last executing test programs: 30.196109938s ago: executing program 2 (id=691): r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x198) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) recvmsg(r1, &(0x7f00000006c0)={&(0x7f0000000240)=@can, 0x80, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/165, 0xa5}, {&(0x7f0000000440)=""/240, 0xf0}, {&(0x7f0000000540)=""/17, 0x11}], 0x4, &(0x7f00000005c0)=""/251, 0xfb}, 0x100) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) io_setup(0x7ff, &(0x7f0000000100)=0x0) r4 = eventfd2(0x8, 0x0) io_submit(r3, 0x1, &(0x7f0000004500)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x1, r4, 0x0}]) write$eventfd(r4, &(0x7f0000000140)=0xfffffffffffffffc, 0x8) read(r4, &(0x7f0000000480)=""/82, 0x52) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x2687610f}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000055}, 0x2000000c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f00000007c0)=@vmx={0x10a, 0x0, 0x2080, {0x40000, 0x26000, {0x1}, 0x1}, {"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", "e0f235061c86b9d4186a6edef215dc242420a6ced45aad2cfcc69f6af7f4c43622dcd23e36d1fd340d8d38fcc8f34b30e1ab7dd47db52a2bee28a4d5a281213a9f43e82bd6289a07ce547ea5cdc605ad9426e4d21d648dae7ed70cf0b51d8058acf9a7a2fd4be9db78cd313ff97c3785442895a1879210a6873c8fa9d986f2cc4ae39a2d96b21d72aede1b476d43bcb99e910fe7b6ca25b0a6761e0c53f155adecc8b9ac004d8244fcb8a6e2f27272235944e3cd995cf38ea4dfc47713a412c459eaf1bc82cdbd967dd5ccf566cda89dcca234ea7b0b9f077db8cac6000ec6a3a91f2158ecd673fff40e5cdfc36ea9c77d34fcd83178aa08846572036868fe010f759f6c382e2b562f9899658378de6f79c70e5424d4577683e812b1183f56ce58d63ee12ac7f1127d6e4acf2991608b59fe274002c26c98b535b3852c39171e55d0b0ae03526e10e0d20bb58268e5e91786e68af68986833c6e9e0bc344ff24fae84013122486d6205f26cc58efc39fc26f5f10e9950af808e830b8e2c375a12612b6ded315b8c0b16409af87ff430f53f863e06890c29ddf449ca445dff9f2a5b7d3758c7a2e51d88aa637848b736f23725f73c4e5e11ab90d9a8ea34f573f0c008dd561efc5ad838307cf004ee81039f8891c8a00f2525e48373497fd98b248c5d50dfb1b9bd485c061b7dd4163948635359f5117e4de99c6eb7f77f6b3563e3b7bf2e83febf9221d3cd70b3a7cb2059c6fceb02080594c22dac2e254c7d0fbe0a3554fa9a84c8dc895d8a5725ddf10c78caa49803c4b0bb6740aadee3257a1a68bfa1c26977916ac2deec5c97bfcbe7527f3853ce018787101a3bc3a82c6dc4d8d0310b05e9eeeab4c9120a0682345a0b7146dc051829cc0c91ec01d26e57c95ad95e1e6c9188540e4f9ac2df4564ca3e73493fd40a6e9563aab30a839e2523c233a08039891f25de9696b4b8c8e188989f1da1a29ac29e57b5b5505e41f68cb145cbeadc15ae7eb4c930adbd59c67a2a2146771954ce9132de155f31b33f4d42620cea772a0307a8fa47753b7364458ad8bd820cb424ba3ccb4a833ee4f5d3fe236ecd35be19640a9def2ea190c9a2108144edbcd8fd9e7954f7b1efed59df659f19b6eb7fe2e1818418f8af2937330ca1e60efb02604588f96e66c1507ff32207880bc80315a6895377957b6b08b9e7fbc72c72f1cdf88b09657c4ca8b725ee26021b0920fb111d7851c9aa9fc8deaa1b1d76827e186015d65d1776ec1fa8482e2db5ed2cef1e78ff2af21a97fe4a4d5b0584e7f7f4e39c51132c34b4a27fc52eb86020e2179f50bbc141692516939c71ac38f87d4ff9069adae6a6f8677589c9c1660f0490b4fb1d44a18a5a68ec7dbfef2c8a6c94317a32e577f7cfbae1e80762a1f3247b1f2c2b4e199026f2c57b48fb0914551e4cd1ed58371465ced18cd39060671a4ccf1db503f1ca211c2bcb2a61bceed14ee30ce4c2e4a29260d27f76a0314895013e1b6959e642e38ce2612e4f28dc11646654caf3e283d3a59483dc63afcc435e6660f6dd749009b3d35d1718f659a19f746e70c2d2cadf4eb069067fc5dc051391b5fbcd0d376d027e12c9380a209de328cd3bad9e36ba4dc3140f15b80b4b5aa1cd902d82e577f88862ecc6218aade8465f23de0e2784a266f9ef1d6f0c8952b7c288bdaaec00ac04ef0d727671b86937a99c7f697dc6f9ef73cd7cb212d76804c228a4d178eb5272f6d0a5d67e38d0ad46d72f171fe213b3c5dbde5bbe12c0927114f5c4cd6c99f965314746ac61c9deb9ef35d1b7b54ac5091bd92482237aece37892010ff5ee67709a7