last executing test programs: 3.029727155s ago: executing program 3: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000c40)={{0x12, 0x1, 0x0, 0xfe, 0xeb, 0x4a, 0x8, 0xaf0, 0x8201, 0x348e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe9, 0x0, 0x1, 0x39, 0xc6, 0x2b, 0x0, [], [{{0x9, 0x5, 0x7}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x5f, 0x8c, 0x51, 0x0, [], [{{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) 2.915457723s ago: executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='rootcontext=\"o']) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00') r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'wg2\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000001100)={0x0}}, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a3, &(0x7f0000000200)='bridge0\x00') add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 2.392164525s ago: executing program 1: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 2.365419839s ago: executing program 1: setuid(0xee01) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) 2.356718251s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e85"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/handlers\x00', 0x0, 0x0) lseek(r4, 0xfffffffffffffff5, 0x1) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000100)=""/31, 0x1f}], 0x1) 2.048491079s ago: executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34010000170001000000000000000000000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000ac1e00010000000000000000000000000000000000000000000000000000000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aaac1414aa00000000000000000000000000000000000000000200800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff0000000000000000000000000000000000000000000c0015"], 0x134}}, 0x0) 2.032934822s ago: executing program 4: setuid(0xee01) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) 2.022422363s ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup(r0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0xfffffffffffffff8) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) 1.84964942s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f0000000040)) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') preadv(r4, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/95, 0x5f}], 0x1, 0x75, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x10000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x170, 0x1170, 0x1170, 0x0, 0x1170, 0x398, 0x1398, 0x1398, 0x398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@ipv6={@loopback, @mcast1, [], [], 'bridge_slave_1\x00', 'wg2\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x2}, 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCXONC(r6, 0x540a, 0x1) recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) 1.748471246s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) 1.711947502s ago: executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='rootcontext=\"o']) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00') r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'wg2\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000001100)={0x0}}, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a3, &(0x7f0000000200)='bridge0\x00') add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 1.664243589s ago: executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="200125"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 1.650173352s ago: executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000740), &(0x7f0000010600)='./bus\x00', 0x2000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="6a71666d743d76667376312c66617374626f6f742c6e6f646973636172642c6163746976655f6c6f67733d322c7573726a71756f74613d6e6c3830323131002c6a71666d743d76667376302c66617374626f6f742c007b5bcca987fc947f7cfdcc616cb9cfb939d67262853f77caa7a476e47962ab00b6a5d67b78a3148c455dc1cece7e72203d832fb0b5879cfd71c07029a845f739fcbb16526600f9167be31a22c413ff9f5c2d"], 0x11, 0x1058f, &(0x7f0000010680)="$eJzs3M1rI2UcB/Bftu6r61pkX/TkgAgNmNC03aIgUnUXXbBL8eXgSdNkGrKbZEqTvrhnPemf4FUQ8ebf4MV/Y/EgeBK8rSiZmcpW96A226zbzwem32eePPPL84RcnkyZAI6t2eTXXypxIc5GxExEnI/I25XyyK0U8WxEPB8RJ+47KmX/nx2nIuJcRFwYFy9qVsqXln+7e++r5268+vk3d6uNn77+cnqrBqbtxYjobxbt3X6RWafIW2V/c6ebZ39pp8zihf7t8jwrcjddzyvsNvfHNfNc7BTjs83t4Tg3es3WODvdjbx/c1C84XCns18nv+BWcys/b6freXaHWZ6dO8W89sq8MxwVddplvU/y8jEa7WfRn+6lxXo2b+fZGozK/qJu1k73xrlTZvl20cp67Xwe6//5Y37kvdMdbO8lO+nWsJsNkqv1xsv1xnKtsZW101G6VGv228tLyVynNx5WG6XN/konyzq9tN7K+tVkrtNq1RqNZO5aut5tDpJGo75Yn69drZatl5K3bn6Q9NrJ3Djf6A62R93eMNnItpLiimqyUF98pZq80EjeW11L1t69fn117f2Prn148/XVG2+Wg/42rWRuYX5hodaYry00qtZ/GJXDXc5x5wsE8K/Z/wPTYP9v/x/2v8d+/bZvHIovEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAsfXjye/ezhuzxfmTZf9TZdczEXElIi5HxKWI+P0BZuLUgZoXI6JSth80/uRf5vB9JfIK42tOl8e5iFgpj3tPP+xPAQAAAB5f3/7w6WcRM+Nm/ue1aU+Io1T+aHNmUvXyn3yemFS1i3mxvQlVu7RfciIuR8TJ2Z8nVO1KRJw4//GEqv0jMwfizH1RKeLEUc4GAAA4Ggd3AhPbvQEAAPDI+WLaE2A68vu15f/il/eCTxdR3hA8e+AMAAAA+B+qTHsCAAAAwEOX7/89/w8AAAAeb8Xz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD/YuZvbxIEoDuAPWC/slxat+GiF02qPHChiS8gxBSTd5EYNkRB1kFtKiCDCnkhxxCGSxzhBv59kZmzBX8/cnscaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaNNDsV7ebW9um+bsD83kuRsAAADglF2xXpaTcXX+I13/lS79iYh5RMwiYhoRp3r3QXytZU4iopfmp75fvKnhPqJMOP5mmI7vEfEvHU+/2/4XAAAA4HJtN4tVxOA4LT/+dl0Q55Qe2oxy5ZWPfL7kSpuUYdeZ0qYvkVnMIqIYP2ZKm0dE/+f/TGnvMqgNo1dDrxr656wGAAA4j3onkK17AwAA4MO56roAulGu16Z38dNa8LAa0oLgt9oZAAAA8An1ui4AAAAAaF3Z/9v/DwAAAC5btf8fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbdoV6+V2s1g1zdkfmslzNwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwzP68o0AIhEEY7F3fdxq8/7GkQVNTkyoQPv7GYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgze/+8n9iapxJ5l4bS88jydqpsXVq7J0bR38YX78GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYn/uTiAEgiAM9p3/OS3mH5Y0aAwiVMHCxwzzsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAX/e6X/xNT40wyd9pYOh5J1q4aW1eNvQeNowfj7d8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdife9uEgTCOw68viRK3yQjprQRmoKFCMAIfEpIlz8AALERDRWuxCKwAEpxrOlPwPM3/V1xxLwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALymy8MXbxFRROoyRRpvfk7vEfERadu2o89bFrvzsfm652x/mOT8julvGRFlFH2cAwDQu6rbHKt1vfzL+593kHeYt5o39eKZnwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODKzh2rNhWFAQA+SZpodXK0gggOutjYxGqELA6F7oKgW2hjKaYqaYa2dOkTiE6uvoLd9BV8AcFBCw4OHRRcBFGS3KQnGCRFuDfU74P/3j93OPecDIH//ucGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI7lcC+cHeS5EMLczFHe9f7r7sq489tnH+YG8eXOm4vxmN0hiiGEh+ut5vUU1zLtNrd3HjVarWZbIpFIhknWv0wAAJw0xSS6df2n4v5y91quHsKvV6P1/5UoD3+p/z+/PH9hED+33nXie8X1/0JqK5x+5c7G0/Lm9s619Y3GWnOt+bharSzeXLxx+1al3HtWUvbEBAAAgH9TSiKu//P1P/v/Z6I8TFj/31t6cD++V0H9P9ZR0y/rmQAAAPzfzl36/i035nquVApbjU6nvdA/Dj9X+scMpnpsp5KI6/9CPetZAQAAAGk43MuN9P9XozxM2P+ff717EI9ZCCHMJv3/+ZUnrdX0ljPV0nidOOs1AgAAkK3ZJOL+f7G3/z8/3PKQDyFcvdzPk78BnKj+//ji7shL6/H+/2p6S5xK+Vr/++idayHM1LKeEQAAACfZ6SS6xf5BcX+5/eP5Usn+fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+M2OHaM0EERhAN7sZrUSA1Zq5QVEO6uAhSA2HkIUBE8ggngAsbX0DpbeIbWCjYVlCm8gb3ZHJU3AYlfJ98HkPcKQeZk0+RcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOaa7n/3VbyMmr5s33v+uDqJ+jJTw/v9+mas6AddDv0PDfb6ngAAAIBFUOV8XxTFW/14GLUcp/xf5z2R+R9Wmj7n+dncn+vT3etGzv/Xx1uXXweNmnPiQ8/OL053OvuGf9/q3B3DdPPp2UuVfpDy6GZtWqf7HNxOJgdLqV3uYloA4De2c22b/H8o6m6fgwGwMIbtKn7k/2rc70wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXfgMAAD//6DJYgQ=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0xffe6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x43451) sendfile(r1, r0, 0x0, 0x9000000) 1.257932043s ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 1.133329093s ago: executing program 1: bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 1.025749569s ago: executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0xcf, 0xe2, 0x17, 0x8, 0x17cc, 0x1000, 0xdd3e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7a, 0x8b, 0x58}}]}}]}}, 0x0) 896.51132ms ago: executing program 0: r0 = add_key$fscrypt_v1(0x0, &(0x7f0000000100), &(0x7f0000000040)={0x0, "f713ce12c1fe3c9a2cd6b337dad1ce400cd698adfc4a6bee479ccd9b275e51e4121209972d25880c4f43648580c5c3893b826beb9a17136643db3077a0b7cf3f"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, &(0x7f0000000780)="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") r1 = eventfd2(0x0, 0x80800) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="1f49b320ce08a98e", 0x8}, {&(0x7f0000000140)="eedc4277530031e7", 0x8}], 0x2) keyctl$update(0x4, r0, 0x0, 0x0) keyctl$setperm(0x5, r0, 0x100) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) mlockall(0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 847.624578ms ago: executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x4c, 0x12, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x4c}}, 0x0) 841.836578ms ago: executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) r2 = socket(0x10, 0x400000000080803, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x8}}) 835.498649ms ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) 828.102151ms ago: executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x30a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0xa, "fd30d772f8bd94"}}, &(0x7f0000000540)={0x0, 0x3, 0x9d, @string={0x9d, 0x3, "face8132d0b5a21e3e5d5aefbd76a9647ce1a9183898566905ea1e03ab4f40275ca39b245e9b399f3f2046f90f28f6ae07d0c07f595819fce907bec731817b11f78e5f5f72b12eb7a16339de3f623a408a456d3ab30f91b68004a01d89d71cd214cfba948d8379504720e40cdf1e4d855e52e2f3e2501d4a54af848b458f3882a5c615d0b94940548ba56a380b58b6d5730d54ff7da46284e9e81a"}}, 0x0, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9}}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="80030000", @ANYRES16=r3, @ANYBLOB="010000000000000000b8010000002400030000000000000000014d00000000000000000000000000000000000000000000000800070000000000300308807000008008000a000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002000000e000000200000000000000000600050005000000240002001be91436dd8ca7892e939141f2a43c9dfdd36bcb6ddaf7e02c6f81ed19e92c4cb002008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c06000500000000005c0209801c000080060001000200000008000200ac1e0101050003000100000094000080060001000a00000014000200fc0000000000000000000000000000010500030002000000060001000a00000014000200fc0100000000000000000000000000010500030000000000060001000200000008000200ac1e01010500030000000000060001000200000008000200e00000020500030003000000060001000200000008000200e000000105000300020000001c000080060001000200000008000200ac1414aa0500030003000000f4000080060001000200000008000200ac1414bb0500030000000000060001000200000008000200ac1414290500030002000000060001000a00000014000200fc0000000000000000000000000000010500030003000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000200000008000200e00000020500030014000000060001000a00000014000200fe8000000000000000000000000000110500030000000000060001000a00000014000200ff02000000000000000000000000000105000300010000000600010002000000080002006401010005000300010000007c000080060001000200000008000200ac1414bb0500030001000000060001000200000008000200e00000010500030001000000060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000a00000014000200fe88000000000000000000000000010105000300000000001c0000800600010002000000080002006401010105000300000000000400020006bebec99fa2164c5eadc7719777616a2b0f93b3120ec53f2e7113348f092f330c00008008000a0001000000080005000100000008000100", @ANYRES32=r5], 0x380}}, 0x0) 743.947834ms ago: executing program 3: syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="2c6673636f6e746578743d22799ebefeb993d1449e010b458ec572076917e029ccd8f82b8a0e06ae1230db2b691ca5764e04b04bc64c1949f07e5f61f6b770fc504caf0d0af04a641bc538578a5f67ac03c8554ebcccbee10e8ee699baf9946f0274bee5151cbe0ede3ae2"], 0x0, 0x0, 0x0) 709.858779ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f0000000040)) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') preadv(r4, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/95, 0x5f}], 0x1, 0x75, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x10000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x170, 0x1170, 0x1170, 0x0, 0x1170, 0x398, 0x1398, 0x1398, 0x398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@ipv6={@loopback, @mcast1, [], [], 'bridge_slave_1\x00', 'wg2\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x2}, 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCXONC(r6, 0x540a, 0x1) recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) 580.986669ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_unlink_exit\x00', r8}, 0x10) unlink(&(0x7f0000000000)='./cgroup\x00') r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r10 = dup(r9) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f50b02"]) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000004c0)=r1}, 0x20) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x10, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x50, &(0x7f0000000280)=""/80, 0x41100, 0x8, '\x00', r4, 0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x1, 0x9d26, 0x2}, 0x10, 0x0, r10, 0x1, &(0x7f0000000580)=[r3, r3, r11, r3, r12, r0], &(0x7f00000005c0)=[{0x0, 0x5, 0x1, 0x4}], 0x10, 0x5}, 0x90) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000100), 0x200df000, r3, 0x0, 0xf00}, 0x38) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r13, 0x29, 0x20, &(0x7f0000000040)="0bbb268dd6f7a80400000000000000000000210d0000aaa8fa017242ba9380d410000000000000002900000003000000", 0x30) syz_read_part_table(0x106a, &(0x7f0000002100)="$eJzszzFKA1EQBuD/7S67q5WVtUfYM3gHWxH0HtrZiCewFUIukhvkKOnCCw+SIhdIUnxfMTA/wwwTruxhyluGlLx/90lKavlK6r5OSbqkDH9t7LGVp8xp8V12n8nrqmXPfRmzOW0bMydT+iG/teTj/uxUl2T5L8ux/dm+rC/6KgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcqEMAAAD//wQ3D+0=") 519.662839ms ago: executing program 0: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x18502, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000000980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) ftruncate(r0, 0x0) 270.012848ms ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 268.420088ms ago: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34010000170001000000000000000000000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000ac1e00010000000000000000000000000000000000000000000000000000000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aaac1414aa00000000000000000000000000000000000000000200800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff0000000000000000000000000000000000000000000c0015"], 0x134}}, 0x0) 146.460367ms ago: executing program 0: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000dd0000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef8, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x10, &(0x7f0000000500)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x9000}, 0x4) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000580)={0xaa, 0xc}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000}, 0x1c) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000008c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000006000000181200", @ANYRES32=r8, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', r9}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x20, &(0x7f0000000740)={&(0x7f0000000680)=""/161, 0xa1, 0x0, &(0x7f00000007c0)=""/181, 0xb5}}, 0x10) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r10, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev}}}], 0x20}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x3c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}]}, 0x3c}}, 0x4821) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0xffff}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x44}}, 0x0) 16.100688ms ago: executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='rootcontext=\"o']) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00') r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'wg2\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000001100)={0x0}}, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a3, &(0x7f0000000200)='bridge0\x00') add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 0s ago: executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x4c, 0x12, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x4c}}, 0x0) kernel console