.579137][ T1623] shmem_getpage_gfp+0x907/0x20f0 [ 120.584175][ T1623] shmem_write_begin+0xce/0x1b0 [ 120.589035][ T1623] generic_perform_write+0x2ce/0x540 [ 120.594402][ T1623] ? atime_needs_update+0x5b0/0x5b0 [ 120.599597][ T1623] ? grab_cache_page_write_begin+0xb0/0xb0 [ 120.605424][ T1623] ? file_remove_privs+0x590/0x590 [ 120.610551][ T1623] ? __kasan_check_write+0x14/0x20 [ 120.615676][ T1623] ? down_write+0xb2/0x120 [ 120.620091][ T1623] __generic_file_write_iter+0x24b/0x480 [ 120.625724][ T1623] ? generic_write_checks+0x3df/0x480 [ 120.631101][ T1623] generic_file_write_iter+0xa9/0x1d0 [ 120.636478][ T1623] __kernel_write+0x5a5/0x9d0 [ 120.641175][ T1623] ? vfs_read+0xa50/0xa50 [ 120.645507][ T1623] ? populate_vma_page_range+0xf0/0xf0 [ 120.651056][ T1623] ? __kasan_check_write+0x14/0x20 [ 120.656164][ T1623] dump_emit+0x255/0x380 [ 120.660413][ T1623] ? wait_for_dump_helpers+0x380/0x380 [ 120.665871][ T1623] ? dump_user_range+0xe0/0x1a0 [ 120.670722][ T1623] dump_user_range+0x6a/0x1a0 [ 120.675399][ T1623] elf_core_dump+0x27af/0x2c20 [ 120.680166][ T1623] ? load_elf_binary+0x2910/0x2910 [ 120.685292][ T1623] ? __fsnotify_parent+0x6db/0x7c0 [ 120.690416][ T1623] ? do_truncate+0x1c6/0x240 [ 120.695017][ T1623] ? putname+0xfe/0x150 [ 120.699190][ T1623] ? __kasan_check_read+0x11/0x20 [ 120.704211][ T1623] ? __ia32_sys_unshare+0x40/0x40 [ 120.709247][ T1623] do_coredump+0x1be6/0x2910 [ 120.713856][ T1623] ? simple_acl_create+0x1c0/0x1c0 [ 120.718969][ T1623] ? debug_smp_processor_id+0x17/0x20 [ 120.724334][ T1623] ? kmem_cache_free+0x100/0x2d0 [ 120.729260][ T1623] ? ____kasan_slab_free+0x130/0x160 [ 120.734555][ T1623] ? get_signal+0xbdb/0x1300 [ 120.739140][ T1623] ? kmem_cache_free+0x100/0x2d0 [ 120.744082][ T1623] get_signal+0xf4c/0x1300 [ 120.748536][ T1623] arch_do_signal_or_restart+0xe7/0x11b0 [ 120.754639][ T1623] ? force_sig_info_to_task+0x26d/0x2e0 [ 120.760284][ T1623] ? force_sig_fault+0xd7/0x130 [ 120.765150][ T1623] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 120.770790][ T1623] ? __bad_area_nosemaphore+0x410/0x410 [ 120.776341][ T1623] exit_to_user_mode_loop+0xa2/0xe0 [ 120.781538][ T1623] exit_to_user_mode_prepare+0x76/0xa0 [ 120.786992][ T1623] irqentry_exit_to_user_mode+0x9/0x10 [ 120.792448][ T1623] irqentry_exit+0x12/0x60 [ 120.796856][ T1623] exc_page_fault+0x67/0xc0 [ 120.801360][ T1623] ? asm_exc_page_fault+0x8/0x30 [ 120.806287][ T1623] asm_exc_page_fault+0x1e/0x30 [ 120.811143][ T1623] RIP: 0033:0x7f4dc1f38b27 [ 120.815580][ T1623] Code: e8 8e fa ff ff 89 f2 48 8d 3d c5 3e 1b 00 48 8d 35 be f8 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 120.835396][ T1623] RSP: 002b:00007f4dc0a9d120 EFLAGS: 00010202 [ 120.841483][ T1623] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f4dc2082e59 [ 120.849470][ T1623] RDX: 00007f4dc0a9d140 RSI: 00007f4dc0a9d270 RDI: 000000000000000b [ 120.857455][ T1623] RBP: 00007f4dc2118d6f R08: 0000000000000000 R09: 0000000000000000 [ 120.865448][ T1623] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 120.873431][ T1623] R13: 00007f4dc22fc128 R14: 00007f4dc22fc090 R15: 00007ffe49267598 [ 120.883741][ T1623] memory: usage 307140kB, limit 307200kB, failcnt 10382 [ 120.890762][ T1623] memory+swap: usage 420376kB, limit 9007199254740988kB, failcnt 0 [ 120.898699][ T1623] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 120.905605][ T1623] Memory cgroup stats for /syz3: [ 120.905745][ T1623] anon 2785280 [ 120.905745][ T1623] file 301019136 [ 120.905745][ T1623] kernel_stack 0 [ 120.905745][ T1623] percpu 0 [ 120.905745][ T1623] sock 0 [ 120.905745][ T1623] shmem 300883968 [ 120.905745][ T1623] file_mapped 135168 [ 120.905745][ T1623] file_dirty 135168 [ 120.905745][ T1623] file_writeback 0 [ 120.905745][ T1623] anon_thp 0 [ 120.905745][ T1623] inactive_anon 311939072 [ 120.905745][ T1623] active_anon 2162688 [ 120.905745][ T1623] inactive_file 163840 [ 120.905745][ T1623] active_file 57344 [ 120.905745][ T1623] unevictable 0 [ 120.905745][ T1623] slab_reclaimable 0 [ 120.905745][ T1623] slab_unreclaimable 0 [ 120.905745][ T1623] slab 0 [ 120.905745][ T1623] workingset_refault_anon 0 [ 120.905745][ T1623] workingset_refault_file 957 [ 120.905745][ T1623] workingset_activate_anon 0 [ 120.905745][ T1623] workingset_activate_file 957 [ 120.905745][ T1623] workingset_restore_anon 0 [ 120.905745][ T1623] workingset_restore_file 495 [ 120.999832][ T1623] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.302,pid=1604,uid=0 [ 121.015141][ T1623] Memory cgroup out of memory: Killed process 1604 (syz.3.302) total-vm:90316kB, anon-rss:1376kB, file-rss:52032kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 121.095987][ T1613] syz.3.302 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 121.172513][ T1613] CPU: 1 PID: 1613 Comm: syz.3.302 Tainted: G B W syzkaller #0 [ 121.181500][ T1613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 121.191587][ T1613] Call Trace: [ 121.194906][ T1613] __dump_stack+0x21/0x24 [ 121.199264][ T1613] dump_stack_lvl+0x1a7/0x208 [ 121.203963][ T1613] ? show_regs_print_info+0x18/0x18 [ 121.209179][ T1613] ? ___ratelimit+0x421/0x5a0 [ 121.213879][ T1613] ? _raw_spin_lock+0x94/0xf0 [ 121.218577][ T1613] dump_stack+0x15/0x1c [ 121.222751][ T1613] dump_header+0xd9/0x650 [ 121.227102][ T1613] oom_kill_process+0x1fa/0x2c0 [ 121.231981][ T1613] out_of_memory+0x879/0xce0 [ 121.236621][ T1613] ? unregister_oom_notifier+0x20/0x20 [ 121.242106][ T1613] ? mutex_lock_killable+0xdf/0xf0 [ 121.247366][ T1613] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 121.254077][ T1613] ? __alloc_pages_nodemask+0x29a/0x640 [ 121.259689][ T1613] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 121.265293][ T1613] ? mem_cgroup_oom_trylock+0x340/0x340 [ 121.270872][ T1613] ? _raw_spin_trylock_bh+0x150/0x150 [ 121.276273][ T1613] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 121.282111][ T1613] try_charge+0xfa9/0x1580 [ 121.286559][ T1613] ? __memcg_kmem_charge+0x150/0x150 [ 121.291867][ T1613] ? __kasan_check_write+0x14/0x20 [ 121.297002][ T1613] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 121.302829][ T1613] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 121.308392][ T1613] __mem_cgroup_charge+0x148/0x6d0 [ 121.313539][ T1613] shmem_add_to_page_cache+0x569/0xe10 [ 121.319021][ T1613] ? shmem_alloc_page+0x380/0x380 [ 121.324074][ T1613] ? _raw_spin_lock_irqsave+0x130/0x130 [ 121.329641][ T1613] ? find_lock_entry+0x4b/0x200 [ 121.334508][ T1613] shmem_getpage_gfp+0x907/0x20f0 [ 121.340550][ T1613] shmem_write_begin+0xce/0x1b0 [ 121.345448][ T1613] generic_perform_write+0x2ce/0x540 [ 121.350761][ T1613] ? atime_needs_update+0x5b0/0x5b0 [ 121.355986][ T1613] ? grab_cache_page_write_begin+0xb0/0xb0 [ 121.361817][ T1613] ? file_remove_privs+0x590/0x590 [ 121.366948][ T1613] ? __kasan_check_write+0x14/0x20 [ 121.372093][ T1613] ? down_write+0xb2/0x120 [ 121.376534][ T1613] __generic_file_write_iter+0x24b/0x480 [ 121.382187][ T1613] ? generic_write_checks+0x3df/0x480 [ 121.387589][ T1613] generic_file_write_iter+0xa9/0x1d0 [ 121.393075][ T1613] __kernel_write+0x5a5/0x9d0 [ 121.397782][ T1613] ? vfs_read+0xa50/0xa50 [ 121.402139][ T1613] ? populate_vma_page_range+0xf0/0xf0 [ 121.407729][ T1613] ? __kasan_check_write+0x14/0x20 [ 121.412877][ T1613] dump_emit+0x255/0x380 [ 121.417140][ T1613] ? wait_for_dump_helpers+0x380/0x380 [ 121.422621][ T1613] ? dump_user_range+0x1/0x1a0 [ 121.427425][ T1613] ? kasan_check_range+0x11/0x2a0 [ 121.432545][ T1613] dump_user_range+0x6a/0x1a0 [ 121.437234][ T1613] elf_core_dump+0x27af/0x2c20 [ 121.442011][ T1613] ? load_elf_binary+0x2910/0x2910 [ 121.447130][ T1613] ? __fsnotify_parent+0x6db/0x7c0 [ 121.452292][ T1613] ? do_truncate+0x1c6/0x240 [ 121.456886][ T1613] ? putname+0xfe/0x150 [ 121.461052][ T1613] ? __kasan_check_read+0x11/0x20 [ 121.466083][ T1613] ? __ia32_sys_unshare+0x40/0x40 [ 121.471114][ T1613] do_coredump+0x1be6/0x2910 [ 121.475759][ T1613] ? simple_acl_create+0x1c0/0x1c0 [ 121.480877][ T1613] ? debug_smp_processor_id+0x17/0x20 [ 121.486255][ T1613] ? kmem_cache_free+0x100/0x2d0 [ 121.491218][ T1613] ? ____kasan_slab_free+0x130/0x160 [ 121.496510][ T1613] ? get_signal+0xbdb/0x1300 [ 121.501111][ T1613] ? kmem_cache_free+0x100/0x2d0 [ 121.506055][ T1613] get_signal+0xf4c/0x1300 [ 121.510484][ T1613] arch_do_signal_or_restart+0xe7/0x11b0 [ 121.516127][ T1613] ? force_sig_info_to_task+0x26d/0x2e0 [ 121.521678][ T1613] ? force_sig_fault+0xd7/0x130 [ 121.526575][ T1613] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 121.532214][ T1613] ? __bad_area_nosemaphore+0x410/0x410 [ 121.537769][ T1613] exit_to_user_mode_loop+0xa2/0xe0 [ 121.542974][ T1613] exit_to_user_mode_prepare+0x76/0xa0 [ 121.548440][ T1613] irqentry_exit_to_user_mode+0x9/0x10 [ 121.553909][ T1613] irqentry_exit+0x12/0x60 [ 121.558335][ T1613] exc_page_fault+0x67/0xc0 [ 121.562841][ T1613] ? asm_exc_page_fault+0x8/0x30 [ 121.567782][ T1613] asm_exc_page_fault+0x1e/0x30 [ 121.572641][ T1613] RIP: 0033:0x7f4dc1f38b27 [ 121.577065][ T1613] Code: e8 8e fa ff ff 89 f2 48 8d 3d c5 3e 1b 00 48 8d 35 be f8 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 121.596683][ T1613] RSP: 002b:00007f4dc0a9d120 EFLAGS: 00010202 [ 121.602765][ T1613] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f4dc2082e59 [ 121.611182][ T1613] RDX: 00007f4dc0a9d140 RSI: 00007f4dc0a9d270 RDI: 000000000000000b [ 121.619158][ T1613] RBP: 00007f4dc2118d6f R08: 0000000000000000 R09: 0000000000000000 [ 121.627141][ T1613] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 121.635118][ T1613] R13: 00007f4dc22fc128 R14: 00007f4dc22fc090 R15: 00007ffe49267598 [ 121.760972][ T1613] memory: usage 307160kB, limit 307200kB, failcnt 11339 [ 121.811158][ T1613] memory+swap: usage 411920kB, limit 9007199254740988kB, failcnt 0 [ 121.908578][ T1613] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 121.952243][ T1613] Memory cgroup stats for /syz3: [ 121.952379][ T1613] anon 2650112 [ 121.952379][ T1613] file 301830144 [ 121.952379][ T1613] kernel_stack 0 [ 121.952379][ T1613] percpu 0 [ 121.952379][ T1613] sock 0 [ 121.952379][ T1613] shmem 301830144 [ 121.952379][ T1613] file_mapped 135168 [ 121.952379][ T1613] file_dirty 135168 [ 121.952379][ T1613] file_writeback 0 [ 121.952379][ T1613] anon_thp 0 [ 121.952379][ T1613] inactive_anon 311717888 [ 121.952379][ T1613] active_anon 2703360 [ 121.952379][ T1613] inactive_file 0 [ 121.952379][ T1613] active_file 159744 [ 121.952379][ T1613] unevictable 0 [ 121.952379][ T1613] slab_reclaimable 0 [ 121.952379][ T1613] slab_unreclaimable 0 [ 121.952379][ T1613] slab 0 [ 121.952379][ T1613] workingset_refault_anon 0 [ 121.952379][ T1613] workingset_refault_file 1056 [ 121.952379][ T1613] workingset_activate_anon 0 [ 121.952379][ T1613] workingset_activate_file 1056 [ 121.952379][ T1613] workingset_restore_anon 0 [ 121.952379][ T1613] workingset_restore_file 594 [ 122.046645][ T1613] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.302,pid=1606,uid=0 [ 122.061582][ T1613] Memory cgroup out of memory: Killed process 1606 (syz.3.302) total-vm:90448kB, anon-rss:1376kB, file-rss:51388kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 122.079227][ T27] oom_reaper: reaped process 1606 (syz.3.302), now anon-rss:0kB, file-rss:53504kB, shmem-rss:0kB [ 122.090219][ T1605] syz.3.302 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 122.099997][ T1605] CPU: 1 PID: 1605 Comm: syz.3.302 Tainted: G B W syzkaller #0 [ 122.108687][ T1605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 122.118784][ T1605] Call Trace: [ 122.122106][ T1605] __dump_stack+0x21/0x24 [ 122.126464][ T1605] dump_stack_lvl+0x1a7/0x208 [ 122.131156][ T1605] ? show_regs_print_info+0x18/0x18 [ 122.136350][ T1605] ? ___ratelimit+0x421/0x5a0 [ 122.141135][ T1605] ? _raw_spin_lock+0x94/0xf0 [ 122.145842][ T1605] dump_stack+0x15/0x1c [ 122.149994][ T1605] dump_header+0xd9/0x650 [ 122.154323][ T1605] oom_kill_process+0x1fa/0x2c0 [ 122.159166][ T1605] out_of_memory+0x879/0xce0 [ 122.163752][ T1605] ? unregister_oom_notifier+0x20/0x20 [ 122.169214][ T1605] ? mutex_lock_killable+0xdf/0xf0 [ 122.174325][ T1605] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 122.180844][ T1605] ? __alloc_pages_nodemask+0x29a/0x640 [ 122.186423][ T1605] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 122.191973][ T1605] ? mem_cgroup_oom_trylock+0x340/0x340 [ 122.197519][ T1605] ? _raw_spin_trylock_bh+0x150/0x150 [ 122.202890][ T1605] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 122.208456][ T1605] try_charge+0xfa9/0x1580 [ 122.212874][ T1605] ? __memcg_kmem_charge+0x150/0x150 [ 122.218156][ T1605] ? __kasan_check_write+0x14/0x20 [ 122.223262][ T1605] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 122.229075][ T1605] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 122.234615][ T1605] __mem_cgroup_charge+0x148/0x6d0 [ 122.239939][ T1605] shmem_add_to_page_cache+0x569/0xe10 [ 122.245397][ T1605] ? shmem_alloc_page+0x380/0x380 [ 122.250417][ T1605] ? _raw_spin_lock_irqsave+0x130/0x130 [ 122.256114][ T1605] ? find_lock_entry+0x4b/0x200 [ 122.260996][ T1605] shmem_getpage_gfp+0x907/0x20f0 [ 122.266025][ T1605] shmem_write_begin+0xce/0x1b0 [ 122.270890][ T1605] generic_perform_write+0x2ce/0x540 [ 122.276178][ T1605] ? atime_needs_update+0x5b0/0x5b0 [ 122.281376][ T1605] ? grab_cache_page_write_begin+0xb0/0xb0 [ 122.287187][ T1605] ? file_remove_privs+0x590/0x590 [ 122.292327][ T1605] ? __kasan_check_write+0x14/0x20 [ 122.297539][ T1605] ? down_write+0xb2/0x120 [ 122.301973][ T1605] __generic_file_write_iter+0x24b/0x480 [ 122.307608][ T1605] ? generic_write_checks+0x3df/0x480 [ 122.312992][ T1605] generic_file_write_iter+0xa9/0x1d0 [ 122.318377][ T1605] __kernel_write+0x5a5/0x9d0 [ 122.323053][ T1605] ? vfs_read+0xa50/0xa50 [ 122.327407][ T1605] ? populate_vma_page_range+0xf0/0xf0 [ 122.332867][ T1605] ? __kasan_check_write+0x14/0x20 [ 122.338035][ T1605] dump_emit+0x255/0x380 [ 122.342286][ T1605] ? wait_for_dump_helpers+0x380/0x380 [ 122.347757][ T1605] dump_user_range+0x6a/0x1a0 [ 122.352436][ T1605] elf_core_dump+0x27af/0x2c20 [ 122.357238][ T1605] ? load_elf_binary+0x2910/0x2910 [ 122.362348][ T1605] ? __fsnotify_parent+0x6db/0x7c0 [ 122.367930][ T1605] ? do_truncate+0x1c6/0x240 [ 122.372535][ T1605] ? putname+0xfe/0x150 [ 122.377562][ T1605] ? __kasan_check_read+0x11/0x20 [ 122.382811][ T1605] ? __ia32_sys_unshare+0x40/0x40 [ 122.387844][ T1605] do_coredump+0x1be6/0x2910 [ 122.392459][ T1605] ? simple_acl_create+0x1c0/0x1c0 [ 122.397568][ T1605] ? debug_smp_processor_id+0x17/0x20 [ 122.402936][ T1605] ? kmem_cache_free+0x100/0x2d0 [ 122.407868][ T1605] ? ____kasan_slab_free+0x130/0x160 [ 122.413164][ T1605] ? get_signal+0xbdb/0x1300 [ 122.417751][ T1605] ? kmem_cache_free+0x100/0x2d0 [ 122.422692][ T1605] get_signal+0xf4c/0x1300 [ 122.427151][ T1605] arch_do_signal_or_restart+0xe7/0x11b0 [ 122.432806][ T1605] ? force_sig_info_to_task+0x26d/0x2e0 [ 122.438350][ T1605] ? force_sig_fault+0xd7/0x130 [ 122.443209][ T1605] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 122.448849][ T1605] ? __bad_area_nosemaphore+0x410/0x410 [ 122.454439][ T1605] exit_to_user_mode_loop+0xa2/0xe0 [ 122.459648][ T1605] exit_to_user_mode_prepare+0x76/0xa0 [ 122.465105][ T1605] irqentry_exit_to_user_mode+0x9/0x10 [ 122.470585][ T1605] irqentry_exit+0x12/0x60 [ 122.475000][ T1605] exc_page_fault+0x67/0xc0 [ 122.479519][ T1605] ? asm_exc_page_fault+0x8/0x30 [ 122.484450][ T1605] asm_exc_page_fault+0x1e/0x30 [ 122.489298][ T1605] RIP: 0033:0x7f4dc1f38b27 [ 122.493735][ T1605] Code: e8 8e fa ff ff 89 f2 48 8d 3d c5 3e 1b 00 48 8d 35 be f8 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 122.513339][ T1605] RSP: 002b:00007f4dc0a9d120 EFLAGS: 00010202 [ 122.519405][ T1605] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f4dc2082e59 [ 122.527374][ T1605] RDX: 00007f4dc0a9d140 RSI: 00007f4dc0a9d270 RDI: 000000000000000b [ 122.535361][ T1605] RBP: 00007f4dc2118d6f R08: 0000000000000000 R09: 0000000000000000 [ 122.543331][ T1605] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 122.551304][ T1605] R13: 00007f4dc22fc128 R14: 00007f4dc22fc090 R15: 00007ffe49267598 [ 122.559894][ T1605] memory: usage 307152kB, limit 307200kB, failcnt 13163 [ 122.566899][ T1605] memory+swap: usage 420948kB, limit 9007199254740988kB, failcnt 0 [ 122.574835][ T1605] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 122.581715][ T1605] Memory cgroup stats for /syz3: [ 122.581847][ T1605] anon 2514944 [ 122.581847][ T1605] file 301154304 [ 122.581847][ T1605] kernel_stack 0 [ 122.581847][ T1605] percpu 0 [ 122.581847][ T1605] sock 0 [ 122.581847][ T1605] shmem 301154304 [ 122.581847][ T1605] file_mapped 135168 [ 122.581847][ T1605] file_dirty 135168 [ 122.581847][ T1605] file_writeback 0 [ 122.581847][ T1605] anon_thp 0 [ 122.581847][ T1605] inactive_anon 310501376 [ 122.581847][ T1605] active_anon 2703360 [ 122.581847][ T1605] inactive_file 0 [ 122.581847][ T1605] active_file 159744 [ 122.581847][ T1605] unevictable 0 [ 122.581847][ T1605] slab_reclaimable 0 [ 122.581847][ T1605] slab_unreclaimable 0 [ 122.581847][ T1605] slab 0 [ 122.581847][ T1605] workingset_refault_anon 0 [ 122.581847][ T1605] workingset_refault_file 1056 [ 122.581847][ T1605] workingset_activate_anon 0 [ 122.581847][ T1605] workingset_activate_file 1056 [ 122.581847][ T1605] workingset_restore_anon 0 [ 122.581847][ T1605] workingset_restore_file 594 [ 122.679267][ T1605] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.302,pid=1610,uid=0 [ 122.694503][ T1605] Memory cgroup out of memory: Killed process 1610 (syz.3.302) total-vm:90448kB, anon-rss:1376kB, file-rss:51968kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 122.712303][ T27] oom_reaper: reaped process 1610 (syz.3.302), now anon-rss:0kB, file-rss:53504kB, shmem-rss:0kB [ 122.755073][ T1607] syz.3.302 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 122.813977][ T1607] CPU: 0 PID: 1607 Comm: syz.3.302 Tainted: G B W syzkaller #0 [ 122.822696][ T1607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 122.832771][ T1607] Call Trace: [ 122.836086][ T1607] __dump_stack+0x21/0x24 [ 122.840449][ T1607] dump_stack_lvl+0x1a7/0x208 [ 122.845150][ T1607] ? show_regs_print_info+0x18/0x18 [ 122.850366][ T1607] ? ___ratelimit+0x421/0x5a0 [ 122.855074][ T1607] ? _raw_spin_lock+0x94/0xf0 [ 122.859765][ T1607] dump_stack+0x15/0x1c [ 122.863949][ T1607] dump_header+0xd9/0x650 [ 122.868302][ T1607] oom_kill_process+0x1fa/0x2c0 [ 122.873259][ T1607] out_of_memory+0x879/0xce0 [ 122.877866][ T1607] ? unregister_oom_notifier+0x20/0x20 [ 122.883343][ T1607] ? mutex_lock_killable+0xdf/0xf0 [ 122.888481][ T1607] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 122.895027][ T1607] ? __alloc_pages_nodemask+0x29a/0x640 [ 122.900595][ T1607] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 122.906183][ T1607] ? mem_cgroup_oom_trylock+0x340/0x340 [ 122.911756][ T1607] ? _raw_spin_trylock_bh+0x150/0x150 [ 122.917149][ T1607] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 122.922722][ T1607] try_charge+0xfa9/0x1580 [ 122.927171][ T1607] ? __memcg_kmem_charge+0x150/0x150 [ 122.932512][ T1607] ? __kasan_check_write+0x14/0x20 [ 122.937649][ T1607] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 122.943484][ T1607] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 122.949058][ T1607] __mem_cgroup_charge+0x148/0x6d0 [ 122.954197][ T1607] shmem_add_to_page_cache+0x569/0xe10 [ 122.959693][ T1607] ? shmem_alloc_page+0x380/0x380 [ 122.964746][ T1607] ? _raw_spin_lock_irqsave+0x130/0x130 [ 122.970312][ T1607] ? find_lock_entry+0x4b/0x200 [ 122.975184][ T1607] shmem_getpage_gfp+0x907/0x20f0 [ 122.980237][ T1607] shmem_write_begin+0xce/0x1b0 [ 122.985118][ T1607] generic_perform_write+0x2ce/0x540 [ 122.990433][ T1607] ? atime_needs_update+0x5b0/0x5b0 [ 122.995659][ T1607] ? grab_cache_page_write_begin+0xb0/0xb0 [ 123.001616][ T1607] ? file_remove_privs+0x590/0x590 [ 123.006755][ T1607] ? __kasan_check_write+0x14/0x20 [ 123.011894][ T1607] ? down_write+0xb2/0x120 [ 123.016425][ T1607] __generic_file_write_iter+0x24b/0x480 [ 123.022076][ T1607] ? generic_write_checks+0x3df/0x480 [ 123.027486][ T1607] generic_file_write_iter+0xa9/0x1d0 [ 123.032889][ T1607] __kernel_write+0x5a5/0x9d0 [ 123.037587][ T1607] ? vfs_read+0xa50/0xa50 [ 123.041942][ T1607] ? populate_vma_page_range+0xf0/0xf0 [ 123.047428][ T1607] ? __kasan_check_write+0x14/0x20 [ 123.052568][ T1607] dump_emit+0x255/0x380 [ 123.056839][ T1607] ? wait_for_dump_helpers+0x380/0x380 [ 123.062324][ T1607] ? dump_user_range+0x13b/0x1a0 [ 123.067287][ T1607] dump_user_range+0x6a/0x1a0 [ 123.071978][ T1607] elf_core_dump+0x27af/0x2c20 [ 123.076749][ T1607] ? load_elf_binary+0x2910/0x2910 [ 123.081869][ T1607] ? __fsnotify_parent+0x6db/0x7c0 [ 123.086996][ T1607] ? do_truncate+0x1c6/0x240 [ 123.091597][ T1607] ? putname+0xfe/0x150 [ 123.095762][ T1607] ? __kasan_check_read+0x11/0x20 [ 123.100795][ T1607] ? __ia32_sys_unshare+0x40/0x40 [ 123.105827][ T1607] do_coredump+0x1be6/0x2910 [ 123.110864][ T1607] ? simple_acl_create+0x1c0/0x1c0 [ 123.115981][ T1607] ? debug_smp_processor_id+0x17/0x20 [ 123.121362][ T1607] ? kmem_cache_free+0x100/0x2d0 [ 123.126306][ T1607] ? ____kasan_slab_free+0x130/0x160 [ 123.131604][ T1607] ? get_signal+0xbdb/0x1300 [ 123.136198][ T1607] ? kmem_cache_free+0x100/0x2d0 [ 123.141145][ T1607] get_signal+0xf4c/0x1300 [ 123.145574][ T1607] arch_do_signal_or_restart+0xe7/0x11b0 [ 123.151209][ T1607] ? force_sig_info_to_task+0x26d/0x2e0 [ 123.156758][ T1607] ? force_sig_fault+0xd7/0x130 [ 123.161612][ T1607] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 123.167251][ T1607] ? __bad_area_nosemaphore+0x410/0x410 [ 123.172805][ T1607] exit_to_user_mode_loop+0xa2/0xe0 [ 123.178009][ T1607] exit_to_user_mode_prepare+0x76/0xa0 [ 123.183472][ T1607] irqentry_exit_to_user_mode+0x9/0x10 [ 123.188935][ T1607] irqentry_exit+0x12/0x60 [ 123.193353][ T1607] exc_page_fault+0x67/0xc0 [ 123.197870][ T1607] ? asm_exc_page_fault+0x8/0x30 [ 123.202813][ T1607] asm_exc_page_fault+0x1e/0x30 [ 123.207664][ T1607] RIP: 0033:0x7f4dc1f38b27 [ 123.212086][ T1607] Code: e8 8e fa ff ff 89 f2 48 8d 3d c5 3e 1b 00 48 8d 35 be f8 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 123.231695][ T1607] RSP: 002b:00007f4dc0a9d120 EFLAGS: 00010202 [ 123.237770][ T1607] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f4dc2082e59 [ 123.245835][ T1607] RDX: 00007f4dc0a9d140 RSI: 00007f4dc0a9d270 RDI: 000000000000000b [ 123.253814][ T1607] RBP: 00007f4dc2118d6f R08: 0000000000000000 R09: 0000000000000000 [ 123.261796][ T1607] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 123.269896][ T1607] R13: 00007f4dc22fc128 R14: 00007f4dc22fc090 R15: 00007ffe49267598 [ 123.335040][ T1607] memory: usage 300192kB, limit 307200kB, failcnt 14049 [ 123.342060][ T1607] memory+swap: usage 401524kB, limit 9007199254740988kB, failcnt 0 [ 123.357954][ T1607] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 123.371446][ T1607] Memory cgroup stats for /syz3: [ 123.371583][ T1607] anon 2379776 [ 123.371583][ T1607] file 301559808 [ 123.371583][ T1607] kernel_stack 0 [ 123.371583][ T1607] percpu 0 [ 123.371583][ T1607] sock 0 [ 123.371583][ T1607] shmem 301559808 [ 123.371583][ T1607] file_mapped 135168 [ 123.371583][ T1607] file_dirty 135168 [ 123.371583][ T1607] file_writeback 135168 [ 123.371583][ T1607] anon_thp 0 [ 123.371583][ T1607] inactive_anon 310530048 [ 123.371583][ T1607] active_anon 2297856 [ 123.371583][ T1607] inactive_file 0 [ 123.371583][ T1607] active_file 159744 [ 123.371583][ T1607] unevictable 0 [ 123.371583][ T1607] slab_reclaimable 0 [ 123.371583][ T1607] slab_unreclaimable 0 [ 123.371583][ T1607] slab 0 [ 123.371583][ T1607] workingset_refault_anon 0 [ 123.371583][ T1607] workingset_refault_file 1056 [ 123.371583][ T1607] workingset_activate_anon 0 [ 123.371583][ T1607] workingset_activate_file 1056 [ 123.371583][ T1607] workingset_restore_anon 0 [ 123.371583][ T1607] workingset_restore_file 594 [ 123.615347][ T1607] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.302,pid=1601,uid=0 [ 123.646707][ T1607] Memory cgroup out of memory: Killed process 1601 (syz.3.302) total-vm:90316kB, anon-rss:1376kB, file-rss:52224kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 123.757145][ T1612] syz.3.302 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 123.838564][ T1612] CPU: 0 PID: 1612 Comm: syz.3.302 Tainted: G B W syzkaller #0 [ 123.847275][ T1612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 123.857341][ T1612] Call Trace: [ 123.860643][ T1612] __dump_stack+0x21/0x24 [ 123.864982][ T1612] dump_stack_lvl+0x1a7/0x208 [ 123.869668][ T1612] ? show_regs_print_info+0x18/0x18 [ 123.874870][ T1612] ? ___ratelimit+0x421/0x5a0 [ 123.879565][ T1612] ? _raw_spin_lock+0x94/0xf0 [ 123.884248][ T1612] dump_stack+0x15/0x1c [ 123.888412][ T1612] dump_header+0xd9/0x650 [ 123.892893][ T1612] oom_kill_process+0x1fa/0x2c0 [ 123.897749][ T1612] out_of_memory+0x879/0xce0 [ 123.902345][ T1612] ? unregister_oom_notifier+0x20/0x20 [ 123.907892][ T1612] ? mutex_lock_killable+0xdf/0xf0 [ 123.913006][ T1612] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 123.919517][ T1612] ? __alloc_pages_nodemask+0x29a/0x640 [ 123.925074][ T1612] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 123.930620][ T1612] ? mem_cgroup_oom_trylock+0x340/0x340 [ 123.936194][ T1612] ? _raw_spin_trylock_bh+0x150/0x150 [ 123.941569][ T1612] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 123.947118][ T1612] try_charge+0xfa9/0x1580 [ 123.951544][ T1612] ? __memcg_kmem_charge+0x150/0x150 [ 123.956835][ T1612] ? __kasan_check_write+0x14/0x20 [ 123.961970][ T1612] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 123.967785][ T1612] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 123.973339][ T1612] __mem_cgroup_charge+0x148/0x6d0 [ 123.978471][ T1612] shmem_add_to_page_cache+0x569/0xe10 [ 123.983940][ T1612] ? shmem_alloc_page+0x380/0x380 [ 123.988971][ T1612] ? _raw_spin_lock_irqsave+0x130/0x130 [ 123.994522][ T1612] ? find_lock_entry+0x4b/0x200 [ 123.999379][ T1612] shmem_getpage_gfp+0x907/0x20f0 [ 124.004412][ T1612] shmem_write_begin+0xce/0x1b0 [ 124.009267][ T1612] generic_perform_write+0x2ce/0x540 [ 124.014563][ T1612] ? grab_cache_page_write_begin+0xb0/0xb0 [ 124.020377][ T1612] ? file_remove_privs+0x590/0x590 [ 124.025520][ T1612] ? __kasan_check_write+0x14/0x20 [ 124.030664][ T1612] ? down_write+0xb2/0x120 [ 124.035121][ T1612] __generic_file_write_iter+0x24b/0x480 [ 124.040797][ T1612] ? generic_write_checks+0x3df/0x480 [ 124.046197][ T1612] generic_file_write_iter+0xa9/0x1d0 [ 124.051575][ T1612] __kernel_write+0x5a5/0x9d0 [ 