532fb39b89484c3056243b0bddd7197054dd29d5003ac4d92803e691c9b03c5edb9961726340c20c88ba97230cf446e18c642ef290d60ac403f55e819307d315e7053e0fd9b31ab8a0c5995edb1f6cbe44eb46305aa025daf647394716f41bdf42c9ed9a38ce6bdbdacfa813c680d3c80238a038f74acd6345cb77ded5a750a0e00ba6b90d39b2c06fed3557b1a9ffaf88e3490446199c6b94979204e9a52c10b8060ca71ddc127f4fa5393268a2af1288b977cd986b00b562a0936a5940a9143ff203b478ddb1f301bcd88839a91148683035d4759ac71c939af0e2c611ecb60b643a2f65cf384313a896fdc6f281d916828c3f12a9a8b30aef6ce58e736a554c1a1d22c8177ce5f3909776b783141f084479bfea3b1c9748fbcac9d2b8d50c39faa66ceca3691b59a5ff95b04926667d0ee0136526f4a3a58b29c47ac083f772d1b512bfaeab8e3549514c996041d91c59a90b00b4035ad443d75b1b8dc5888d3200356129ed5324206e476f0d5e1ff4cb1a007bef64093f0907773ad964c556c34ee79d43fa0b8b8306d126126d8a9da4418d1f1ca689097089738c831a8f1523fd414a2e26ca98418c7d0b790c286e795746c37d98e352c6756113943630b59198a9596c25d999cd44709b9a310494f4a7add052e08922593b610f67767461120eb93967d7a8ff0ce516526402c3a6d3fa66ab8d5a13f2d4b2564bb7caa84131091fbaab709f4ae65f0bdcca4a367679909d6eeba1c9fd8245bea5248d7186ebd1839457ad0d08461c06052f76bac71a27af94fef3c6672f6f9f2b035e9bd0442a7dff041a51be21dfd5140c7e163f950964e1f638cc9f34a838c3a3089409d0f433534ce45a7e0f4eb43334fe1965b6070070250215560ab137f7ab6b3ab8553e7e403efcedc3d72c136c81bbf12984b5debda807fd00ea0499d9fa285590dbb41a403ad5474fa3ce6492f8425e7a5b5457e170081d12d289a27226594ff25c1490152e5872b3fbd93ce2e75d396855ca8ff426d06ba511ac1917eb3a12103baeb5e783124f7757b0ed0a0e17ff57aa1755d3d6d36c3f9110cebb7e75bbc9b27b1742bd0daab82c061af9fbc95262b8ffa18aba61d33fde50b84b85df8a29792d087a20dea386d50a7e68b76df6a2bcbf471d5b7440a8f829e317f2e6821e024a8d7fcd42076efe2c3591acdd741e5d843c26a7b724412b066d487f61ca305cb7d27c5ddc2c5d36ab60bcd8c210d9828fde6e70e42d5549d9216d084138140b23f4a4da405cbb569f62811e11e9499969a4a435e1a278ed9ba6d4ef782ec2df97758d69363d4652369efa1ad445ae39e7b4cf4495a98b27ffe9f25880cf917a91b581cfc32d3e8019f8b0d1464d1b0c5d90807938987bba72141647acb4fcb73c68d3ee315ceeabe2d32c8576d7b751c8ced28e0d1bbf00ca3c71249d2c2254eb6284faa06baecb0f1b48c8a7e43521f93e95dba05f702d8d1aaf302b7ee4fb62580eb094faa1844eec537c89737fd026fe5a5aa901fcc1371ae6df2cce09b175f8aef503734d8e0e7b471ab58c551868f51bd9e034db205578ec5c551ea6277c3ee89746020aa036e23893b5d744c1fa26bd1e27d9aea3f551844a4a48fcab0623361b7eec74724fdf51e3c208523cbbb7f297a0a88b2af5cb65dfb9e22e741768a9be86a0c358c2b0b25206b8c3cc44796cc536d672ee8afa4102afdd15a26c3b01b49e14b9dadb321ef071e586987b01da83e51a38f0b710a31c0cffa3598a9dce7c67fc6fa7cede95d138d639b295fa10dbeb3146f345bbce55da06b36b6c0909a7d55cbf8e655d35b383188777accdd28d18b23e376e8142a1179a4049b20e6ded4d535b4a6a6f010d6993d4af8a567ede1c390b4d9e65d88d8f9aaf2d860e816da92159acaf4228fdde8379200649cf826143055d5dcaf9bdd57f3fd130abb328839860e13b4e73b6afb7d7a5c907f9496b86e05b598168171ede5172ca74469cc2adafb8225e09f240ec05bbf2247eab5c27e59d5567d13765e00b9dc93a84349e0ea7b85f87774354d73fb2b03d1061e3c8cbcac50b2f141d36157b9ec0d649f1930c1d4e47d304138860a580dbabe5e1f35d93fb493a5f2886f1a98d1fdb1be0a070d752382eb50655980cfe2fd3b01edfe90b4ea3ce0e00fab5d0272363471832847d923fd6a29b88409b203c4d9e516183be7857b5b6821593182d2d9d95ba5632572f1e5388ef33a69dd93288a685c90ece5e80b7adc1654a11175e44b03a0ae5ee20caeb4e6546eb77fc589c8e88692123e92067c62900d865838b446fee0f0e1579a592a1a20aa03810c5875488f4c6eefcea7e9e3594b239fdd7b88e440c0a2e48acfef28b9daf787025ceef9dbe6fe7d3083d35c1499d7bb4a019821fa9b5f3189d8187c3bbf97492e41365697a2ffc304ce3cd61faffbcf199d55763ee6901adfe9ee5eb61f80fa15cdffe239f37026fd3911d4d0f3367c8b6f62ad25565ad724c2dfc687bc2ac617fb67bc46bca66a2b717e79734c9af74a7ee5a50e237abbb01f6d4c7c4c7f94a94e9991d8a210f77d4428580b12aadd621f0ebb20a3b5ff09748