output (not intermixed with test programs): veth0_vlan: link becomes ready [ 56.499696][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.513058][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.550086][ T23] audit: type=1326 audit(1718635808.299:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1819 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd53de31f29 code=0x0 [ 56.616910][ T375] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 56.728612][ T1830] FAT-fs (loop3): Directory bread(block 64) failed [ 56.735038][ T1830] FAT-fs (loop3): Directory bread(block 65) failed [ 56.741881][ T1830] FAT-fs (loop3): Directory bread(block 66) failed [ 56.748247][ T1830] FAT-fs (loop3): Directory bread(block 67) failed [ 56.754588][ T1830] FAT-fs (loop3): Directory bread(block 68) failed [ 56.760911][ T1830] FAT-fs (loop3): Directory bread(block 69) failed [ 56.767279][ T1830] FAT-fs (loop3): Directory bread(block 70) failed [ 56.773548][ T1830] FAT-fs (loop3): Directory bread(block 71) failed [ 56.780268][ T1830] FAT-fs (loop3): Directory bread(block 72) failed [ 56.786626][ T1830] FAT-fs (loop3): Directory bread(block 73) failed [ 56.866862][ T375] usb 5-1: Using ep0 maxpacket: 16 [ 56.916877][ T497] usbhid 3-1:0.0: can't add hid device: -71 [ 56.922864][ T497] usbhid: probe of 3-1:0.0 failed with error -71 [ 56.941515][ T497] usb 3-1: USB disconnect, device number 7 [ 57.067076][ T375] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1023 [ 57.113657][ T375] usb 5-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 57.182310][ T1841] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 57.191479][ T375] usb 5-1: config 1 interface 0 has no altsetting 0 [ 57.237325][ T395] device bridge_slave_1 left promiscuous mode [ 57.243334][ T395] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.254060][ T395] device bridge_slave_0 left promiscuous mode [ 57.260209][ T395] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.268441][ T395] device bridge_slave_1 left promiscuous mode [ 57.274431][ T395] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.281482][ T395] device bridge_slave_0 left promiscuous mode [ 57.287659][ T395] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.383147][ T375] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 57.392486][ T375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.400842][ T375] usb 5-1: Product: syz [ 57.405252][ T375] usb 5-1: Manufacturer: ä€ [ 57.409818][ T375] usb 5-1: SerialNumber: syz [ 57.416045][ T599] print_req_error: 320 callbacks suppressed [ 57.416058][ T599] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 57.416335][ T421] blk_update_request: I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 57.430223][ T599] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 57.435524][ T421] blk_update_request: I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 57.466192][ T1817] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 57.519253][ T1817] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 57.594687][ T599] buffer_io_error: 301 callbacks suppressed [ 57.594718][ T599] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 57.622732][ T421] Buffer I/O error on dev loop0p4, logical block 1, async page read [ 57.638006][ T599] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 57.649910][ T599] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 57.658829][ T599] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 57.669622][ T599] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 57.677543][ T599] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 57.716929][ T599] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 57.933138][ T1864] incfs: Backing dir is not set, filesystem can't be mounted. [ 57.940652][ T1864] incfs: mount failed -2 [ 57.990688][ T599] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.017625][ T599] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 58.098222][ T375] usb 5-1: USB disconnect, device number 7 [ 58.134589][ T421] blk_update_request: I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 58.153897][ T421] blk_update_request: I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.164733][ T421] Buffer I/O error on dev loop0p4, logical block 1, async page read [ 58.211162][ T599] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 58.238034][ T599] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 58.258336][ T599] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 58.740353][ T1887] mmap: syz-executor.0 (1887) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 58.803904][ T1905] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,nobarrier,nolazytime,,errors=continue [ 58.818504][ T1905] ext4 filesystem being mounted at /root/syzkaller-testdir140609325/syzkaller.lseCTs/13/file0 supports timestamps until 2038 (0x7fffffff) [ 59.044377][ T23] audit: type=1400 audit(1718635810.789:281): avc: denied { read } for pid=1903 comm="syz-executor.3" name="vga_arbiter" dev="devtmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 59.074399][ T23] audit: type=1400 audit(1718635810.819:282): avc: denied { open } for pid=1903 comm="syz-executor.3" path="/dev/vga_arbiter" dev="devtmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 59.496001][ T23] audit: type=1400 audit(1718635811.239:283): avc: denied { create } for pid=1926 comm="syz-executor.2" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 59.572509][ T23] audit: type=1400 audit(1718635811.279:284): avc: denied { associate } for pid=1926 comm="syz-executor.2" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 59.859744][ T1940] EXT4-fs error (device loop2): ext4_orphan_get:1260: comm syz-executor.2: bad orphan inode 8192 [ 59.897631][ T1940] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 59.942958][ T23] audit: type=1400 audit(1718635811.669:285): avc: denied { setopt } for pid=1932 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.061749][ T1943] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 60.109704][ T1943] ext4 filesystem being mounted at /root/syzkaller-testdir3371224176/syzkaller.NwvDKx/5/file0 supports timestamps until 2038 (0x7fffffff) [ 60.143607][ T23] audit: type=1400 audit(1718635811.869:286): avc: denied { ioctl } for pid=1937 comm="syz-executor.2" path="socket:[23171]" dev="sockfs" ino=23171 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.176151][ T1943] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 60.186246][ T1943] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 60.202069][ T23] audit: type=1400 audit(1718635811.949:287): avc: denied { rmdir } for pid=1942 comm="syz-executor.0" name="file0" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 60.330402][ T1951] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,nobarrier,nolazytime,,errors=continue [ 60.344680][ T1951] ext4 filesystem being mounted at /root/syzkaller-testdir70711036/syzkaller.9io14s/19/file0 supports timestamps until 2038 (0x7fffffff) [ 60.362272][ T1955] loop2: p1 < > p4 [ 60.369401][ T1955] loop2: p4 size 8388608 extends beyond EOD, truncated [ 60.855152][ T23] audit: type=1400 audit(1718635812.599:288): avc: denied { connect } for pid=1977 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.875896][ T23] audit: type=1400 audit(1718635812.599:289): avc: denied { shutdown } for pid=1977 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.903092][ T1982] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.909948][ T1982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.956078][ T369] udevd[369]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 60.966564][ T599] udevd[599]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 61.070412][ T1992] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 61.091040][ T1992] ext4 filesystem being mounted at /root/syzkaller-testdir804743682/syzkaller.7rOzpj/35/file0 supports timestamps until 2038 (0x7fffffff) [ 61.135417][ T1992] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 61.147435][ T1992] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 61.164727][ T2002] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,nobarrier,nolazytime,,errors=continue [ 61.187328][ T2002] ext4 filesystem being mounted at /root/syzkaller-testdir70711036/syzkaller.9io14s/24/file0 supports timestamps until 2038 (0x7fffffff) [ 61.325628][ T2012] FAT-fs (loop2): Directory bread(block 64) failed [ 61.356833][ T2012] FAT-fs (loop2): Directory bread(block 65) failed [ 61.395357][ T2012] FAT-fs (loop2): Directory bread(block 66) failed [ 61.405789][ T2012] FAT-fs (loop2): Directory bread(block 67) failed [ 61.412269][ T2012] FAT-fs (loop2): Directory bread(block 68) failed [ 61.419475][ T2012] FAT-fs (loop2): Directory bread(block 69) failed [ 61.425844][ T2012] FAT-fs (loop2): Directory bread(block 70) failed [ 61.432155][ T2012] FAT-fs (loop2): Directory bread(block 71) failed [ 61.450428][ T2012] FAT-fs (loop2): Directory bread(block 72) failed [ 61.457103][ T2012] FAT-fs (loop2): Directory bread(block 73) failed [ 61.701526][ T23] audit: type=1400 audit(1718635813.449:290): avc: denied { write } for pid=2033 comm="syz-executor.3" name="mcfilter6" dev="proc" ino=4026533182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 62.017915][ T2025] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 62.025423][ T2025] FAT-fs (loop2): Filesystem has been set read-only [ 62.070860][ T2036] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 62.079703][ T2036] ext4 filesystem being mounted at /root/syzkaller-testdir140609325/syzkaller.lseCTs/27/bus supports timestamps until 2038 (0x7fffffff) [ 62.538748][ T2049] netlink: 'syz-executor.1': attribute type 280 has an invalid length. [ 62.608180][ T2051] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,nobarrier,nolazytime,,errors=continue [ 62.647070][ T2051] ext4 filesystem being mounted at /root/syzkaller-testdir70711036/syzkaller.9io14s/27/file0 supports timestamps until 2038 (0x7fffffff) [ 62.769062][ T2062] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.775921][ T2062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.808380][ T2058] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.821817][ T2058] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.829098][ T2058] device bridge_slave_0 entered promiscuous mode [ 62.835833][ T2058] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.842939][ T2058] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.850793][ T2058] device bridge_slave_1 entered promiscuous mode [ 62.867892][ T2075] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 62.908278][ T2068] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:455: comm syz-executor.4: Invalid block bitmap block 0 in block_group 0 [ 62.937463][ T2068] EXT4-fs error (device loop4): ext4_free_blocks:4799: comm syz-executor.4: Freeing blocks not in datazone - block = 0, count = 4096 [ 62.977003][ T2058] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.984028][ T2058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.991163][ T2058] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.997934][ T2058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.000255][ T2068] EXT4-fs error (device loop4): ext4_read_inode_bitmap:134: comm syz-executor.4: Invalid inode bitmap blk 0 in block_group 0 [ 63.037045][ T2068] EXT4-fs error (device loop4) in ext4_free_inode:352: Corrupt filesystem [ 63.053182][ T2068] EXT4-fs (loop4): 1 orphan inode deleted [ 63.064590][ T2068] EXT4-fs (loop4): mounted filesystem without journal. Opts: €; sysvgroups,stripe=0x0000000000000000,auto_da_alloc,quota,nogrpid,norecovery,bsddf,bsdgroups,,errors=continue [ 63.083843][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.094931][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.117841][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.152584][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.165579][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.197724][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.222400][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.247024][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.255242][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.278584][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.294507][ T9] device bridge_slave_1 left promiscuous mode [ 63.303030][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.321708][ T9] device bridge_slave_0 left promiscuous mode [ 63.329049][ T1702] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 63.336890][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.424044][ T2095] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.430932][ T2095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.484233][ T599] print_req_error: 70 callbacks suppressed [ 63.484246][ T599] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 63.502669][ T421] blk_update_request: I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 63.507199][ T599] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.515037][ T421] blk_update_request: I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.535409][ T421] buffer_io_error: 50 callbacks suppressed [ 63.535417][ T421] Buffer I/O error on dev loop0p4, logical block 1, async page read [ 63.537561][ T599] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 63.537636][ T599] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.537643][ T599] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 63.537683][ T599] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.537689][ T599] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 63.537728][ T599] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.537734][ T599] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 63.537779][ T599] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.537786][ T599] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 63.606675][ T421] blk_update_request: I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 63.615830][ T599] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 63.628119][ T421] Buffer I/O error on dev loop0p4, logical block 1, async page read [ 63.646100][ T2113] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 63.646100][ T2113] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 63.646100][ T2113] [ 63.718040][ T2113] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noacl,usrquota,noauto_da_alloc,,errors=continue [ 63.736910][ T1702] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 63.768412][ T2058] EXT4-fs error (device loop0): ext4_empty_dir:2990: inode #11: comm syz-executor.0: invalid size [ 63.780179][ T2058] EXT4-fs warning (device loop0): ext4_rmdir:3274: inode #11: comm syz-executor.0: empty directory 'file1' has too many links (0) [ 63.804698][ T2120] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 63.889151][ T421] Buffer I/O error on dev loop0p4, logical block 1, async page read [ 63.899264][ T599] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 63.909726][ T599] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 63.926976][ T1702] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.940133][ T1702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.953138][ T1702] usb 3-1: Product: syz [ 63.958769][ T1702] usb 3-1: Manufacturer: syz [ 63.963222][ T1702] usb 3-1: SerialNumber: syz [ 64.007396][ T1702] usb 3-1: bad CDC descriptors [ 64.037731][ T2133] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.044594][ T2133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.088363][ T2135] FAT-fs (loop0): Directory bread(block 64) failed [ 64.094749][ T2135] FAT-fs (loop0): Directory bread(block 65) failed [ 64.102065][ T2135] FAT-fs (loop0): Directory bread(block 66) failed [ 64.108483][ T2135] FAT-fs (loop0): Directory bread(block 67) failed [ 64.114735][ T2135] FAT-fs (loop0): Directory bread(block 68) failed [ 64.121103][ T2135] FAT-fs (loop0): Directory bread(block 69) failed [ 64.127624][ T2135] FAT-fs (loop0): Directory bread(block 70) failed [ 64.133952][ T2135] FAT-fs (loop0): Directory bread(block 71) failed [ 64.140332][ T2135] FAT-fs (loop0): Directory bread(block 72) failed [ 64.146598][ T2135] FAT-fs (loop0): Directory bread(block 73) failed [ 64.208429][ T13] usb 3-1: USB disconnect, device number 8 [ 64.300294][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.309424][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.316670][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.325724][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.333258][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.343401][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.346626][ T2156] mmap: syz-executor.1 (2156): VmData 28991488 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 64.350812][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.370510][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.380041][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.380804][ T23] kauditd_printk_skb: 19 callbacks suppressed [ 64.380812][ T23] audit: type=1400 audit(1718635816.129:307): avc: denied { wake_alarm } for pid=2157 comm="syz-executor.1" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 64.387686][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.421716][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.429091][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.435007][ T2160] FAT-fs (loop1): Directory bread(block 64) failed [ 64.436278][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.442804][ T2160] FAT-fs (loop1): Directory bread(block 65) failed [ 64.450203][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.456288][ T2160] FAT-fs (loop1): Directory bread(block 66) failed [ 64.463561][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.470317][ T2160] FAT-fs (loop1): Directory bread(block 67) failed [ 64.477105][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.483411][ T2160] FAT-fs (loop1): Directory bread(block 68) failed [ 64.490626][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.499648][ T2160] FAT-fs (loop1): Directory bread(block 69) failed [ 64.504256][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.510575][ T2160] FAT-fs (loop1): Directory bread(block 70) failed [ 64.517860][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.524277][ T2160] FAT-fs (loop1): Directory bread(block 71) failed [ 64.531345][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.537638][ T2160] FAT-fs (loop1): Directory bread(block 72) failed [ 64.544814][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.551111][ T2160] FAT-fs (loop1): Directory bread(block 73) failed [ 64.558500][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.571932][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.579407][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.586621][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.594062][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.601511][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.608724][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.615899][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.623170][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.630311][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.637545][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.644708][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.651941][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.659125][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.666313][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.673558][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.680741][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.687960][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.695129][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.702383][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.710257][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.717729][ T375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 64.725764][ T375] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 64.777613][ T23] audit: type=1400 audit(1718635816.529:308): avc: denied { unmount } for pid=1789 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 64.803767][ T23] audit: type=1400 audit(1718635816.549:309): avc: denied { setopt } for pid=2162 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.876487][ T2182] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 64.917776][ T23] audit: type=1400 audit(1718635816.669:310): avc: denied { write } for pid=2190 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 64.936950][ T2180] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:455: comm syz-executor.3: Invalid block bitmap block 0 in block_group 0 [ 65.020850][ T2180] Quota error (device loop3): write_blk: dquota write failed [ 65.028097][ T2180] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 65.038276][ T2180] EXT4-fs error (device loop3): ext4_free_blocks:4799: comm syz-executor.3: Freeing blocks not in datazone - block = 0, count = 4096 [ 65.052569][ T2180] EXT4-fs error (device loop3): ext4_read_inode_bitmap:134: comm syz-executor.3: Invalid inode bitmap blk 0 in block_group 0 [ 65.065560][ T395] Quota error (device loop3): remove_tree: Getting block too big (0 >= 9) [ 65.065934][ T2180] EXT4-fs error (device loop3) in ext4_free_inode:352: Corrupt filesystem [ 65.087006][ T2180] EXT4-fs (loop3): 1 orphan inode deleted [ 65.096570][ T2180] EXT4-fs (loop3): mounted filesystem without journal. Opts: €; sysvgroups,stripe=0x0000000000000000,auto_da_alloc,quota,nogrpid,norecovery,bsddf,bsdgroups,,errors=continue [ 65.958143][ T2233] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 65.969311][ T2231] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.009631][ T2223] F2FS-fs (loop0): invalid crc value [ 66.042775][ T2223] F2FS-fs (loop0): Found nat_bits in checkpoint [ 66.072009][ T2223] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 66.170377][ T2257] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:455: comm syz-executor.1: Invalid block bitmap block 0 in block_group 0 [ 66.189851][ T2265] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 66.211828][ T2257] Quota error (device loop1): write_blk: dquota write failed [ 66.226308][ T2257] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 66.228384][ T23] audit: type=1400 audit(1718635817.979:311): avc: denied { execute_no_trans } for pid=2266 comm="syz-executor.4" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=25796 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.249532][ T2257] EXT4-fs error (device loop1): ext4_free_blocks:4799: comm syz-executor.1: Freeing blocks not in datazone - block = 0, count = 4096 [ 66.327039][ T2257] EXT4-fs error (device loop1): ext4_read_inode_bitmap:134: comm syz-executor.1: Invalid inode bitmap blk 0 in block_group 0 [ 66.355473][ T2257] EXT4-fs error (device loop1) in ext4_free_inode:352: Corrupt filesystem [ 66.373467][ T2257] EXT4-fs (loop1): 1 orphan inode deleted [ 66.379114][ T2257] EXT4-fs (loop1): mounted filesystem without journal. Opts: €; sysvgroups,stripe=0x0000000000000000,auto_da_alloc,quota,nogrpid,norecovery,bsddf,bsdgroups,,errors=continue [ 66.681572][ T121] cfg80211: failed to load regulatory.db [ 66.872237][ T2294] EXT4-fs (loop4): Test dummy encryption mode enabled [ 67.011701][ T2294] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,auto_da_alloc=0x0000000000000006,nombcache,bsddf,test_dummy_encryption,,errors=continue [ 67.222588][ T2298] F2FS-fs (loop1): invalid crc value [ 67.313248][ T2320] overlayfs: './file1' not a directory [ 67.453771][ T2298] F2FS-fs (loop1): Found nat_bits in checkpoint [ 67.538866][ T2298] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 67.549491][ T2328] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 67.645124][ T2331] EXT4-fs (loop0): Test dummy encryption mode enabled [ 67.658190][ T2338] overlayfs: upper fs is r/o, try multi-lower layers mount [ 67.690680][ T2331] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,auto_da_alloc=0x0000000000000006,nombcache,bsddf,test_dummy_encryption,,errors=continue [ 67.706869][ T393] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 67.765625][ T2058] EXT4-fs error (device loop0): ext4_free_inode:345: comm syz-executor.0: bit already cleared for inode 18 [ 67.777235][ T162] udevd[162]: worker [421] terminated by signal 33 (Unknown signal 33) [ 67.807051][ T422] printk: udevd: 2 output lines suppressed due to ratelimiting [ 67.929207][ T2355] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 68.445210][ T2358] F2FS-fs (loop2): invalid crc value [ 68.455636][ T2372] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 68.485944][ T2358] F2FS-fs (loop2): Found nat_bits in checkpoint [ 68.517813][ T2372] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 68.527469][ T2358] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 68.556951][ T393] usb 4-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 68.565360][ T393] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 36 [ 68.574428][ T393] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 68.583398][ T393] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.591849][ T393] usb 4-1: config 0 descriptor?? [ 68.628594][ T2364] F2FS-fs (loop0): invalid crc value [ 68.649511][ T2364] F2FS-fs (loop0): Found nat_bits in checkpoint [ 68.680602][ T2364] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 68.687563][ T2389] input: syz0 as /devices/virtual/input/input17 [ 68.699094][ T2391] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 68.828094][ T393] usb 4-1: USB disconnect, device number 5 [ 68.996813][ T121] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 69.480663][ T393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 69.488265][ T393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 69.495500][ T393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x2 [ 69.502767][ T393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 69.509914][ T393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 69.517177][ T393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 69.524305][ T393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 69.531562][ T393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 69.538846][ T393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 69.546116][ T393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 69.553280][ T393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 69.560629][ T393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 69.567779][ T393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 69.575035][ T393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 69.582244][ T393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 69.589439][ T393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 69.596586][ T393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 69.603860][ T393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 69.611004][ T393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 69.618265][ T393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 69.625394][ T393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 69.632655][ T393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 69.639846][ T393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 69.647074][ T393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 69.654220][ T393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 69.661484][ T393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 69.668626][ T393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 69.675870][ T393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 69.683053][ T393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 69.692246][ T393] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 69.697576][ T121] usb 5-1: config 1 has an invalid interface number: 24 but max is 0 [ 69.710575][ T121] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.720458][ T121] usb 5-1: config 1 has no interface number 0 [ 69.726427][ T121] usb 5-1: config 1 interface 24 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 69.747218][ T2415] F2FS-fs (loop3): invalid crc value [ 69.758528][ T2415] F2FS-fs (loop3): Found nat_bits in checkpoint [ 69.798230][ T2415] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 69.826887][ T121] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.835827][ T121] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 69.843634][ T121] usb 5-1: SerialNumber: syz [ 70.100333][ T121] usb 5-1: bad CDC descriptors [ 70.100980][ T1702] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 70.107267][ T121] usb 5-1: USB disconnect, device number 8 [ 70.192766][ T23] kauditd_printk_skb: 82 callbacks suppressed [ 70.192774][ T23] audit: type=1400 audit(1718635821.939:393): avc: denied { read } for pid=2435 comm="syz-executor.0" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=26177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 70.466934][ T1702] usb 3-1: config 0 has no interfaces? [ 70.472289][ T1702] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 70.481117][ T1702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.489474][ T1702] usb 3-1: config 0 descriptor?? [ 70.752645][ T2444] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.759529][ T2444] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.766675][ T2444] device bridge_slave_0 entered promiscuous mode [ 70.776635][ T2444] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.783732][ T2444] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.790933][ T2444] device bridge_slave_1 entered promiscuous mode [ 70.832288][ T121] usb 3-1: USB disconnect, device number 9 [ 70.836338][ T2444] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.844780][ T2444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.851896][ T2444] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.858672][ T2444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.881975][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.889666][ T1702] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.896635][ T1702] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.896890][ T1746] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 70.919099][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.927163][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.933994][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.941143][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.949118][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.955928][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.966570][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.981947][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.001267][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.016182][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.036110][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.051939][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.068639][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.148261][ T2461] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 71.159063][ T2461] EXT4-fs error (device loop0): ext4_ext_precache:644: inode #2: comm syz-executor.0: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 71.177380][ T429] device bridge_slave_1 left promiscuous mode [ 71.183583][ T429] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.192590][ T429] device bridge_slave_0 left promiscuous mode [ 71.198936][ T429] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.221863][ T2466] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 71.277213][ T1746] usb 5-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 71.410241][ T1746] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 36 [ 71.426299][ T1746] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 71.436026][ T1746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.457790][ T1746] usb 5-1: config 0 descriptor?? [ 72.046432][ T1746] usb 5-1: USB disconnect, device number 9 [ 72.054507][ T2471] F2FS-fs (loop2): invalid crc value [ 72.072239][ T2471] F2FS-fs (loop2): Found nat_bits in checkpoint [ 72.118307][ T2471] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 72.165227][ T23] audit: type=1400 audit(1718635823.909:394): avc: denied { create } for