124.056270][ T1612] ? vfs_read+0xa50/0xa50 [ 124.060614][ T1612] ? populate_vma_page_range+0xf0/0xf0 [ 124.066088][ T1612] ? __kasan_check_write+0x14/0x20 [ 124.071213][ T1612] dump_emit+0x255/0x380 [ 124.075467][ T1612] ? wait_for_dump_helpers+0x380/0x380 [ 124.080940][ T1612] ? dump_user_range+0x13b/0x1a0 [ 124.085887][ T1612] dump_user_range+0x6a/0x1a0 [ 124.090574][ T1612] elf_core_dump+0x27af/0x2c20 [ 124.095347][ T1612] ? load_elf_binary+0x2910/0x2910 [ 124.100463][ T1612] ? __fsnotify_parent+0x6db/0x7c0 [ 124.105591][ T1612] ? do_truncate+0x1c6/0x240 [ 124.110189][ T1612] ? putname+0xfe/0x150 [ 124.114353][ T1612] ? __kasan_check_read+0x11/0x20 [ 124.119391][ T1612] ? __ia32_sys_unshare+0x40/0x40 [ 124.124427][ T1612] do_coredump+0x1be6/0x2910 [ 124.129195][ T1612] ? simple_acl_create+0x1c0/0x1c0 [ 124.134333][ T1612] ? debug_smp_processor_id+0x17/0x20 [ 124.139730][ T1612] ? kmem_cache_free+0x100/0x2d0 [ 124.144690][ T1612] ? ____kasan_slab_free+0x130/0x160 [ 124.149992][ T1612] ? get_signal+0xbdb/0x1300 [ 124.154593][ T1612] ? kmem_cache_free+0x100/0x2d0 [ 124.159560][ T1612] get_signal+0xf4c/0x1300 [ 124.164010][ T1612] arch_do_signal_or_restart+0xe7/0x11b0 [ 124.169662][ T1612] ? force_sig_info_to_task+0x26d/0x2e0 [ 124.175225][ T1612] ? force_sig_fault+0xd7/0x130 [ 124.180090][ T1612] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 124.185743][ T1612] ? __bad_area_nosemaphore+0x410/0x410 [ 124.191302][ T1612] exit_to_user_mode_loop+0xa2/0xe0 [ 124.196514][ T1612] exit_to_user_mode_prepare+0x76/0xa0 [ 124.201995][ T1612] irqentry_exit_to_user_mode+0x9/0x10 [ 124.207466][ T1612] irqentry_exit+0x12/0x60 [ 124.211894][ T1612] exc_page_fault+0x67/0xc0 [ 124.216417][ T1612] ? asm_exc_page_fault+0x8/0x30 [ 124.221367][ T1612] asm_exc_page_fault+0x1e/0x30 [ 124.226230][ T1612] RIP: 0033:0x7f4dc1f38b27 [ 124.230661][ T1612] Code: e8 8e fa ff ff 89 f2 48 8d 3d c5 3e 1b 00 48 8d 35 be f8 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 124.250281][ T1612] RSP: 002b:00007f4dc0a9d120 EFLAGS: 00010202 [ 124.256450][ T1612] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f4dc2082e59 [ 124.264436][ T1612] RDX: 00007f4dc0a9d140 RSI: 00007f4dc0a9d270 RDI: 000000000000000b [ 124.272425][ T1612] RBP: 00007f4dc2118d6f R08: 0000000000000000 R09: 0000000000000000 [ 124.280415][ T1612] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 124.288407][ T1612] R13: 00007f4dc22fc128 R14: 00007f4dc22fc090 R15: 00007ffe49267598 [ 124.583222][ T1612] memory: usage 307200kB, limit 307200kB, failcnt 19667 [ 124.590223][ T1612] memory+swap: usage 423508kB, limit 9007199254740988kB, failcnt 0 [ 124.598172][ T1612] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 124.605047][ T1612] Memory cgroup stats for /syz3: [ 124.605146][ T1612] anon 1974272 [ 124.605146][ T1612] file 303857664 [ 124.605146][ T1612] kernel_stack 0 [ 124.605146][ T1612] percpu 0 [ 124.605146][ T1612] sock 0 [ 124.605146][ T1612] shmem 303722496 [ 124.605146][ T1612] file_mapped 0 [ 124.605146][ T1612] file_dirty 135168 [ 124.605146][ T1612] file_writeback 0 [ 124.605146][ T1612] anon_thp 0 [ 124.605146][ T1612] inactive_anon 312061952 [ 124.605146][ T1612] active_anon 2297856 [ 124.605146][ T1612] inactive_file 49152 [ 124.605146][ T1612] active_file 0 [ 124.605146][ T1612] unevictable 0 [ 124.605146][ T1612] slab_reclaimable 0 [ 124.605146][ T1612] slab_unreclaimable 0 [ 124.605146][ T1612] slab 0 [ 124.605146][ T1612] workingset_refault_anon 0 [ 124.605146][ T1612] workingset_refault_file 4125 [ 124.605146][ T1612] workingset_activate_anon 0 [ 124.605146][ T1612] workingset_activate_file 1650 [ 124.605146][ T1612] workingset_restore_anon 0 [ 124.605146][ T1612] workingset_restore_file 1122 [ 124.699028][ T1612] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.302,pid=1616,uid=0 [ 124.713817][ T1612] Memory cgroup out of memory: Killed process 1616 (syz.3.302) total-vm:90448kB, anon-rss:1360kB, file-rss:52628kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 124.731364][ T27] oom_reaper: reaped process 1616 (syz.3.302), now anon-rss:0kB, file-rss:53504kB, shmem-rss:0kB [ 124.741996][ T1600] syz.3.302 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 124.752150][ T1600] CPU: 0 PID: 1600 Comm: syz.3.302 Tainted: G B W syzkaller #0 [ 124.760837][ T1600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 124.770913][ T1600] Call Trace: [ 124.774228][ T1600] __dump_stack+0x21/0x24 [ 124.778579][ T1600] dump_stack_lvl+0x1a7/0x208 [ 124.783272][ T1600] ? show_regs_print_info+0x18/0x18 [ 124.788503][ T1600] ? ___ratelimit+0x421/0x5a0 [ 124.793199][ T1600] ? _raw_spin_lock+0x94/0xf0 [ 124.797871][ T1600] dump_stack+0x15/0x1c [ 124.802031][ T1600] dump_header+0xd9/0x650 [ 124.806369][ T1600] oom_kill_process+0x1fa/0x2c0 [ 124.811215][ T1600] out_of_memory+0x879/0xce0 [ 124.815806][ T1600] ? unregister_oom_notifier+0x20/0x20 [ 124.821270][ T1600] ? mutex_lock_killable+0xdf/0xf0 [ 124.826375][ T1600] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 124.832869][ T1600] ? __alloc_pages_nodemask+0x29a/0x640 [ 124.838417][ T1600] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 124.843971][ T1600] ? mem_cgroup_oom_trylock+0x340/0x340 [ 124.849611][ T1600] ? _raw_spin_trylock_bh+0x150/0x150 [ 124.854980][ T1600] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 