279c08ad0e1a08b182b0f246ea67d33b5f87928c313ba7afefa2f571ddadf452ef84fa18e00b273930e280fe2aaaef20c65519b15880050072eb48f886811ed3ebdeb178853355185c222c477d97bb47aa3be35452477eb3d5a8e33e305dfdf7e8320a433d8f7cb6d4c8505aa894203a8d8c3acb3586f2927810f66b1f29fc061bb93b6aa4c483227bc5240612bd125b5706038d2a1f460c97fdc95c6b4ba403928438a0c9c4ebe240dd4449c2831516bcc43dd4c283e8f8a1abd258596079c6d10a52cb268b47625251b7f2bb14448493dd73188be6e6b4558a6c232aed1afb6bbfd7e67aed8509d1221bacfdb6ea15130bdc4065ba20ddda2d2aa870564bd8550de156ab888207d1df0f9d37a92af771ad8db23b2df524912220ca9822968841b4209f8b610f57cece8b00c0817b0253ea39cb40046f6f516266fe906a8091bc4f95b4d294cea351d36f0670de36d4560072caa5b2d0ebd2b25583769cea4436dde2812d85cf24399eb6b19cb114abb94d7d1b5a9bd42df0dfae3e7b73806fa0d378b2c78e22811be2321a543f91c22f1c92a0ed2f09f3118ad43980b850b3fd62a63c9defa79a958bc4b75855ca43382637729ea07c79264de772916f8108a15a73b544e752d8965f1bba2b629eae871ba8cd80c7a5ca81fb07ab0b5896cb474ed6e7ab70fa4b1ed0ba685477d0e75c66bf93d813c3dc6dbf8b1d59fc55d0017503ece2c2991e007a652c1843e768256541481f627eacda2645bd1084d6275fed703a13bbe471e8fded866d503a7e20757dd014334f69a8b00637bbc17750ca17b13315d4ed098cdc84757664ac05126d7a428bf484b9565b0fcff607265d705eae80e4ae64529bc5f83feb4ad749ccc96a14bdd534bfc62f10945e9004042fb3665e2782d5050f71ded8e86a9446c4ba85d133cd8e946c63dab99c73137ca1e19517d4424765163dd152d13b00fbefe0b6f9831ca37c4378c9f515564db275426a75021b56514277a79007b2aa0e94dc26a93c3779cbe98dcb3ae42769b967c2854c9204ea208fa5021a691db3eed24bdc0007f27d9249e72c25b4f87a636c95068857c3f504b9b1094ea06f1212943f49c66fcabb3acad3d2be8d910ab973773168d466c4d1fe921900d254086904d306fb21f96f3afb55201874874ba53df75cf7bd993c218bc45d03eea6d78b5ba65717ed35b2c836b685f4cbc13c0213f3c325cb0efc569865f9467821fe980bfe10e9aedad2f675bc8f916181d318fdec68f575cc2d038d512fd015da9357ee697ea66296f12768766f6e4369fb50955a6f57650170df68dc694a97d248697c13ab3bcaa42e1a186bc048eebb7f"}}) accept4(r1, &(0x7f0000000700)=@in={0x2, 0x0, @loopback}, &(0x7f0000000780)=0x80, 0x800) ioctl$FIOCLEX(r0, 0x5451) 29.278971149s ago: executing program 2 (id=697): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x20008884) setreuid(0xee01, 0xee00) add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x0}, 0x5000000, 0x0, 0xfffffffffffffffe) 29.169169999s ago: executing program 2 (id=698): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1001064, &(0x7f0000000780)={[{@nouser_xattr}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@dax_inode}, {@nouser_xattr}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x40082, 0x11c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, 0x0, &(0x7f00000002c0)=0x1e) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0x2) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x0, 0x0}, &(0x7f0000000680)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x4}, 0x0, &(0x7f0000000080)={0x20, 0x82, 0x3, "418020"}, 0x0, 0x0, 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) prctl$PR_PAC_RESET_KEYS(0x36, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = syz_open_procfs(0x0, &(0x7f0000000680)='cmdline\x00') preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000040)=""/3, 0x3}, {0x0, 0x3}], 0x2, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 28.577223191s ago: executing program 2 (id=703): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000a00)={[{@resuid={'resuid', 0x3d, 0xee00}}, {@nodiscard}, {@noblock_validity}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xfffffffffffffff5}}, {}, {@noinit_itable}, {@jqfmt_vfsv0}, {@mb_optimize_scan}, {@sb={'sb', 0x3d, 0x4}}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x30, 0x31, 0x62, 0x68, 0x35, 0x65, 