pid=2500 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.185585][ T23] audit: type=1400 audit(1718635823.909:395): avc: denied { map } for pid=2500 comm="syz-executor.0" path="socket:[26508]" dev="sockfs" ino=26508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.209404][ T23] audit: type=1400 audit(1718635823.909:396): avc: denied { read } for pid=2500 comm="syz-executor.0" path="socket:[26508]" dev="sockfs" ino=26508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.232848][ T23] audit: type=1326 audit(1718635823.929:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2502 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff213e5ef29 code=0x0 [ 72.441119][ T23] audit: type=1400 audit(1718635824.189:398): avc: denied { execmem } for pid=2505 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 72.850439][ T2508] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.857814][ T2508] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.866168][ T2508] device bridge_slave_0 entered promiscuous mode [ 72.874907][ T2508] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.881802][ T2508] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.889223][ T2508] device bridge_slave_1 entered promiscuous mode [ 72.964588][ T2508] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.971493][ T2508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.978586][ T2508] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.985340][ T2508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.008970][ T2527] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.020752][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.029590][ T121] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.037693][ T23] audit: type=1400 audit(1718635824.789:399): avc: denied { remount } for pid=2526 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 73.058636][ T121] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.067395][ T23] audit: type=1326 audit(1718635824.809:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2533 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff213e5ef29 code=0x0 [ 73.095407][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.103899][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.112122][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.118969][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.136609][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.145235][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.153812][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.160651][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.175729][ T2540] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 73.185373][ T2540] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 73.194871][ T2540] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 73.209046][ T23] audit: type=1400 audit(1718635824.959:401): avc: denied { ioctl } for pid=2537 comm="syz-executor.1" path="socket:[27655]" dev="sockfs" ino=27655 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.211448][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.243000][ T2540] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 73.243057][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.256831][ T2540] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c000e118, mo2=0000] [ 73.261440][ T23] audit: type=1400 audit(1718635824.989:402): avc: denied { bind } for pid=2537 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.270264][ T2540] EXT4-fs (loop0): orphan cleanup on readonly fs [ 73.420381][ T2540] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor.0: bg 0: block 34: padding at end of block bitmap is not set [ 73.435127][ T2540] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:455: comm syz-executor.0: Invalid block bitmap block 0 in block_group 1 [ 73.436945][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.459854][ T2540] EXT4-fs (loop0): 1 truncate cleaned up [ 73.487282][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.506981][ T2540] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,debug,nogrpid,noblock_validity,,errors=continue [ 73.517540][ T2545] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 73.533028][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.547469][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.564638][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.570652][ T2540] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 73.572702][ T2545] EXT4-fs error (device loop1): ext4_ext_precache:644: inode #2: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 73.580046][ T2540] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c000e118, mo2=0000] [ 73.598115][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.613062][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.621147][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.629803][ T429] device bridge_slave_1 left promiscuous mode [ 73.635990][ T429] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.644130][ T429] device bridge_slave_0 left promiscuous mode [ 73.650502][ T429] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.754817][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.762932][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.771031][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.779076][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.448703][ T2584] EXT4-fs error (device loop2): ext4_ext_check_inode:540: inode #16: comm syz-executor.2: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200) [ 74.467669][ T2584] EXT4-fs error (device loop2): ext4_orphan_get:1240: comm syz-executor.2: couldn't read orphan inode 16 (err -117) [ 74.479879][ T2584] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,noauto_da_alloc,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue [ 74.498817][ T2584] ext4 filesystem being mounted at /root/syzkaller-testdir804743682/syzkaller.7rOzpj/73/file1 supports timestamps until 2038 (0x7fffffff) [ 74.548043][ T2592] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure [ 74.561184][ T2584] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 74.577407][ T2584] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 74.587776][ T2584] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 74.603616][ T2584] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 74.613508][ T2584] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 74.623725][ T2584] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 74.668571][ T2607] overlayfs: unrecognized mount option "32 [ 74.668571][ T2607] time [ 74.668571][ T2607] string [ 74.668571][ T2607] statistic [ 74.668571][ T2607] state [ 74.668571][ T2607] quota [ 74.668571][ T2607] pkttype [ 74.668571][ T2607] owner [ 74.668571][ T2607] mac [ 74.668571][ T2607] limit [ 74.668571][ T2607] helper [ 74.668571][ T2607] conntrack [ 74.668571][ T2607] conntrack [ 74.668571][ T2607] conntrack [ 74.668571][ T2607] connlimit [ 74.668571][ T2607] comment [ 74.668571][ T2607] bpf [ 74.668571][ T2607] bpf [ 74.668571][ T2607] connmark [ 74.668571][ T2607] mark [ 74.668571][ T2607] icmp [ 74.668571][ T2607] socket [ 74.668571][ T2607] socket [ 74.668571][ T2607] socket [ 74.668571][ T2607] socket [ 74.668571][ T2607] quota2 [ 74.668571][ T2607] policy [ 74.668571][ T2607] length [ 74.668571][ T2607] l2tp [ 74.668571][ T2607] iprange [ 74.668571][ T2607] ttl [ 74.668571][ T2607] hashlimit [ 74.669043][ T1445] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 3: comm syz-executor.2: lblock 0 mapped to illegal pblock 3 (length 1) [ 74.770795][ T2584] syz-executor.2 (2584) used greatest stack depth: 19856 bytes left [ 74.777406][ T2600] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 74.790119][ T1445] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 74.794186][ T2600] EXT4-fs error (device loop1): ext4_ext_precache:644: inode #2: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 75.036338][ T2625] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.043260][ T18] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 75.044315][ T2625] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.058215][ T2625] device bridge_slave_0 entered promiscuous mode [ 75.065282][ T2625] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.072149][ T2625] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.081490][ T2625] device bridge_slave_1 entered promiscuous mode [ 75.198773][ T23] kauditd_printk_skb: 8 callbacks suppressed [ 75.198789][ T23] audit: type=1400 audit(1718635826.949:409): avc: denied { write } for pid=2636 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.264131][ T23] audit: type=1400 audit(1718635826.969:410): avc: denied { nlmsg_write } for pid=2636 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.347948][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.355594][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.371119][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.380706][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.389002][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.395869][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.403315][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.412193][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.420548][ T121] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.427402][ T121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.435075][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.447905][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.458508][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.475536][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.483680][ T18] usb 4-1: Using ep0 maxpacket: 8 [ 75.493407][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.506578][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.520898][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.530905][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.606945][ T18] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 75.615157][ T18] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 75.626413][ T18] usb 4-1: config 135 has no interface number 0 [ 75.632549][ T18] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.646164][ T23] audit: type=1400 audit(1718635827.399:411): avc: denied { mounton } for pid=2655 comm="syz-executor.2" path="/root/syzkaller-testdir3985733795/syzkaller.iitqJf/4/file0/bus" dev="loop2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 75.673571][ T429] device bridge_slave_1 left promiscuous mode [ 75.679806][ T2625] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000366d) [ 75.679918][ T429] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.687933][ T2625] FAT-fs (loop2): Filesystem has been set read-only [ 75.701208][ T429] device bridge_slave_0 left promiscuous mode [ 75.708521][ T429] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.797083][ T18] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 75.806612][ T18] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.818003][ T18] usb 4-1: Product: syz [ 75.818141][ T23] audit: type=1400 audit(1718635827.569:412): avc: denied { mount } for pid=2667 comm="syz-executor.1" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 75.822148][ T18] usb 4-1: Manufacturer: syz [ 75.849125][ T18] usb 4-1: SerialNumber: syz [ 75.850541][ T23] audit: type=1400 audit(1718635827.599:413): avc: denied { watch } for pid=2667 comm="syz-executor.1" path="/root/syzkaller-testdir138960401/syzkaller.Le5EPm/14/file0/bus" dev="sysfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 75.902437][ T23] audit: type=1400 audit(1718635827.599:414): avc: denied { remount } for pid=2667 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 75.924174][ T23] audit: type=1400 audit(1718635827.599:415): avc: denied { mounton } for pid=2667 comm="syz-executor.1" path="/root/syzkaller-testdir138960401/syzkaller.Le5EPm/14/file0/bus" dev="sysfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 75.953106][ T23] audit: type=1400 audit(1718635827.629:416): avc: denied { unmount } for pid=2444 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 75.973674][ T23] audit: type=1400 audit(1718635827.679:417): avc: denied { listen } for pid=2681 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.994927][ T23] audit: type=1326 audit(1718635827.729:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2687 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd714e6f29 code=0x0 [ 76.004949][ T1702] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 76.025875][ T1702] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 76.033174][ T1702] hid-generic 0000:0000:0000.0009: unknown main item tag 0x2 [ 76.040326][ T1702] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 76.047642][ T1702] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 76.047839][ T2691] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.054867][ T1702] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 76.066894][ T2691] FAT-fs (loop1): bogus number of FAT sectors [ 76.073793][ T1702] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 76.079865][ T2691] FAT-fs (loop1): Can't find a valid FAT filesystem [ 76.086924][ T1702] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 76.101138][ T1702] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 76.108396][ T1702] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 76.115555][ T1702] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 76.122846][ T1702] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 76.129981][ T1702] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 76.137233][ T18] uvcvideo: Found UVC 0.00 device syz (18ec:3288) [ 76.143402][ T1702] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 76.150730][ T18] uvcvideo: No valid video chain found. [ 76.157223][ T18] usb 4-1: USB disconnect, device number 6 [ 76.162914][ T1702] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 76.171031][ T1702] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 76.181722][ T1702] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 76.194309][ T1702] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 76.201507][ T1702] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 76.208891][ T1702] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 76.214800][ T2693] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 76.225720][ T1702] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 76.231890][ T2693] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 76.242478][ T2693] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 76.252731][ T2693] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 76.261263][ T2693] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c000e118, mo2=0000] [ 76.262497][ T1702] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 76.276323][ T1702] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 76.283887][ T1702] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 76.284358][ T2693] EXT4-fs (loop2): orphan cleanup on readonly fs [ 76.291091][ T1702] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 76.304444][ T1702] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 76.312027][ T1702] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 76.317880][ T2693] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz-executor.2: bg 0: block 34: padding at end of block bitmap is not set [ 76.319225][ T1702] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 76.341020][ T1702] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 76.345463][ T2701] input: syz0 as /devices/virtual/input/input18 [ 76.349014][ T1702] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 76.355767][ T2693] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:455: comm syz-executor.2: Invalid block bitmap block 0 in block_group 1 [ 76.378402][ T2693] EXT4-fs (loop2): 1 truncate cleaned up [ 76.384789][ T2693] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,debug,nogrpid,noblock_validity,,errors=continue [ 76.404338][ T2693] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 76.412215][ T2693] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c000e118, mo2=0000] [ 