124.860524][ T1600] try_charge+0xfa9/0x1580 [ 124.864936][ T1600] ? __memcg_kmem_charge+0x150/0x150 [ 124.870219][ T1600] ? __kasan_check_write+0x14/0x20 [ 124.875322][ T1600] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 124.881122][ T1600] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 124.886666][ T1600] __mem_cgroup_charge+0x148/0x6d0 [ 124.891773][ T1600] shmem_add_to_page_cache+0x569/0xe10 [ 124.897231][ T1600] ? shmem_alloc_page+0x380/0x380 [ 124.902256][ T1600] ? _raw_spin_lock_irqsave+0x130/0x130 [ 124.907797][ T1600] ? find_lock_entry+0x4b/0x200 [ 124.912639][ T1600] shmem_getpage_gfp+0x907/0x20f0 [ 124.917665][ T1600] shmem_write_begin+0xce/0x1b0 [ 124.922511][ T1600] generic_perform_write+0x2ce/0x540 [ 124.927789][ T1600] ? atime_needs_update+0x5b0/0x5b0 [ 124.932988][ T1600] ? grab_cache_page_write_begin+0xb0/0xb0 [ 124.938793][ T1600] ? file_remove_privs+0x590/0x590 [ 124.943919][ T1600] ? __kasan_check_write+0x14/0x20 [ 124.949037][ T1600] ? down_write+0xb2/0x120 [ 124.953459][ T1600] __generic_file_write_iter+0x24b/0x480 [ 124.959086][ T1600] ? generic_write_checks+0x3df/0x480 [ 124.964463][ T1600] generic_file_write_iter+0xa9/0x1d0 [ 124.969836][ T1600] __kernel_write+0x5a5/0x9d0 [ 124.974537][ T1600] ? vfs_read+0xa50/0xa50 [ 124.978865][ T1600] ? populate_vma_page_range+0xf0/0xf0 [ 124.984323][ T1600] ? __kasan_check_write+0x14/0x20 [ 124.989447][ T1600] dump_emit+0x255/0x380 [ 124.993688][ T1600] ? wait_for_dump_helpers+0x380/0x380 [ 124.999142][ T1600] dump_user_range+0x6a/0x1a0 [ 125.003816][ T1600] elf_core_dump+0x27af/0x2c20 [ 125.008578][ T1600] ? load_elf_binary+0x2910/0x2910 [ 125.013683][ T1600] ? __fsnotify_parent+0x6db/0x7c0 [ 125.018913][ T1600] ? do_truncate+0x1c6/0x240 [ 125.023499][ T1600] ? putname+0xfe/0x150 [ 125.027648][ T1600] ? __kasan_check_read+0x11/0x20 [ 125.032666][ T1600] ? __ia32_sys_unshare+0x40/0x40 [ 125.037686][ T1600] do_coredump+0x1be6/0x2910 [ 125.042362][ T1600] ? simple_acl_create+0x1c0/0x1c0 [ 125.047465][ T1600] ? debug_smp_processor_id+0x17/0x20 [ 125.052829][ T1600] ? kmem_cache_free+0x100/0x2d0 [ 125.057763][ T1600] ? ____kasan_slab_free+0x130/0x160 [ 125.063046][ T1600] ? get_signal+0xbdb/0x1300 [ 125.067630][ T1600] ? kmem_cache_free+0x100/0x2d0 [ 125.072562][ T1600] get_signal+0xf4c/0x1300 [ 125.077011][ T1600] arch_do_signal_or_restart+0xe7/0x11b0 [ 125.082660][ T1600] ? force_sig_info_to_task+0x26d/0x2e0 [ 125.088201][ T1600] ? force_sig_fault+0xd7/0x130 [ 125.093048][ T1600] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 125.098676][ T1600] ? __bad_area_nosemaphore+0x410/0x410 [ 125.104238][ T1600] ? irqentry_exit+0x56/0x60 [ 125.108827][ T1600] exit_to_user_mode_loop+0xa2/0xe0 [ 125.114057][ T1600] exit_to_user_mode_prepare+0x76/0xa0 [ 125.119544][ T1600] irqentry_exit_to_user_mode+0x9/0x10 [ 125.125013][ T1600] irqentry_exit+0x12/0x60 [ 125.129632][ T1600] exc_page_fault+0x67/0xc0 [ 125.134133][ T1600] ? asm_exc_page_fault+0x8/0x30 [ 125.139067][ T1600] asm_exc_page_fault+0x1e/0x30 [ 125.143952][ T1600] RIP: 0033:0x7f4dc1f38b27 [ 125.148376][ T1600] Code: e8 8e fa ff ff 89 f2 48 8d 3d c5 3e 1b 00 48 8d 35 be f8 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 125.168005][ T1600] RSP: 002b:00007f4dc0a9d120 EFLAGS: 00010202 [ 125.174084][ T1600] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f4dc2082e59 [ 125.182055][ T1600] RDX: 00007f4dc0a9d140 RSI: 00007f4dc0a9d270 RDI: 000000000000000b [ 125.190036][ T1600] RBP: 00007f4dc2118d6f R08: 0000000000000000 R09: 0000000000000000 [ 125.198006][ T1600] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 125.205975][ T1600] R13: 00007f4dc22fc128 R14: 00007f4dc22fc090 R15: 00007ffe49267598 [ 125.214425][ T1600] memory: usage 307200kB, limit 307200kB, failcnt 19752 [ 125.221382][ T1600] memory+swap: usage 422224kB, limit 9007199254740988kB, failcnt 0 [ 125.229354][ T1600] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 125.236234][ T1600] Memory cgroup stats for /syz3: [ 125.236363][ T1600] anon 1839104 [ 125.236363][ T1600] file 303992832 [ 125.236363][ T1600] kernel_stack 0 [ 125.236363][ T1600] percpu 0 [ 125.236363][ T1600] sock 0 [ 125.236363][ T1600] shmem 303992832 [ 125.236363][ T1600] file_mapped 0 [ 125.236363][ T1600] file_dirty 135168 [ 125.236363][ T1600] file_writeback 0 [ 125.236363][ T1600] anon_thp 0 [ 125.236363][ T1600] inactive_anon 311607296 [ 125.236363][ T1600] active_anon 2297856 [ 125.236363][ T1600] inactive_file 49152 [ 125.236363][ T1600] active_file 0 [ 125.236363][ T1600] unevictable 0 [ 125.236363][ T1600] slab_reclaimable 0 [ 125.236363][ T1600] slab_unreclaimable 0 [ 125.236363][ T1600] slab 0 [ 125.236363][ T1600] workingset_refault_anon 0 [ 125.236363][ T1600] workingset_refault_file 4125 [ 125.236363][ T1600] workingset_activate_anon 0 [ 125.236363][ T1600] workingset_activate_file 1650 [ 125.236363][ T1600] workingset_restore_anon 0 [ 125.236363][ T1600] workingset_restore_file 1122 [ 125.329824][ T1600] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.302,pid=1602,uid=0 [ 125.344666][ T1600] Memory cgroup out of memory: Killed process 1602 (syz.3.302) total-vm:90316kB, anon-rss:1300kB, file-rss:53560kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 125.362678][ T27] oom_reaper: reaped process 1602 (syz.3.302), now anon-rss:0kB, file-rss:53504kB, shmem-rss:0kB [ 125.904636][ T1609] syz.3.302 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 125.964608][ T1609] CPU: 0 PID: 1609 Comm: syz.3.302 Tainted: G B W syzkaller #0 [ 125.973323][ T1609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 125.983400][ T1609] Call Trace: [ 125.986711][ T1609] __dump_stack+0x21/0x24 [ 125.991060][ T1609] dump_stack_lvl+0x1a7/0x208 [ 125.995764][ T1609] ? show_regs_print_info+0x18/0x18 [ 126.000980][ T1609] ? ___ratelimit+0x421/0x5a0 [ 126.005697][ T1609] ? _raw_spin_lock+0x94/0xf0 [ 126.010491][ T1609] dump_stack+0x15/0x1c [ 126.014666][ T1609] dump_header+0xd9/0x650 [ 126.019029][ T1609] oom_kill_process+0x1fa/0x2c0 [ 126.023904][ T1609] out_of_memory+0x879/0xce0 [ 126.028517][ T1609] ? unregister_oom_notifier+0x20/0x20 [ 126.033989][ T1609] ? mutex_lock_killable+0x92/0xf0 [ 126.039122][ T1609] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 126.045645][ T1609] ? __alloc_pages_nodemask+0x29a/0x640 [ 126.051218][ T1609] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 126.056787][ T1609] ? mem_cgroup_oom_trylock+0x340/0x340 [ 126.062364][ T1609] ? _raw_spin_trylock_bh+0x150/0x150 [ 126.067765][ T1609] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 126.073348][ T1609] try_charge+0xfa9/0x1580 [ 126.077900][ T1609] ? __memcg_kmem_charge+0x150/0x150 [ 126.083235][ T1609] ? __kasan_check_write+0x14/0x20 [ 126.088379][ T1609] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 126.094218][ T1609] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 126.099808][ T1609] __mem_cgroup_charge+0x148/0x6d0 [ 126.104966][ T1609] shmem_add_to_page_cache+0x569/0xe10 [ 126.110543][ T1609] ? shmem_alloc_page+0x380/0x380 [ 126.115605][ T1609] ? _raw_spin_lock_irqsave+0x130/0x130 [ 126.121181][ T1609] ? find_lock_entry+0x4b/0x200 [ 126.126060][ T1609] shmem_getpage_gfp+0x907/0x20f0 [ 126.131121][ T1609] shmem_write_begin+0xce/0x1b0 [ 126.136109][ T1609] generic_perform_write+0x2ce/0x540 [ 126.141420][ T1609] ? atime_needs_update+0x5b0/0x5b0 [ 126.146650][ T1609] ? grab_cache_page_write_begin+0xb0/0xb0 [ 126.152485][ T1609] ? file_remove_privs+0x590/0x590 [ 126.157646][ T1609] ? __kasan_check_write+0x14/0x20 [ 126.162779][ T1609] ? down_write+0xb2/0x120 [ 126.167234][ T1609] __generic_file_write_iter+0x24b/0x480 [ 126.172897][ T1609] ? generic_write_checks+0x3df/0x480 [ 126.178295][ T1609] generic_file_write_iter+0xa9/0x1d0 [ 126.183689][ T1609] __kernel_write+0x5a5/0x9d0 [ 126.188387][ T1609] ? vfs_read+0xa50/0xa50 [ 126.192765][ T1609] ? populate_vma_page_range+0xf0/0xf0 [ 126.198262][ T1609] ? __kasan_check_write+0x14/0x20 [ 126.203408][ T1609] dump_emit+0x255/0x380 [ 126.207679][ T1609] ? wait_for_dump_helpers+0x380/0x380 [ 126.213168][ T1609] dump_user_range+0x6a/0x1a0 [ 126.217879][ T1609] elf_core_dump+0x27af/0x2c20 [ 126.222669][ T1609] ? load_elf_binary+0x2910/0x2910 [ 126.227813][ T1609] ? __fsnotify_parent+0x6db/0x7c0 [ 126.232962][ T1609] ? do_truncate+0x1c6/0x240 [ 126.237569][ T1609] ? putname+0xfe/0x150 [ 126.241751][ T1609] ? __kasan_check_read+0x11/0x20 [ 126.246887][ T1609] ? __ia32_sys_unshare+0x40/0x40 [ 126.251934][ T1609] do_coredump+0x1be6/0x2910 [ 126.256555][ T1609] ? simple_acl_create+0x1c0/0x1c0 [ 126.261688][ T1609] ? debug_smp_processor_id+0x17/0x20 [ 126.267081][ T1609] ? kmem_cache_free+0x100/0x2d0 [ 126.272037][ T1609] ? ____kasan_slab_free+0x130/0x160 [ 126.277333][ T1609] ? get_signal+0xbdb/0x1300 [ 126.281917][ T1609] ? kmem_cache_free+0x100/0x2d0 [ 126.286855][ T1609] get_signal+0xf4c/0x1300 [ 126.291279][ T1609] arch_do_signal_or_restart+0xe7/0x11b0 [ 126.296912][ T1609] ? force_sig_info_to_task+0x26d/0x2e0 [ 126.302457][ T1609] ? force_sig_fault+0xd7/0x130 [ 126.307327][ T1609] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 126.312956][ T1609] ? __bad_area_nosemaphore+0x410/0x410 [ 126.318500][ T1609] exit_to_user_mode_loop+0xa2/0xe0 [ 126.323691][ T1609] exit_to_user_mode_prepare+0x76/0xa0 [ 126.329146][ T1609] irqentry_exit_to_user_mode+0x9/0x10 [ 126.334620][ T1609] irqentry_exit+0x12/0x60 [ 126.339053][ T1609] exc_page_fault+0x67/0xc0 [ 126.343582][ T1609] ? asm_exc_page_fault+0x8/0x30 [ 126.348524][ T1609] asm_exc_page_fault+0x1e/0x30 [ 126.353389][ T1609] RIP: 0033:0x7f4dc1f38b27 [ 126.357807][ T1609] Code: e8 8e fa ff ff 89 f2 48 8d 3d c5 3e 1b 00 48 8d 35 be f8 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 126.377422][ T1609] RSP: 002b:00007f4dc0a9d120 EFLAGS: 00010202 [ 126.383501][ T1609] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f4dc2082e59 [ 126.391481][ T1609] RDX: 00007f4dc0a9d140 RSI: 00007f4dc0a9d270 RDI: 000000000000000b [ 126.399450][ T1609] RBP: 00007f4dc2118d6f R08: 0000000000000000 R09: 0000000000000000 [ 126.407545][ T1609] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 126.415514][ T1609] R13: 00007f4dc22fc128 R14: 00007f4dc22fc090 R15: 00007ffe49267598 [ 126.423786][ T1609] memory: usage 307200kB, limit 307200kB, failcnt 23618 [ 126.431010][ T1609] memory+swap: usage 426700kB, limit 9007199254740988kB, failcnt 0 [ 126.438924][ T1609] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 126.445823][ T1609] Memory cgroup stats for /syz3: [ 126.445977][ T1609] anon 1028096 [ 126.445977][ T1609] file 307777536 [ 126.445977][ T1609] kernel_stack 0 [ 126.445977][ T1609] percpu 0 [ 126.445977][ T1609] sock 0