0xf9], 0x2d, [0x38, 0x63, 0x38, 0x36], 0x2d, [0x4, 0x30, 0x35, 0x31], 0x2d, [0x38, 0x61, 0x54541d8287feb009, 0x34], 0x2d, [0x34, 0x31, 0x30, 0x34, 0x65, 0x30, 0xba2855c55b40536a, 0x31]}}}, {@audit}, {@flag='mand'}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000500)='./file1\x00', 0x1805a, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=0x0, @ANYRESDEC, @ANYRES16=0x0], 0xff, 0x10652, &(0x7f0000000f80)="$eJzs3E1vVOUXAPAzFCjlzx+J4cXEhTcxJm3iNEwpRGKiqBA1AUJ8WbhRpzOXycDM3NoZhspGF5q4cOGXYGfcuPATuPF7mBjjRhN3Gsx9KSkEoZThpfb3Sy7nuc8898x5JjSdM5PeALatA8mff9Rif8xE7JyKiH0R+Thq1VE4VYZnIuK5iNix7qhV8zcndkfE3ojYnyePmKrW5A9998kPf4+vnf3q+su/fnjy+u+1x7drYFK+2eC6V287fyEi+svl+Gq/jFmnjJeq+ea4W8T+4riK5QP9y9V5Vsar6VKR4WpzbV2ziMc65fps+cowjxd7zVYeO92LxfzyoHzC4bizlqe44FJzpThvp0tF7A6zInaulXWtVvHacFTmaVf5Pi3Sx2i0Fsv5dDUt97N8uYitwaiaL/Nm7XQ1j+MqVk8XrazXLupY2uCLvAWd7Q6urCbjdGXYzQbJ8fnGS/ONE/XGStZOR+livdlvn1hMZju9fFl9lDb7pzpZ1uml862sP5fMdlqteqORzJ5Ol7rNQdJozB+bP1o/PleNXkzePP9+0msns3l8vTu4Mur2hsnFbCUpr5hLFuaPnZxLnm8k7567kFx458yZcxfe++j0B+dfO/f2G9WitbKmi/8To3QxmV04urBQbxytLzTmHnT/+e/IrbH/m2VNcP/wQLyTBLhv6/r/0P8Dj8q/9P8z69dsp/5/Wv9/1/63/2y5fov3vzOb3b/+H+7AO0kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG3r513fv1UMDpTn/6vm/19NPR0RRyKSwxFxKCJu3MFU7L4l58GIqFXjO63fdVsNP9aiyJBfM10deyPiVHX89dTDfhUAAADgv+vbn774MmIqHxb/vPK4C2LTdt7/JdWHNnsmVULtbnXc/pnPPR0skq0+cFWlQ2spJ+JwvqEDv00o25GI2LHv4wllu7fPqx/3m2HPulArw45HVg0AAPDI3NoJbKKLBAAAYIv4+nEXwMRt6NvW2rqV1XfB02WovhCcueUMAAAAeDLc+Ow+FtceYiEAAADAZG32b3WL/n+D9/+Ljd7/7xf3/wMAAIAnSnn/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4B927idHiSCKA/CDtp0Z/8SJmYEjeAVWxiULDuERXHoAvY07jmBMCOfAnUcwYCiKBaSNQlfDQL4vabq6Uv3rB6yqCxoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC69LOejr/Nv3xtm7P8vmqlzLsBAAAAmizq6Tg17jfHL3P/69z1NiKGETGIiMeIaJq7V/F8J/MhInq53TS+3qvhR0RKWJ9zk7cXEfEhb7/fdP0pAAAAwPWaz0aTiGrdTC/v/zLu5qRVcax3hw3PN21uS10+3fJ5VirtIYV9LpT2uI0sYhAR9f2vQmnDiOi/+lgobe3uXwOqvNv57tNBb7PrHxQHAABchGpnV2z2BgAAwJPz6dwFcBr7C71pvTb/Fj+vBW9X+pfpD/l3zecBAAAAl6N37gIAAACAzqX5v+f/AQAAwHXbPP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALi3q6Xg+G03a5ixX/++2oe+oi/bbVg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAH/bnJYVhGAiiYOcf3UnkZDm8abDBC6+9cRUIHjMIIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4ltt6ct/i0fgleXbaeHU8k7y7any6anw7bIxemMn/8IW9cc7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBhf+5OIASCIAz2nf85LeYfljRoDCJUwcLHDPOwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8xu9++T8xNc4kc6eNpeORZO2qsXXV2HvQOHow3v4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2J9724SBMI7Dry+JErfJCOmtBGagoUIwAh8SkiXPwAAsRENFa7EIrAASnGs6U/A8zf9XXHEvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBrujx88RYRRaQuU6Tx5uf0HhEfkbZtO/q8ZbE7H5uve872h0nO75j+lhFRRtHHOQAAvau6zbFa18u/vP95B3mHeat5Uy+e+WkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Mq+3bRE1cUBAD/jvKiPi4dn82zaBAW6qWnsbYTZBkYQbVy0HHQSaSwZDVQksG8Q9AXa18ptn6Fl4KKgaBGEC4sI2hQzc0evNpm9eO/U/H5wvP97jnPu+YsM/OecAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+CFb62GkE2dCCPlY3LS5vTbd7fr2/dP/O+36k9xCfM5cNM+NuXrtTHKp9Jy7++4XV1ZvVuv1WuMIg8EEn5VYUAgh7Bt69rqdZ4+sMIXgt+ee/XP+bYbSXsZwCKHLUMj+3IRJvzMBAPC3y0etWde/zG9MNvsylRA+P9xb/4/G4nDI+v/jo3uX48+K1/+lxDLsGS/+/cZAcWl+obi4snpqbr46W5ut3SpNTJw7X754YbxUbH1WUuz3T0wAAAD4VYWoxev/gcrX+///xOJwyPr/zpVrx5p9Q9Frsoep/wtHlWnv2t30S3slAAAA/e2/4x/eZbr0ZwqFsFxdWmqU2j937seXq1OhMZ7CUr9vau/tYNTi9X+2ktLaAAAAgERtrWdGQggbnfuZ6Np1/39s93Xx/f/nD3JX43NmQwjD0f7/6enb9ZlEMul9SXw/Oe0cAQAASNdw1OL7//nW+f/czu8MhBDGTrTjTu/m9lrrXP9B5/9HTz5+E39W/Pz/2agvn0yaKRg4eLTc/nu0ruUQcuXEFgYAAEAfGopas/5/lQ+TjU/3LxUq/fgtfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgCzt2jNJAEIUBeJLJaiUKgo2NJxDtrAIWgvcQBcEjeAXv4BXEe2wpWlpLCrGwlZmd0SWYQtCs6PfB43+BTPYlVd4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwNbPDjz6GEEalH5e8f748Sfkwl8nTS7uVKvTO8bnRwdATAAAA8B/EUsljc3uccjzN+39T35N2/uu1rq/7/PzeX7Pu/qm2493r+4M2uuekDz07vzjdW9o3/D0W3YWsLz5y08Ukn853L7FewmzOmvx7jq7a9mglt6s/MDQA8C12a5am/h9KuT/kYAD8ZTv9F5NSobf/x+kgcwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAs1VsAAAD//2vnZaw=") r0 = creat(&(0x7f0000001740)='./bus\x00', 0xa1) mount(&(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000980)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980600000000001800028008000700ac14140094ba128e3fbad4f26c44878b0d22db1a71dbe752e00408d77add88eb6e6ff715980518da72796ee279c8936254c1e7866452c91f73f9522c91aae3be1a6b2a734f24aac0eab19fddbecb0563"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r1, &(0x7f00000003c0)="11eb534b", 0x4, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r5, 0x1, 0x4, 0x6, @local}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000001400)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48040}}], 0x1, 0x4004080) recvfrom$unix(r6, 0x0, 0x0, 0x2, 0x0, 0x0) r8 = open(&(0x7f0000000100)='./bus\x00', 0x66942, 0x14) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="8f", 0x1}], 0x1, 0xb, 0x0, 0x19) ioctl$F2FS_IOC_SEC_TRIM_FILE(r8, 0x4018f514, &(0x7f0000000080)={0xfffffffffffffffb, 0x3, 0x2}) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2, 0x0, 0x20000000}}, 0x2e) getsockopt(r9, 0x111, 0x3, 0x0, &(0x7f0000000080)) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) fallocate(r11, 0x0, 0xfff, 0x9) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="490e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008200000b7040000000000008500000033000000850000009e00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r13, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x15, 0x0, 0x0, 0xb, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 28.084872904s ago: executing program 2 (id=707): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_clone(0x20021000, 0x0, 0x0, &(0x7f0000001040), 0x0, 0x0) 27.667165941s ago: executing program 2 (id=709): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000001c0)='./bus/file0\x00', 0x1208002, &(0x7f00000005c0)={[{@grpquota}, {}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@noblock_validity}, {@dioread_nolock}, {@noblock_validity}, {@debug}, {@noauto_da_alloc}], [{@appraise}, {@fsname={'fsname', 0x3d, '\'--/.('}}, {@smackfsdef={'smackfsdef', 0x3d, ':'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x64, 0x35, 0x65, 0x35, 0x39, 0x5, 0x36], 0x2d, [0x38, 0x63, 0x32], 0x2d, [0x32, 0x3d, 0x38, 0x39], 0x2d, [0x31, 0x39, 0x61, 0x34], 0x2d, [0x65, 0x61, 0x66, 0x34, 0x30, 0x63, 0x66, 0x64]}}}]}, 0x1, 0x5f2, &(0x7f0000000bc0)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x1eadc31, 0x0, 0x7f, 0x0, &(0x7f0000000080)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) getdents(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, 0x0, 0x0) 27.386507915s ago: executing program 32 (id=709): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000001c0)='./bus/file0\x00', 0x1208002, &(0x7f00000005c0)={[{@grpquota}, {}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@noblock_validity}, {@dioread_nolock}, {@noblock_validity}, {@debug}, {@noauto_da_alloc}], [{@appraise}, {@fsname={'fsname', 0x3d, '\'--/.