76.626840][ T1702] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 76.775615][ T2728] input: syz0 as /devices/virtual/input/input19 [ 76.804943][ T2722] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.039255][ T1702] usb 5-1: config 0 has no interfaces? [ 77.044981][ T1702] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 77.057963][ T1702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.067782][ T1702] usb 5-1: config 0 descriptor?? [ 77.082500][ T2742] overlayfs: unrecognized mount option "32 [ 77.082500][ T2742] time [ 77.082500][ T2742] string [ 77.082500][ T2742] statistic [ 77.082500][ T2742] state [ 77.082500][ T2742] quota [ 77.082500][ T2742] pkttype [ 77.082500][ T2742] owner [ 77.082500][ T2742] mac [ 77.082500][ T2742] limit [ 77.082500][ T2742] helper [ 77.082500][ T2742] conntrack [ 77.082500][ T2742] conntrack [ 77.082500][ T2742] conntrack [ 77.082500][ T2742] connlimit [ 77.082500][ T2742] comment [ 77.082500][ T2742] bpf [ 77.082500][ T2742] bpf [ 77.082500][ T2742] connmark [ 77.082500][ T2742] mark [ 77.082500][ T2742] icmp [ 77.082500][ T2742] socket [ 77.082500][ T2742] socket [ 77.082500][ T2742] socket [ 77.082500][ T2742] socket [ 77.082500][ T2742] quota2 [ 77.082500][ T2742] policy [ 77.082500][ T2742] length [ 77.082500][ T2742] l2tp [ 77.082500][ T2742] iprange [ 77.082500][ T2742] ttl [ 77.082500][ T2742] hashlimit [ 77.457336][ T1166] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 77.499273][ T1702] usb 5-1: USB disconnect, device number 10 [ 77.886808][ T1166] usb 2-1: Using ep0 maxpacket: 8 [ 78.550052][ T1166] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 78.558893][ T1166] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 78.570772][ T1166] usb 2-1: config 135 has no interface number 0 [ 78.576910][ T1166] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.644089][ T2816] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.167434][ T1166] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 79.177400][ T1166] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.185190][ T1166] usb 2-1: Product: syz [ 79.207046][ T1166] usb 2-1: Manufacturer: syz [ 79.211455][ T1166] usb 2-1: SerialNumber: syz [ 79.227042][ T2842] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) [ 79.342409][ T2855] device gretap0 entered promiscuous mode [ 79.348166][ T2855] device gretap0 left promiscuous mode [ 79.539337][ T2868] @: renamed from syztnl2 [ 79.602472][ T1166] uvcvideo: Found UVC 0.00 device syz (18ec:3288) [ 79.613677][ T1166] uvcvideo: No valid video chain found. [ 79.620987][ T1166] usb 2-1: USB disconnect, device number 10 [ 79.627698][ T2874] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 79.639372][ T2874] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.3'. [ 79.681327][ T2884] device gretap0 entered promiscuous mode [ 79.687351][ T2884] device gretap0 left promiscuous mode [ 80.128494][ T2908] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 80.136518][ T2908] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.0'. [ 80.168816][ T2914] device gretap0 entered promiscuous mode [ 80.174555][ T2914] device gretap0 left promiscuous mode [ 80.289108][ T23] kauditd_printk_skb: 11 callbacks suppressed [ 80.289123][ T23] audit: type=1400 audit(1718635832.039:428): avc: denied { read } for pid=2926 comm="syz-executor.1" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.318856][ T23] audit: type=1400 audit(1718635832.069:429): avc: denied { open } for pid=2926 comm="syz-executor.1" path="/root/syzkaller-testdir138960401/syzkaller.Le5EPm/26/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.348368][ T23] audit: type=1400 audit(1718635832.099:430): avc: denied { ioctl } for pid=2926 comm="syz-executor.1" path="/root/syzkaller-testdir138960401/syzkaller.Le5EPm/26/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.348370][ T2928] ------------[ cut here ]------------ [ 80.348396][ T2928] WARNING: CPU: 1 PID: 2928 at mm/page_alloc.c:4875 __alloc_pages_nodemask+0x5d5/0x840 [ 80.393285][ T2928] Modules linked in: [ 80.397024][ T2928] CPU: 1 PID: 2928 Comm: syz-executor.1 Tainted: G W 5.4.274-syzkaller-00002-g6f97bd951d82 #0 [ 80.408386][ T2928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 80.418292][ T2928] RIP: 0010:__alloc_pages_nodemask+0x5d5/0x840 [ 80.424275][ T2928] Code: e1 07 80 c1 03 38 c1 0f 8c 12 fd ff ff 4c 89 f7 89 74 24 38 e8 1c 27 04 00 8b 74 24 38 48 8d bc 24 a0 00 00 00 e9 f5 fc ff ff <0f> 0b 31 db e9 ef fd ff ff 43 80 7c 3d 00 00 74 0a 48 8b 7c 24 48 [ 80.443712][ T2928] RSP: 0018:ffff8881ea59f820 EFLAGS: 00010246 [ 80.449613][ T2928] RAX: ffff8881ea59f8d0 RBX: 0000000000040d40 RCX: 0000000000000000 [ 80.457426][ T2928] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffff8881ea59f8e8 [ 80.465236][ T2928] RBP: ffff8881ea59f978 R08: dffffc0000000000 R09: ffff8881ea59f8d0 [ 80.473058][ T2928] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1103d4b3f14 [ 80.480863][ T2928] R13: ffff8881d4d50800 R14: 0000000000000034 R15: dffffc0000000000 [ 80.488671][ T2928] FS: 00007fc9e460c6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 80.497437][ T2928] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.503858][ T2928] CR2: 0000000020802000 CR3: 00000001eb000000 CR4: 00000000003406a0 [ 80.511671][ T2928] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.519481][ T2928] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.527290][ T2928] Call Trace: [ 80.530428][ T2928] ? __warn+0x162/0x250 [ 80.534413][ T2928] ? report_bug+0x3a1/0x4e0 [ 80.538753][ T2928] ? __alloc_pages_nodemask+0x5d5/0x840 [ 80.544137][ T2928] ? __alloc_pages_nodemask+0x5d5/0x840 [ 80.549514][ T2928] ? do_invalid_op+0x6e/0x110 [ 80.554028][ T2928] ? invalid_op+0x1e/0x30 [ 80.558196][ T2928] ? __alloc_pages_nodemask+0x5d5/0x840 [ 80.563575][ T2928] ? call_rcu+0x10/0x10 [ 80.567570][ T2928] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 80.572948][ T2928] ? slow_avc_audit+0x26c/0x3c0 [ 80.577634][ T2928] ? avc_get_hash_stats+0x1a0/0x1a0 [ 80.582667][ T2928] ? avc_update_node+0x897/0x960 [ 80.587444][ T2928] kmalloc_order_trace+0x2a/0x100 [ 80.592303][ T2928] pending_reads_dispatch_ioctl+0xe3d/0x2690 [ 80.598118][ T2928] ? avc_has_extended_perms+0xa4c/0x1120 [ 80.603583][ T2928] ? avc_has_extended_perms+0xafc/0x1120 [ 80.609139][ T2928] ? pending_reads_poll+0x160/0x160 [ 80.614184][ T2928] ? _raw_spin_unlock_irqrestore+0x57/0x80 [ 80.619814][ T2928] ? do_futex+0x13c1/0x19f0 [ 80.624160][ T2928] ? bpf_prog_216c997a1f42e404+0x62/0x1000 [ 80.629795][ T2928] ? pending_reads_poll+0x160/0x160 [ 80.634835][ T2928] do_vfs_ioctl+0x742/0x1720 [ 80.639255][ T2928] ? do_sys_open+0x65e/0x810 [ 80.643683][ T2928] ? ioctl_preallocate+0x250/0x250 [ 80.648628][ T2928] ? do_sys_open+0x65e/0x810 [ 80.653059][ T2928] ? __bpf_trace_kmem_free+0x6e/0x90 [ 80.658178][ T2928] ? check_preemption_disabled+0x153/0x320 [ 80.663816][ T2928] ? debug_smp_processor_id+0x20/0x20 [ 80.669024][ T2928] ? __se_sys_futex+0x355/0x470 [ 80.673713][ T2928] ? switch_fpu_return+0x1d4/0x410 [ 80.678659][ T2928] ? security_file_ioctl+0x7d/0xa0 [ 80.683607][ T2928] __x64_sys_ioctl+0xd4/0x110 [ 80.688119][ T2928] do_syscall_64+0xca/0x1c0 [ 80.692459][ T2928] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 80.698189][ T2928] RIP: 0033:0x7fc9e5291f29 [ 80.702441][ T2928] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 80.721879][ T2928] RSP: 002b:00007fc9e460c0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.730125][ T2928] RAX: ffffffffffffffda RBX: 00007fc9e53c8f80 RCX: 00007fc9e5291f29 [ 80.737934][ T2928] RDX: 0000000020000000 RSI: 0000000040106726 RDI: 0000000000000005 [ 80.745743][ T2928] RBP: 00007fc9e5301074 R08: 0000000000000000 R09: 0000000000000000 [ 80.753553][ T2928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.761368][ T2928] R13: 000000000000000b R14: 00007fc9e53c8f80 R15: 00007ffe24d951c8 [ 80.769184][ T2928] ---[ end trace 4bf6b6aef7e91d20 ]--- [ 80.807936][ T2931] overlayfs: unrecognized mount option "32 [ 80.807936][ T2931] time [ 80.807936][ T2931] string [ 80.807936][ T2931] statistic [ 80.807936][ T2931] state [ 80.807936][ T2931] quota [ 80.807936][ T2931] pkttype [ 80.807936][ T2931] owner [ 80.807936][ T2931] mac [ 80.807936][ T2931] limit [ 80.807936][ T2931] helper [ 80.807936][ T2931] conntrack [ 80.807936][ T2931] conntrack [ 80.807936][ T2931] conntrack [ 80.807936][ T2931] connlimit [ 80.807936][ T2931] comment [ 80.807936][ T2931] bpf [ 80.807936][ T2931] bpf [ 80.807936][ T2931] connmark [ 80.807936][ T2931] mark [ 80.807936][ T2931] icmp [ 80.807936][ T2931] socket [ 80.807936][ T2931] socket [ 80.807936][ T2931] socket [ 80.807936][ T2931] socket [ 80.807936][ T2931] quota2 [ 80.807936][ T2931] policy [ 80.807936][ T2931] length [ 80.807936][ T2931] l2tp [ 80.807936][ T2931] iprange [ 80.807936][ T2931] ttl [ 80.807936][ T2931] hashlimit [ 80.913041][ T2935] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 80.922727][ T2935] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.3'. [ 81.064047][ T23] audit: type=1400 audit(1718635832.809:431): avc: denied { mount } for pid=2954 comm="syz-executor.0" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 81.090854][ T2951] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 81.292043][ T669] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 81.387301][ T395] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 81.402391][ T395] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28 [ 81.414890][ T395] EXT4-fs (loop3): This should not happen!! Data will be lost [ 81.414890][ T395] [ 81.425576][ T395] EXT4-fs (loop3): Total free blocks count 0 [ 81.431459][ T395] EXT4-fs (loop3): Free/Dirty block details [ 81.437439][ T395] EXT4-fs (loop3): free_blocks=2415919104 [ 81.450922][ T395] EXT4-fs (loop3): dirty_blocks=16 [ 81.455888][ T395] EXT4-fs (loop3): Block reservation details [ 81.462041][ T395] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 81.536816][ T669] usb 5-1: Using ep0 maxpacket: 8 [ 81.656913][ T669] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 81.665116][ T669] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 81.675911][ T669] usb 5-1: config 135 has no interface number 0 [ 81.676764][ T2969] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 81.682024][ T669] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.689651][ T2969] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 81.712554][ T2969] F2FS-fs (loop3): invalid crc value [ 81.713621][ T2972] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 81.719291][ T2969] F2FS-fs (loop3): Found nat_bits in checkpoint [ 81.725656][ T2972] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.2'. [ 81.767233][ T2969] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 81.774213][ T2969] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 81.803764][ T2969] overlayfs: invalid redirect ((null)) [ 81.817551][ T395] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 81.826512][ T395] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 81.858904][ T669] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 81.870846][ T669] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.878830][ T669] usb 5-1: Product: syz [ 81.882795][ T669] usb 5-1: Manufacturer: syz [ 81.887232][ T669] usb 5-1: SerialNumber: syz [ 82.381540][ T2994] device gretap0 entered promiscuous mode [ 82.387047][ T669] uvcvideo: Found UVC 0.00 device syz (18ec:3288) [ 82.387814][ T2994] device gretap0 left promiscuous mode [ 82.394368][ T669] uvcvideo: No valid video chain found. [ 82.405197][ T669] usb 5-1: USB disconnect, device number 11 [ 82.719702][ T23] audit: type=1326 audit(1718635834.469:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3019 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd714e6f29 code=0x0 [ 82.847673][ T3029] loop3: p1 p2 p3 [ 82.869834][ T23] audit: type=1400 audit(1718635834.619:433): avc: denied { mounton } for pid=3028 comm="syz-executor.3" path="/dev/loop3p1" dev="devtmpfs" ino=29320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 82.869979][ T3029] incfs: Error accessing: ./file0. [ 82.899046][ T3029] incfs: mount failed -20 [ 82.908333][ T3029] incfs: Error accessing: ./file0. [ 82.913332][ T3029] incfs: mount failed -20 [ 82.920205][ T3029] incfs: Error accessing: ./file0. [ 82.925507][ T3029] incfs: mount failed -20 [ 83.278883][ T3034] F2FS-fs (loop4): Test dummy encryption mode enabled [ 83.292819][ T3034] F2FS-fs (loop4): Found nat_bits in checkpoint [ 83.324214][ T3034] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 83.868283][ T3077] F2FS-fs (loop2): Found nat_bits in checkpoint [ 83.945862][ T3077] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 84.000690][ T23] audit: type=1400 audit(1718635835.749:434): avc: denied { rename } for pid=3075 comm="syz-executor.2" name="bus" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 84.052784][ T2625] attempt to access beyond end of device [ 84.052784][ T2625] loop2: rw=2049, want=45104, limit=40427 [ 84.075412][ T23] audit: type=1400 audit(1718635835.819:435): avc: denied { create } for pid=3095 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 84.781916][ T3085] F2FS-fs (loop1): Test dummy encryption mode enabled [ 84.842391][ T3085] F2FS-fs (loop1): Found nat_bits in checkpoint [ 84.877905][ T3116] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 84.887889][ T3116] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 84.903887][ T3116] F2FS-fs (loop2): Found nat_bits in checkpoint [ 84.906859][ T3085] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 84.962077][ T3116] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 84.970058][ T3116] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 85.040188][ T3128] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 85.052708][ T3128] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 85.055754][ T3139] attempt to access beyond end of device [ 85.055754][ T3139] loop2: rw=2049, want=45104, limit=40427 [ 85.076246][ T3128] F2FS-fs (loop0): invalid crc value [ 85.105985][ T3128] F2FS-fs (loop0): Found nat_bits in checkpoint [ 85.195342][ T3128] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 85.204323][ T3128] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 85.283873][ T3128] overlayfs: invalid redirect ((null)) [ 85.314210][ T429] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 85.329046][ T429] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 85.384430][ T2625] attempt to access beyond end of device [ 85.384430][ T2625] loop2: rw=2049, want=40984, limit=40427 [ 85.540080][ T3152] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 85.856561][ T3162] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 85.871076][ T395] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 85.895109][ T395] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28 [ 85.911216][ T395] EXT4-fs (loop3): This should not happen!! Data will be lost [ 85.911216][ T395] [ 85.922416][ T395] EXT4-fs (loop3): Total free blocks count 0 [ 85.930198][ T395] EXT4-fs (loop3): Free/Dirty block details [ 85.940280][ T23] audit: type=1400 audit(1718635837.689:436): avc: denied { accept } for pid=3166 comm="syz-executor.1" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.962301][ T395] EXT4-fs (loop3): free_blocks=2415919104 [ 85.968104][ T395] EXT4-fs (loop3): dirty_blocks=16 [ 85.973059][ T395] EXT4-fs (loop3): Block reservation details [ 85.978883][ T395] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 86.007745][ T23] audit: type=1400 audit(1718635837.759:437): avc: denied { mount } for pid=3172 comm="syz-executor.1" name="/" dev="ramfs" ino=29492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 86.078405][ T3179] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.091218][ T3179] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.176252][ T3182] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.183121][ T3182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.195627][ T3182] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.202483][ T3182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.627897][ T3178] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 86.637274][ T3178] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 86.651111][ T3178] F2FS-fs (loop1): invalid crc value [ 86.662348][ T3199] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 86.677894][ T3178] F2FS-fs (loop1): Found nat_bits in checkpoint [ 86.721338][ T3178] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 86.728386][ T3178] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 86.742122][ T3206] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 86.775975][ T3178] overlayfs: invalid redirect ((null)) [ 86.789095][ T395] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 86.798103][ T395] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 86.859119][ T3171] F2FS-fs (loop2): Test dummy encryption mode enabled [ 86.868448][ T3171] F2FS-fs (loop2): Found nat_bits in checkpoint [ 86.893236][ T3171] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 87.043093][ T3218] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.051078][ T3218] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.082830][ T3218] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.089680][ T3218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.098037][ T3218] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.104863][ T3218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.125816][ T3220] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 87.478272][ T3239] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.505950][ T3239] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.554802][ T3239] device bridge_slave_0 entered promiscuous mode [ 87.638011][ T3239] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.656808][ T3239] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.675730][ T3239] device bridge_slave_1 entered promiscuous mode [ 87.702363][ T3254] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.735934][ T3254] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.758414][ T3256] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.765274][ T3256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.773229][ T3256] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.780083][ T3256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.797883][ T3242] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 87.816813][ T3242] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 87.852032][ T3242] F2FS-fs (loop1): Found nat_bits in checkpoint [ 87.876029][ T3239] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.882911][ T3239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.890012][ T3239] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.895752][ T3242] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 87.896762][ T3239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.903671][ T3242] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 87.922575][ T3253] F2FS-fs (loop2): Found nat_bits in checkpoint [ 87.965229][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.969871][ T3253] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 87.979662][ T1702] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.992976][ T1702] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.001330][ T3271] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 88.015723][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.015769][ T3272] attempt to access beyond end of device [ 88.015769][ T3272] loop1: rw=2049, want=45104, limit=40427 [ 88.024832][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.041396][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.049351][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.057651][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.064500][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.094690][ T2625] attempt to access beyond end of device [ 88.094690][ T2625] loop2: rw=2049, want=45104, limit=40427 [ 88.116845][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.176093][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.197540][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.207953][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.218674][ T2444] attempt to access beyond end of device [ 88.218674][ T2444] loop1: rw=2049, want=40984, limit=40427 [ 88.236913][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.244836][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.252986][ T3283] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 88.267532][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.275569][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.295515][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.308329][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.316709][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.324974][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.391050][ T3286] loop4: p1 < > p2 [ 88.394730][ T3286] loop4: partition table partially beyond EOD, truncated [ 88.401862][ T3286] loop4: p1 start 4177526784 is beyond EOD, truncated [ 88.408591][ T3286] loop4: p2 start 163840 is beyond EOD, truncated [ 88.427416][ T3290] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 88.466574][ T23] audit: type=1400 audit(1718635840.209:438): avc: denied { unmount } for pid=2625 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 88.624371][ T3296] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 88.633692][ T3296] ext4 filesystem being mounted at /root/syzkaller-testdir2056491946/syzkaller.pBfWwQ/1/file0 supports timestamps until 2038 (0x7fffffff) [ 88.653873][ T23] audit: type=1400 audit(1718635840.399:439): avc: denied { ioctl } for pid=3295 comm="syz-executor.0" path="/root/syzkaller-testdir2056491946/syzkaller.pBfWwQ/1/file0/file0/file0" dev="loop0" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 88.683338][ T3296] fs-verity: sha512 using implementation "sha512-generic" [ 88.725474][ T23] audit: type=1400 audit(1718635840.469:440): avc: denied { getopt } for pid=3315 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.565648][ T3324] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 89.581369][ T3329] @: renamed from syztnl2 [ 89.598221][ T3332] loop2: p1 < > p2 [ 89.601888][ T3332] loop2: partition table partially beyond EOD, truncated [ 89.609614][ T3332] loop2: p1 start 4177526784 is beyond EOD, truncated [ 89.619517][ T3332] loop2: p2 start 163840 is beyond EOD, truncated [ 89.825164][ T3348] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 89.835588][ T3348] ext4 filesystem being mounted at /root/syzkaller-testdir1981643837/syzkaller.Da2MKc/83/file0 supports timestamps until 2038 (0x7fffffff) [ 89.870351][ T3370] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 89.911784][ T3378] incfs: Backing dir is not set, filesystem can't be mounted. [ 89.919299][ T3378] incfs: mount failed -2 [ 89.967917][ T3380] EXT4-fs (loop4): Test dummy encryption mode enabled [ 90.346556][ T3386] bridge0: port 3(gretap0) entered blocking state [ 90.352807][ T3386] bridge0: port 3(gretap0) entered disabled state [ 90.359630][ T3386] device gretap0 entered promiscuous mode [ 90.365264][ T3386] bridge0: port 3(gretap0) entered blocking state [ 90.371416][ T3386] bridge0: port 3(gretap0) entered forwarding state [ 90.379619][ T3386] device gretap0 left promiscuous mode [ 90.384974][ T3386] bridge0: port 3(gretap0) entered disabled state [ 90.466250][ T3380] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,auto_da_alloc=0x0000000000000006,nombcache,bsddf,test_dummy_encryption,,errors=continue [ 90.665512][ T23] audit: type=1400 audit(1718635842.409:441): avc: denied { sys_module } for pid=3394 comm="syz-executor.1" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 90.804338][ T3399] overlayfs: './file1' not a directory [ 91.187042][ T3432] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 91.417066][ T23] audit: type=1400 audit(1718635843.029:442): avc: denied { setopt } for pid=3425 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.451121][ T23] audit: type=1400 audit(1718635843.029:443): avc: denied { connect } for pid=3425 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.475285][ T3406] F2FS-fs (loop1): Found nat_bits in checkpoint [ 91.515514][ T3406] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 91.528379][ T3439] EXT4-fs (loop4): Test dummy encryption mode enabled [ 91.553246][ T3439] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,auto_da_alloc=0x0000000000000006,nombcache,bsddf,test_dummy_encryption,,errors=continue [ 91.569561][ T2444] attempt to access beyond end of device [ 91.569561][ T2444] loop1: rw=2049, want=45104, limit=40427 [ 91.832357][ T3450] overlayfs: './file1' not a directory [ 92.010813][ T23] audit: type=1400 audit(1718635843.759:444): avc: denied { unmount } for pid=2625 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 92.119766][ T3465] input: syz0 as /devices/virtual/input/input20 [ 92.189141][ T23] audit: type=1400 audit(1718635843.939:445): avc: denied { setopt } for pid=3470 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 92.657979][ T3498] EXT4-fs (loop3): Test dummy encryption mode enabled [ 92.688897][ T3498] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,auto_da_alloc=0x0000000000000006,nombcache,bsddf,test_dummy_encryption,,errors=continue [ 92.758193][ T3494] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 92.827054][ T3494] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 92.853774][ T3494] F2FS-fs (loop4): Found nat_bits in checkpoint [ 92.981139][ T3518] overlayfs: './file1' not a directory [ 93.096722][ T3494] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 93.103801][ T3494] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 93.145439][ T3523] incfs: Backing dir is not set, filesystem can't be mounted. [ 93.153227][ T3523] incfs: mount failed -2 [ 93.243541][ T23] audit: type=1400 audit(1718635844.989:446): avc: denied { nlmsg_read } for pid=3531 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.292782][ T3533] bridge0: port 3(gretap0) entered blocking state [ 93.299075][ T3533] bridge0: port 3(gretap0) entered disabled state [ 93.308176][ T3533] device gretap0 entered promiscuous mode [ 93.314231][ T3533] bridge0: port 3(gretap0) entered blocking state [ 93.320456][ T3533] bridge0: port 3(gretap0) entered forwarding state [ 93.362617][ T3533] device gretap0 left promiscuous mode [ 93.368544][ T3533] bridge0: port 3(gretap0) entered disabled state [ 93.493038][ T3532] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 93.649880][ T3541] FAT-fs (loop3): Directory bread(block 64) failed [ 93.656329][ T3541] FAT-fs (loop3): Directory bread(block 65) failed [ 93.662702][ T3541] FAT-fs (loop3): Directory bread(block 66) failed [ 93.717189][ T3541] FAT-fs (loop3): Directory bread(block 67) failed [ 93.725182][ T3541] FAT-fs (loop3): Directory bread(block 68) failed [ 93.731611][ T3541] FAT-fs (loop3): Directory bread(block 69) failed [ 93.737973][ T3541] FAT-fs (loop3): Directory bread(block 70) failed [ 93.744365][ T3541] FAT-fs (loop3): Directory bread(block 71) failed [ 93.750754][ T3541] FAT-fs (loop3): Directory bread(block 72) failed [ 93.757919][ T3541] FAT-fs (loop3): Directory bread(block 73) failed [ 94.083138][ T3550] @: renamed from syztnl2 [ 94.096392][ T23] audit: type=1400 audit(1718635845.839:447): avc: denied { create } for pid=3552 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 94.307825][ T3567] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 94.325411][ T3570] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 94.378321][ T3576] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 94.667675][ T3588] loop1: p4 < > [ 94.677191][ T429] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 94.691670][ T429] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28 [ 94.703623][ T429] EXT4-fs (loop3): This should not happen!! Data will be lost [ 94.703623][ T429] [ 94.713047][ T429] EXT4-fs (loop3): Total free blocks count 0 [ 94.719007][ T429] EXT4-fs (loop3): Free/Dirty block details [ 94.725887][ T429] EXT4-fs (loop3): free_blocks=2415919104 [ 94.731445][ T429] EXT4-fs (loop3): dirty_blocks=16 [ 94.736995][ T429] EXT4-fs (loop3): Block reservation details [ 94.742814][ T429] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 95.042177][ T3611] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 95.060808][ T3613] tipc: Enabling of bearer rejected, failed to enable media [ 95.098239][ T3615] EXT4-fs (loop3): Test dummy encryption mode enabled [ 95.111293][ T3615] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,stripe=0x0000000000010000,dioread_nolock,,errors=continue [ 95.227853][ T3604] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 95.235401][ T3604] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 95.245756][ T3623] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 95.246612][ T3604] F2FS-fs (loop4): Found nat_bits in checkpoint [ 95.255595][ T3623] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 95.273178][ T3623] EXT4-fs (loop1): 1 truncate cleaned up [ 95.278723][ T3623] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,noblock_validity, [ 95.291891][ T3604] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 95.304024][ T3604] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 95.321325][ T3623] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz-executor.1: Logical block already allocated [ 95.333866][ T3623] EXT4-fs (loop1): Remounting filesystem read-only [ 95.340208][ T3623] EXT4-fs error (device loop1) in ext4_evict_inode:276: Readonly filesystem [ 95.444869][ T3653] tipc: Enabling of bearer rejected, failed to enable media [ 95.454965][ T3647] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 95.687017][ T23] audit: type=1400 audit(1718635847.445:448): avc: denied { map } for pid=3663 comm="syz-executor.2" path="socket:[31510]" dev="sockfs" ino=31510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.787569][ T395] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 95.804095][ T395] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28 [ 95.816564][ T395] EXT4-fs (loop0): This should not happen!! Data will be lost [ 95.816564][ T395] [ 95.826025][ T395] EXT4-fs (loop0): Total free blocks count 0 [ 95.828248][ T3675] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 95.831876][ T395] EXT4-fs (loop0): Free/Dirty block details [ 95.856925][ T395] EXT4-fs (loop0): free_blocks=2415919104 [ 95.862521][ T395] EXT4-fs (loop0): dirty_blocks=16 [ 95.876378][ T395] EXT4-fs (loop0): Block reservation details [ 95.882250][ T395] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 96.036876][ T2477] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 96.254132][ T3678] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 96.261764][ T3678] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 96.273337][ T3678] F2FS-fs (loop2): Found nat_bits in checkpoint [ 96.307290][ T5] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 96.315047][ T3678] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 96.322171][ T3678] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 96.438330][ T2477] usb 5-1: Using ep0 maxpacket: 16 [ 96.452073][ T3661] F2FS-fs (loop3): Found nat_bits in checkpoint [ 96.476547][ T3661] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 96.559337][ T2477] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.579437][ T2477] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.589048][ T2477] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 96.597874][ T2477] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.606684][ T2477] usb 5-1: config 0 descriptor?? [ 96.612801][ T3696] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 96.620713][ T3696] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 96.628997][ T3696] EXT4-fs (loop2): 1 truncate cleaned up [ 96.634470][ T3696] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,noblock_validity, [ 96.657850][ T3696] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz-executor.2: Logical block already allocated [ 96.669619][ T3696] EXT4-fs (loop2): Remounting filesystem read-only [ 96.676118][ T3696] EXT4-fs