('}}, {@smackfsdef={'smackfsdef', 0x3d, ':'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x64, 0x35, 0x65, 0x35, 0x39, 0x5, 0x36], 0x2d, [0x38, 0x63, 0x32], 0x2d, [0x32, 0x3d, 0x38, 0x39], 0x2d, [0x31, 0x39, 0x61, 0x34], 0x2d, [0x65, 0x61, 0x66, 0x34, 0x30, 0x63, 0x66, 0x64]}}}]}, 0x1, 0x5f2, &(0x7f0000000bc0)="$eJzs3c9vFdUeAPDvTH/QUt5rIS/vPd7i0eTlBZL3aGmBF/LiAraGNPgjbtxYaUGkQENrtGhCSXBjYtwYY+LKhfhfKJEtK125cOPKkBA17DTxmrl3pvTH3P5uB5nPJ7n0zJw7PWeYfnvOnJ4zN4DaGsz+SSMORsR0EtGfzC/kdUaeOdh636Of3zmfvZJoNF74MYkk31e8P8m/9uUH90TE118lcaBjZbkzczcuj09NTV7Pt4dnr0wPz8zdOHrpyvjFyYuTV0f/N3rq5ImTp0aObeq8bpbsO3v79Tf73xt7+bNPfk1GPv9uLInT8Wz+xsXnsV0GY7D5f5KszOo7td2FVaQj/zlZfImTzgorxIYU168rIv4W/dERjy9ef7z7XKWVA3ZUI4loADWViH+oqaIfUNzbL78PTivplQC74eGZ1gDAyvjvbI0NRk9zbGDvoyQWD+skEbG5kbml9kXE/Xtjty/cG7u9MOQI7Ir5WxHx97L4T5rxPxA9MdCM/3RJcGb9gnP512z/85ssf3nA78Q4PFCuFf89q8Z/tIn/VxbF/6ubLH/wcfK13iXx37v49gQAAAAAAABYh7tnIuK/ZX//Txfm/0TJ/J++iDi9DeUPLtte+ff/9ME2FAOUeHgm4pnS+b9pMft3oCNP/ak5H6AruXBpavJYRPw5Io5E155se2SVMo6+f+DjdnmD+fy/4pWVf781FzCXPujcs/SYifHZ8a2eNxDx8FbEP0rn/yYL7X9S0v5nvw+m11nGgX/fOdcub+34B3ZK49OIw6Xt/+OnViSrP59juNkfGC56BSv98+0PvmhX/mbj30IB2Lqs/d+7evwPJIuf1zOz8TKOz3W2nci72f5/d/Ji85Ez3fm+t8ZnZ6+PRHQnZzuyvUv2j268zvA0KuKhiJcs/o/8a/Xxv7L+f29EzC/73slPS9cUF/76W9/37eqj/w/VyeJ/YkPt/8YTo3cGvmxX/vra/xPNtv5Ivsf4H7R8VIRp99L9JeHYWZa12/UFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKdBGhH7IkmHFtJpOjQU0RcRf4m96dS1mdn/XLj2xtWJLK/5+f9p8Um//a3tpPj8/4FF26PLto9HxP6I+LCjt7k9dP7a1ETVJw8AAAAAAAAAAAAAAAAAAABPiL426/8zP3RUXTtgx3VWXQGgMiXx/00V9QB2n/Yf6kv8Q32Jf6gv8Q/1Jf6hvsQ/1Jf4h/oS/wAAAAAA8FTZf+jut0lEzP+/t/nKdOd5XZXWDNhpadUVACrjET9QX6b+QH25xweSNfJ72h601pGrmT6/hYMBAAAAAAAAAAAAoHYOH7T+H+rK+n+oL+v/ob6K9f+HKq4HsPvc4wOxxkr+0vX/ax4FAAAAAAAAAAAAAGynmbkbl8enpiavt0808hm+q71nnYlfGi1b/T47knjpyajGbiYajcbN7NI+KfX5gyeKqfA7U0S61ctUrPVb31EV/UICAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABW+D0AAP//KY4nRw==") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x1eadc31, 0x0, 0x7f, 0x0, &(0x7f0000000080)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) getdents(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, 0x0, 0x0) 7.371538003s ago: executing program 0 (id=795): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x48}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x80, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff024}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x41, 0x3, 0x290, 0x140, 0x19, 0x0, 0x140, 0x0, 0x1f8, 0x1f0, 0x1f0, 0x1f8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xe0, 0x140, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@limit={{0x48}, {0x0, 0x1}}, @common=@inet=@socket1={{0x28}, 0xc}]}, @common=@SET={0x60}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2f}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2709fb5a2bab03dc, 0xff0000ff, 'bridge_slave_0\x00', 'pimreg\x00', {}, {0xe8835d89a38d226f}, 0xff, 0x2, 0x1}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000680955e5eee8780005000000000402"], 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="6f000002801000fe00c8010000000008001e000200"/36], 0x24}, 0x1, 0x0, 0x0, 0x5c0c1}, 0x4010) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100008110bd40820525009dbb0000000109022400011b00000009040000"], 0x0) 6.517479748s ago: executing program 5 (id=798): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r3, 0x40045402, &(0x7f0000000140)=0x3) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$int_in(r3, 0x5452, &(0x7f0000002480)=0x3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000a, 0x2010, 0xffffffffffffffff, 0x3000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x6}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder1\x00', 0x800, 0x0) sendmmsg$inet6(r4, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000400000029feff0b360000003a00000000000047"], 0x18}}, {{&(0x7f0000000140)={0xa, 0x4e22, 0x15, @mcast1, 0x3ff}, 0x1c, 0x0, 0x0, &(0x7f0000001e40)=[@pktinfo={{0x24, 0x29, 0x32, {@private1}}}], 0x28}}], 0x2, 0x40800) unshare(0x22020600) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 6.187767767s ago: executing program 1 (id=800): syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x1, 0x1f3, &(0x7f0000000500)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r4, 0xffffffffffffffff, 0x15, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x3}}, 0x30) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r5, 0xff, 0x1, 0x0, &(0x7f0000000040)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) fadvise64(r6, 0x8000, 0xffff, 0x3) 5.876854314s ago: executing program 4 (id=801): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 5.801429291s ago: executing program 4 (id=802): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x810410, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0], 0x0, 0x1e3, &(0x7f0000000740)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_clone(0x41200000, &(0x7f0000000000)="ea3d3a68604bbdf877c33a82c0918ab103c59a4ff1f4d03254a51049119914f7f9c3", 0x22, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xc8) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r4, 0xaead) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x7, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x7, 0xff, {0xc, @hdata="4b7a90862ee0cdd821625662d22a597dc12e90963c8eb7afc37e79680b0e2d4454329b7fe5ec10d21b27e65080d17b771bc1a8f2", {0x0, @multicast, 0x9, 0xf8d, [0x10000, 0x4]}, @sctp_ip4_spec={@remote, @empty, 0x4e23, 0x4e21, 0x2}, {0x0, @remote, 0x3, 0x101, [0x3, 0xfffffff8]}, 0x7, 0x2}}}) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) 5.70622112s ago: executing program 5 (id=803): syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x1, 0x1f3, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r4, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r6, r5, 0x15, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x3}}, 0x30) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) fadvise64(r7, 0x8000, 0xffff, 0x3) 5.550753942s ago: executing program 3 (id=804): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x4, 0x4) 5.182343685s ago: executing program 3 (id=805): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000100)='^', 0x1) 5.181725236s ago: executing program 1 (id=806): syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x1, 0x1f3, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r4, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r6, r5, 0x15, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x3}}, 0x30) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) fadvise64(r7, 0x8000, 0xffff, 0x3) 4.684121689s ago: executing program 5 (id=807): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x48}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x80, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff024}]}, 0x10) 4.419616573s ago: executing program 0 (id=808): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e358e95c"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x2000000, 0xe40, 0x60ff, &(0x7f00000001c0)="5cdd3086ddffff6633c9bbac88a8860040dffd00139fb7a884bdfc14f48786dd", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.393904274s ago: executing program 0 (id=809): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) clock_nanosleep(0x2, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)={0x5, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0xa000, 0x8d, &(0x7f0000000880)=""/141}, {0xffffffff, 0x56, &(0x7f00000001c0)=""/86}, {0x5000, 0x5b, &(0x7f00000002c0)=""/91}, {0x0, 0x3, &(0x7f0000000780)=""/3}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 4.393490875s ago: executing program 0 (id=810): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xa04}, 0x1, 0x0, 0x0, 0x34004083}, 