error (device loop2) in ext4_evict_inode:276: Readonly filesystem [ 96.690371][ T5] usb 2-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 96.710249][ T5] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 96.719061][ T5] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 96.727870][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.736518][ T5] usb 2-1: config 0 descriptor?? [ 96.921972][ T3702] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,,errors=continue [ 96.936698][ T23] audit: type=1400 audit(1718635848.680:449): avc: denied { append } for pid=3701 comm="syz-executor.2" name="loop2" dev="devtmpfs" ino=9199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.941423][ T3702] EXT4-fs error (device loop2): __ext4_get_inode_loc:4710: comm syz-executor.2: Invalid inode table block 0 in block_group 0 [ 96.974114][ T3702] EXT4-fs error (device loop2): empty_inline_dir:1806: inode #12: comm syz-executor.2: error -117 getting inode 12 block [ 96.987537][ T3702] EXT4-fs error (device loop2): __ext4_get_inode_loc:4710: comm syz-executor.2: Invalid inode table block 0 in block_group 0 [ 97.001228][ T3702] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 97.116693][ T2477] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 97.127233][ T3702] EXT4-fs error (device loop2): __ext4_get_inode_loc:4710: comm syz-executor.2: Invalid inode table block 0 in block_group 0 [ 97.142240][ T2477] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 97.143699][ T3702] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 97.154162][ T2477] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 97.165929][ T2477] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 97.167088][ T3702] EXT4-fs error (device loop2): __ext4_get_inode_loc:4710: comm syz-executor.2: Invalid inode table block 0 in block_group 0 [ 97.173031][ T2477] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 97.193726][ T3702] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 97.194417][ T2477] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 97.215459][ T3702] EXT4-fs warning (device loop2): ext4_evict_inode:304: couldn't mark inode dirty (err -117) [ 97.277312][ T3715] EXT4-fs (loop3): cluster size (1024) smaller than block size (2048) [ 97.281791][ T2625] EXT4-fs error (device loop2): __ext4_get_inode_loc:4710: comm syz-executor.2: Invalid inode table block 0 in block_group 0 [ 97.298528][ T2625] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 97.320838][ T2477] cp2112 0003:10C4:EA90.000A: Part Number: 0x00 Device Version: 0x00 [ 97.493940][ T3729] fscrypt (sda1, inode 1951): Direct key flag not allowed with different contents and filenames modes [ 97.501037][ T3720] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.511829][ T3720] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.519571][ T3720] device bridge_slave_0 entered promiscuous mode [ 97.528154][ T3720] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.535044][ T3720] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.542414][ T3720] device bridge_slave_1 entered promiscuous mode [ 97.544098][ T23] audit: type=1400 audit(1718635849.278:450): avc: denied { setopt } for pid=3732 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.611628][ T3720] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.618481][ T3720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.625593][ T3720] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.632436][ T3720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.655092][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.662520][ T18] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.685365][ T3741] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,,errors=continue [ 97.700857][ T3741] EXT4-fs error (device loop3): __ext4_get_inode_loc:4710: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 97.713939][ T5] usb 2-1: language id specifier not provided by device, defaulting to English [ 97.723804][ T18] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.724749][ T3741] EXT4-fs error (device loop3): empty_inline_dir:1806: inode #12: comm syz-executor.3: error -117 getting inode 12 block [ 97.743590][ T3741] EXT4-fs error (device loop3): __ext4_get_inode_loc:4710: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 97.756721][ T3741] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 97.766192][ T3741] EXT4-fs error (device loop3): __ext4_get_inode_loc:4710: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 97.779167][ T3741] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 97.788495][ T3741] EXT4-fs error (device loop3): __ext4_get_inode_loc:4710: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 97.801498][ T3741] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 97.811024][ T3741] EXT4-fs warning (device loop3): ext4_evict_inode:304: couldn't mark inode dirty (err -117) [ 97.827741][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.835971][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.842795][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.847300][ T2508] EXT4-fs error (device loop3): __ext4_get_inode_loc:4710: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 97.851654][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.863052][ T2508] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 97.871206][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.886565][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.899465][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.917463][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.935241][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.002027][ T2477] cp2112 0003:10C4:EA90.000A: error reading lock byte: -71 [ 98.031912][ T2477] usb 5-1: USB disconnect, device number 12 [ 98.086659][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.095144][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.115972][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.127724][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.147768][ T5] usb 2-1: USB disconnect, device number 11 [ 98.268608][ T429] device bridge_slave_1 left promiscuous mode [ 98.274599][ T429] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.283997][ T429] device bridge_slave_0 left promiscuous mode [ 98.290068][ T429] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.365961][ T3761] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.373054][ T3761] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.383766][ T3761] device bridge_slave_0 entered promiscuous mode [ 98.390787][ T3761] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.397658][ T3761] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.405894][ T3761] device bridge_slave_1 entered promiscuous mode [ 98.466418][ T3761] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.473259][ T3761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.480397][ T3761] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.487126][ T3761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.728272][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.737172][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.745572][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.753111][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.776988][ T9] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 98.789029][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.800244][ T1746] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.807090][ T1746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.827450][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.835929][ T1746] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.842772][ T1746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.856177][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.873446][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.906223][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.915343][ T3786] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 98.922503][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.926283][ T3786] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 98.948249][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.959979][ T3786] EXT4-fs (loop0): 1 truncate cleaned up [ 98.970682][ T3786] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,noblock_validity, [ 98.972456][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.019628][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.038175][ T3786] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz-executor.0: Logical block already allocated [ 99.050044][ T3786] EXT4-fs (loop0): Remounting filesystem read-only [ 99.056563][ T3786] EXT4-fs error (device loop0) in ext4_evict_inode:276: Readonly filesystem [ 99.126227][ T3806] fscrypt (sda1, inode 1968): Direct key flag not allowed with different contents and filenames modes [ 99.525932][ T3811] EXT4-fs (loop3): cluster size (1024) smaller than block size (2048) [ 101.163985][ T23] audit: type=1400 audit(1718635852.884:451): avc: denied { ioctl } for pid=3843 comm="syz-executor.2" path="/dev/cpu/0/msr" dev="devtmpfs" ino=9176 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 101.523296][ T3855] EXT4-fs (loop1): cluster size (1024) smaller than block size (2048) [ 101.552315][ T497] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 101.564967][ T429] device bridge_slave_1 left promiscuous mode [ 101.571177][ T429] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.592443][ T429] device bridge_slave_0 left promiscuous mode [ 101.598620][ T429] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.361209][ T3901] IPv6: sit1: Disabled Multicast RS [ 102.412893][ T3907] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 102.569736][ T497] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.579862][ T497] usb 1-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.590767][ T497] usb 1-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.600468][ T497] usb 1-1: config 0 interface 0 has no altsetting 0 [ 102.607036][ T497] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 102.615998][ T497] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.627456][ T497] usb 1-1: config 0 descriptor?? [ 102.798177][ T3939] IPv6: sit1: Disabled Multicast RS [ 102.851908][ T5] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 102.859307][ T669] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 103.113816][ T669] usb 2-1: Using ep0 maxpacket: 16 [ 103.134867][ T497] zeroplus 0003:0C12:0005.000B: item fetching failed at offset 1/5 [ 103.142761][ T497] zeroplus 0003:0C12:0005.000B: parse failed [ 103.148737][ T497] zeroplus: probe of 0003:0C12:0005.000B failed with error -22 [ 103.244803][ T5] usb 5-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 103.255024][ T669] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.265706][ T5] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 103.274448][ T5] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 103.283310][ T669] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.292866][ T669] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 103.301723][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.309519][ T669] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.317932][ T5] usb 5-1: config 0 descriptor?? [ 103.323088][ T669] usb 2-1: config 0 descriptor?? [ 103.360031][ T497] usb 1-1: USB disconnect, device number 6 [ 103.421535][ T3952] overlayfs: statfs failed on './file0' [ 104.167968][ T3977] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 104.246264][ T3980] overlayfs: statfs failed on './file0' [ 104.273484][ T669] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 104.280245][ T669] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 104.302529][ T669] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 104.309279][ T669] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 104.316354][ T669] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 104.332990][ T669] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 104.691599][ T669] cp2112 0003:10C4:EA90.000C: Part Number: 0x00 Device Version: 0x00 [ 104.735683][ T5] usb 5-1: language id specifier not provided by device, defaulting to English [ 104.967983][ T5] usb 5-1: USB disconnect, device number 13 [ 104.989338][ T3989] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 105.101216][ T4002] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.138781][ T4007] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 105.166653][ T4009] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 105.229723][ T669] cp2112 0003:10C4:EA90.000C: error reading lock byte: -71 [ 105.238114][ T669] usb 2-1: USB disconnect, device number 12 [ 105.392990][ T23] audit: type=1400 audit(1718635857.082:452): avc: denied { relabelfrom } for pid=4019 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 105.414419][ T23] audit: type=1400 audit(1718635857.082:453): avc: denied { relabelto } for pid=4019 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 105.458333][ T427] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 105.467244][ T2477] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 105.492370][ T4022] tipc: Started in network mode [ 105.497090][ T4022] tipc: Own node identity e0000002, cluster identity 4711 [ 105.504030][ T4022] tipc: Enabling of bearer rejected, failed to enable media [ 105.581005][ T4027] overlayfs: statfs failed on './file0' [ 105.593635][ T23] audit: type=1400 audit(1718635857.281:454): avc: denied { create } for pid=4028 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 105.667023][ T23] audit: type=1400 audit(1718635857.350:455): avc: denied { write } for pid=4028 comm="syz-executor.0" path="socket:[33654]" dev="sockfs" ino=33654 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 105.722738][ T2477] usb 4-1: Using ep0 maxpacket: 8 [ 105.790954][ T4037] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 105.851849][ T4040] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 105.906996][ T4042] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 106.004829][ T2477] usb 4-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=dd.3e [ 106.013674][ T2477] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.034174][ T2477] usb 4-1: Product: syz [ 106.040945][ T2477] usb 4-1: Manufacturer: syz [ 106.045514][ T2477] usb 4-1: SerialNumber: syz [ 106.065296][ T2477] usb 4-1: config 0 descriptor?? [ 106.488220][ T2477] snd-usb-audio: probe of 4-1:0.0 failed with error -71 [ 106.497641][ T2477] usb 4-1: USB disconnect, device number 7 [ 106.544652][ T23] audit: type=1400 audit(1718635858.224:456): avc: denied { mounton } for pid=4052 comm="syz-executor.0" path="/root/syzkaller-testdir2056491946/syzkaller.pBfWwQ/55/file0" dev="sda1" ino=1957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=sock_file permissive=1 [ 106.781951][ T4057] request_module fs-#! [ 106.781951][ T4057] succeeded, but still no fs? [ 106.894056][ T4059] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nombcache,noblock_validity,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,,errors=continue [ 106.981411][ T4072] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 107.527912][ T4087] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 107.539833][ T4087] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 107.548448][ T4087] FAT-fs (loop4): Filesystem has been set read-only [ 107.555002][ T4087] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 107.563618][ T4087] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 107.572295][ T4087] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 107.580903][ T4087] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 107.589583][ T4087] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 107.598731][ T4089] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 107.938272][ T497] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 108.046096][ T4098] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 108.086264][ T4111] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.2'. [ 108.180878][ T497] usb 5-1: Using ep0 maxpacket: 8 [ 108.310883][ T497] usb 5-1: config 0 has an invalid interface number: 233 but max is 1 [ 108.318848][ T497] usb 5-1: config 0 has no interface number 1 [ 108.331036][ T5] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 108.335010][ T497] usb 5-1: config 0 interface 233 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 108.358340][ T497] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 108.532420][ T497] usb 5-1: New USB device found, idVendor=0af0, idProduct=8201, bcdDevice=34.8e [ 108.545663][ T497] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.562149][ T497] usb 5-1: Product: syz [ 108.570507][ T497] usb 5-1: Manufacturer: syz [ 108.580345][ T497] usb 5-1: SerialNumber: syz [ 108.591474][ T497] usb 5-1: config 0 descriptor?? [ 108.733780][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.753833][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.763371][ T5] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 108.794109][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.814439][ T5] usb 2-1: config 0 descriptor?? [ 108.843399][ T497] usb 5-1: USB disconnect, device number 14 [ 109.162358][ T4142] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.3'. [ 109.268863][ T4156] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.280310][ T5] isku 0003:1E7D:319C.000D: unknown main item tag 0x0 [ 109.286870][ T5] isku 0003:1E7D:319C.000D: unbalanced collection at end of report description [ 109.295872][ T5] isku 0003:1E7D:319C.000D: parse failed [ 109.298061][ T4156] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 109.301379][ T5] isku: probe of 0003:1E7D:319C.000D failed with error -22 [ 109.310384][ T4156] FAT-fs (loop3): Filesystem has been set read-only [ 109.324029][ T4156] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 109.333001][ T4156] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 109.341799][ T4156] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 109.351105][ T4156] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 109.398312][ T4164] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 109.568845][ T497] usb 2-1: USB disconnect, device number 13 [ 109.772920][ T4194] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.787840][ T4194] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 109.796697][ T4194] FAT-fs (loop2): Filesystem has been set read-only [ 109.798031][ T4199] incfs: Backing dir is not set, filesystem can't be mounted. [ 109.803212][ T4194] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 109.810533][ T4199] incfs: mount failed -2 [ 109.819018][ T4194] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 109.831691][ T4194] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 109.840918][ T4200] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 109.991192][ T4202] bridge0: port 3(gretap0) entered blocking state [ 109.997507][ T4202] bridge0: port 3(gretap0) entered disabled state [ 110.009439][ T4202] device gretap0 entered promiscuous mode [ 110.015973][ T4202] bridge0: port 3(gretap0) entered blocking state [ 110.022189][ T4202] bridge0: port 3(gretap0) entered forwarding state [ 110.074922][ T4202] device gretap0 left promiscuous mode [ 110.080964][ T4202] bridge0: port 3(gretap0) entered disabled state [ 110.222658][ T5] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 110.446870][ T4239] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 110.656605][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 110.700850][ T4255] EXT4-fs (loop2): Ignoring removed orlov option [ 110.707687][ T4255] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 110.718791][ T4255] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,errors=continue,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 110.745435][ T4255] EXT4-fs error (device loop2): get_max_inline_xattr_value_size:68: inode #12: comm syz-executor.2: corrupt xattr in inline inode [ 110.759422][ T4255] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2221: inode #12: comm syz-executor.2: corrupted in-inode xattr [ 110.787527][ T5] usb 4-1: config 0 has an invalid interface number: 233 but max is 1 [ 110.795500][ T5] usb 4-1: config 0 has no interface number 1 [ 110.810481][ T5] usb 4-1: config 0 interface 233 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 110.820505][ T5] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 110.870031][ T23] audit: type=1400 audit(1718635862.525:457): avc: denied { ioctl } for pid=4268 comm="syz-executor.2" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 110.896903][ T23] audit: type=1400 audit(1718635862.544:458): avc: denied { set_context_mgr } for pid=4268 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 110.917721][ T23] audit: type=1400 audit(1718635862.564:459): avc: denied { map } for pid=4268 comm="syz-executor.2" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 110.918363][ T4269] binder: 4268:4269 ioctl c0306201 200011c0 returned -14 [ 110.949831][ T23] audit: type=1400 audit(1718635862.564:460): avc: denied { call } for pid=4268 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 110.969016][ T4275] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 110.999011][ T5] usb 4-1: New USB device found, idVendor=0af0, idProduct=8201, bcdDevice=34.8e [ 111.009127][ T4281] incfs: Backing dir is not set, filesystem can't be mounted. [ 111.016410][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.024282][ T5] usb 4-1: Product: syz [ 111.025426][ T4281] incfs: mount failed -2 [ 111.030354][ T5] usb 4-1: Manufacturer: syz [ 111.040729][ T5] usb 4-1: SerialNumber: syz [ 111.046219][ T5] usb 4-1: config 0 descriptor?? [ 111.171890][ T4291] bridge0: port 3(gretap0) entered blocking state [ 111.178168][ T4291] bridge0: port 3(gretap0) entered disabled state [ 111.188190][ T4291] device gretap0 entered promiscuous mode [ 111.194393][ T4291] bridge0: port 3(gretap0) entered blocking state [ 111.200623][ T4291] bridge0: port 3(gretap0) entered forwarding state [ 111.393739][ T4291] device gretap0 left promiscuous mode [ 111.400138][ T4291] bridge0: port 3(gretap0) entered disabled state [ 111.438756][ T2477] usb 4-1: USB disconnect, device number 8 [ 111.483177][ T4293] EXT4-fs (loop1): Ignoring removed orlov option [ 111.489461][ T4293] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 111.503917][ T4293] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,errors=continue,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 111.536449][ T4293] EXT4-fs error (device loop1): get_max_inline_xattr_value_size:68: inode #12: comm syz-executor.1: corrupt xattr in inline inode [ 111.549962][ T4293] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2221: inode #12: comm syz-executor.1: corrupted in-inode xattr [ 111.592809][ T1702] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 111.747595][ T4289] F2FS-fs (loop0): Found nat_bits in checkpoint [ 111.771439][ T4289] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 111.778086][ T4289] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 111.834318][ T1702] usb 5-1: Using ep0 maxpacket: 16 [ 111.945049][ T2477] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 111.955364][ T1702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.966318][ T1702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.977704][ T1702] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 111.989202][ T1702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.000019][ T1702] usb 5-1: config 0 descriptor?? [ 112.057075][ T4318] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 112.156418][ T5] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 112.187166][ T2477] usb 2-1: Using ep0 maxpacket: 8 [ 112.338832][ T4327] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.351373][ T4327] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 112.360034][ T4327] FAT-fs (loop0): Filesystem has been set read-only [ 112.366432][ T4327] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 112.375090][ T4327] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 112.383683][ T4327] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 112.392467][ T4327] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 112.401426][ T4327] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 112.410320][ T4327] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 112.419382][ T4329] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 112.468552][ T2477] usb 2-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=dd.3e [ 112.477406][ T2477] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.486613][ T1702] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 112.493443][ T1702] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 112.500156][ T1702] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 112.506895][ T1702] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 112.513677][ T2477] usb 2-1: Product: syz [ 112.517647][ T2477] usb 2-1: Manufacturer: syz [ 112.522100][ T2477] usb 2-1: SerialNumber: syz [ 112.526811][ T1702] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 112.533786][ T2477] usb 2-1: config 0 descriptor?? [ 112.542554][ T1702] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 112.559045][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.569894][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.579464][ T5] usb 3-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00 [ 112.588333][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.590467][ T4331] EXT4-fs (loop3): Ignoring removed orlov option [ 112.597077][ T5] usb 3-1: config 0 descriptor?? [ 112.607245][ T4331] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 112.621230][ T4331] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,errors=continue,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 112.660568][ T4331] EXT4-fs error (device loop3): get_max_inline_xattr_value_size:68: inode #12: comm syz-executor.3: corrupt xattr in inline inode [ 112.673929][ T4331] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2221: inode #12: comm syz-executor.3: corrupted in-inode xattr [ 112.690456][ T1702] cp2112 0003:10C4:EA90.000E: Part Number: 0x00 Device Version: 0x00 [ 112.699314][ T4340] incfs: Backing dir is not set, filesystem can't be mounted. [ 112.706700][ T4340] incfs: mount failed -2 [ 112.706971][ T3761] ================================================================== [ 112.718559][ T3761] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xc1f/0xc30 [ 112.726364][ T3761] Read of size 4 at addr ffff8881d333d000 by task syz-executor.3/3761 [ 112.734342][ T3761] [ 112.736527][ T3761] CPU: 1 PID: 3761 Comm: syz-executor.3 Tainted: G W 5.4.274-syzkaller-00002-g6f97bd951d82 #0 [ 112.747887][ T3761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 112.757872][ T3761] Call Trace: [ 112.761008][ T3761] dump_stack+0x1d8/0x241 [ 112.765174][ T3761] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 112.770807][ T3761] ? printk+0xd1/0x111 [ 112.774715][ T3761] ? ext4_xattr_delete_inode+0xc1f/0xc30 [ 112.781495][ T3761] print_address_description+0x8c/0x600 [ 112.786868][ T3761] ? ext4_xattr_delete_inode+0xc1f/0xc30 [ 112.792333][ T3761] __kasan_report+0xf3/0x120 [ 112.796757][ T3761] ? ext4_xattr_delete_inode+0xc1f/0xc30 [ 112.802227][ T3761] kasan_report+0x30/0x60 [ 112.806390][ T3761] ext4_xattr_delete_inode+0xc1f/0xc30 [ 112.811688][ T3761] ? check_preemption_disabled+0x9f/0x320 [ 112.817254][ T3761] ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0 [ 112.823152][ T3761] ? __ext4_journal_start_sb+0x295/0x460 [ 112.828617][ T3761] ext4_evict_inode+0x1378/0x1ac0 [ 112.833483][ T3761] ? ext4_truncate_restart_trans+0xe0/0xe0 [ 112.839117][ T3761] ? wb_io_lists_depopulated+0x85/0x170 [ 112.844495][ T3761] ? ext4_truncate_restart_trans+0xe0/0xe0 [ 112.850141][ T3761] evict+0x29b/0x6a0 [ 112.853875][ T3761] vfs_rmdir+0x24b/0x3c0 [ 112.857951][ T3761] do_rmdir+0x2c1/0x580 [ 112.861944][ T3761] ? d_delete_notify+0xc0/0xc0 [ 112.866542][ T3761] ? _raw_spin_unlock_irq+0x4a/0x60 [ 112.871577][ T3761] do_syscall_64+0xca/0x1c0 [ 112.875916][ T3761] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 112.881643][ T3761] RIP: 0033:0x7f1bb2b21707 [ 112.885896][ T3761] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 112.905340][ T3761] RSP: 002b:00007ffddd9561b8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 112.913581][ T3761] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f1bb2b21707 [ 112.921393][ T3761] RDX: 0000000000000200 RSI: 00007ffddd957360 RDI: 00000000ffffff9c [ 112.929205][ T3761] RBP: 00007f1bb2b7e6c6 R08: 0000000000000000 R09: 0000000000000000 [ 112.937019][ T3761] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffddd957360 [ 112.945014][ T3761] R13: 00007f1bb2b7e6c6 R14: 000000000001b71d R15: 0000000000000007 [ 112.952820][ T3761] [ 112.954982][ T3761] The buggy address belongs to the page: [ 112.960475][ T3761] page:ffffea00074ccf40 refcount:1 mapcount:1 mapping:ffff8881ebda31f9 index:0x7fc9e53c4 [ 112.970097][ T3761] anon flags: 0x8000000000080034(uptodate|lru|active|swapbacked) [ 112.977704][ T3761] raw: 8000000000080034 ffffea00073f8d48 ffffea000768a6c8 ffff8881ebda31f9 [ 112.986069][ T3761] raw: 00000007fc9e53c4 0000000000000000 0000000100000000 ffff8881eecea000 [ 112.994474][ T3761] page dumped because: kasan: bad access detected [ 113.000723][ T3761] page->mem_cgroup:ffff8881eecea000 [ 113.005769][ T3761] page_owner tracks the page as allocated [ 113.011316][ T3761] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|0x1000000) [ 113.023478][ T3761] prep_new_page+0x18f/0x370 [ 113.027925][ T3761] get_page_from_freelist+0x2d13/0x2d90 [ 113.033285][ T3761] __alloc_pages_nodemask+0x393/0x840 [ 113.038480][ T3761] wp_page_copy+0x20f/0x1820 [ 113.042910][ T3761] handle_mm_fault+0x18cc/0x4990 [ 113.047783][ T3761] __do_page_fault+0x509/0xbb0 [ 113.052375][ T3761] page_fault+0x2f/0x40 [ 113.056363][ T3761] page last free stack trace: [ 113.060879][ T3761] free_unref_page_prepare+0x297/0x380 [ 113.066174][ T3761] free_unref_page_list+0x10a/0x590 [ 113.071205][ T3761] release_pages+0xad8/0xb20 [ 113.075633][ T3761] tlb_finish_mmu+0x177/0x320 [ 113.080145][ T3761] exit_mmap+0x2dc/0x520 [ 113.084225][ T3761] __mmput+0x8e/0x2c0 [ 113.088042][ T3761] do_exit+0xc08/0x2bc0 [ 113.092035][ T3761] do_group_exit+0x138/0x300 [ 113.096464][ T3761] get_signal+0xdb1/0x1440 [ 113.100802][ T3761] do_signal+0xb0/0x11f0 [ 113.104882][ T3761] exit_to_usermode_loop+0xc0/0x1a0 [ 113.109916][ T3761] prepare_exit_to_usermode+0x199/0x200 [ 113.115297][ T3761] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 113.121020][ T3761] [ 113.123190][ T3761] Memory state around the buggy address: [ 113.128661][ T3761] ffff8881d333cf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 113.136559][ T3761] ffff8881d333cf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 113.144459][ T3761] >ffff8881d333d000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 113.152352][ T3761] ^ [ 113.156260][ T3761] ffff8881d333d080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 113.164160][ T3761] ffff8881d333d100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 113.172053][ T3761] ================================================================== [ 113.179951][ T3761] Disabling lock debugging due to kernel taint [ 113.186783][ T2477] snd-usb-audio: probe of 2-1:0.0 failed with error -71 [ 113.195677][ T4340] bridge0: port 3(gretap0) entered blocking state 2024/06/17 14:51:04 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 113.201518][ T23] audit: type=1400 audit(1718635864.830:461): avc: denied { write } for pid=344 comm="syz-fuzzer" path="pipe:[9807]" dev="pipefs" ino=9807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 113.201935][ T4340] bridge0: port 3(gretap0) entered disabled state [ 113.231550][ T4340] device gretap0 entered promiscuous mode [ 113.237224][ T4340] bridge0: port 3(gretap0) entered blocking state [ 113.243446][ T4340] bridge0: port 3(gretap0) entered forwarding state [ 113.250220][ T4342] device gretap0 left promiscuous mode [ 113.250922][ T2477] usb 2-1: USB disconnect, device number 14 [ 113.255731][ T4342] bridge0: port 3(gretap0) entered disabled state