0x40800) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r4, &(0x7f0000000d40), 0x0}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 4.260361736s ago: executing program 1 (id=811): timer_create(0x3, 0x0, &(0x7f00000002c0)=0x0) timer_settime(r0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/current\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/147, 0x93}], 0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) io_setup(0x7fff, &(0x7f0000000000)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYBLOB='iocharset=cp737,umask=00000000000000000004005,umask=00000000000020000000004,time_offset=0x0000000000000003,errors=continue,time_offset=0x0000000000000002,keep_last_dots,allow_utime=00000000000000000000777,sys_tz,gid=', @ANYRESHEX=0x0, @ANYBLOB=';('], 0x1, 0x1528, &(0x7f0000001380)="$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") open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8801) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000140)={0xe200000000000000, 0x50000, 0xfffffffffffffffd, 0x0, 0x2}) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000300)=0x7, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x70bd29, 0x0, {0x0, 0x0, 0x74, 0x0, 0x860a, 0x200}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x3ff}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) io_pgetevents(r2, 0x40000000000000, 0x6, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000240)={0x0, 0x3938700}, &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) 4.053293904s ago: executing program 3 (id=812): syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x8000) 3.732970483s ago: executing program 5 (id=813): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r3, 0x40045402, &(0x7f0000000140)=0x3) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$int_in(r3, 0x5452, &(0x7f0000002480)=0x3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000a, 0x2010, 0xffffffffffffffff, 0x3000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x6}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder1\x00', 0x800, 0x0) sendmmsg$inet6(r4, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000400000029feff0b360000003a00000000000047"], 0x18}}, {{&(0x7f0000000140)={0xa, 0x4e22, 0x15, @mcast1, 0x3ff}, 0x1c, 0x0, 0x0, &(0x7f0000001e40)=[@pktinfo={{0x24, 0x29, 0x32, {@private1}}}], 0x28}}], 0x2, 0x40800) unshare(0x22020600) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 3.711284484s ago: executing program 3 (id=814): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x10002, &(0x7f0000000bc0)={[], [{@uid_lt={'uid<', r2}}, {@appraise_type}, {@smackfsroot}, {@euid_eq={'euid', 0x3d, r2}}, {@appraise_type}]}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='cpuset.cpu_exclusive\x00', 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x8000) write$cgroup_int(r4, &(0x7f00000001c0)=0x1, 0x12) getdents64(r0, 0xfffffffffffffffe, 0x29) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) mount$bind(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x21, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="180600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13141, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000c80)=[{0x2, 0x4, 0x210, 0x2}], 0x10, 0xfffffffd}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) 3.347475426s ago: executing program 0 (id=815): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x4, 0x4) 3.277474663s ago: executing program 0 (id=816): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x382, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) r2 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r2, &(0x7f0000000240)={0x2c, &(0x7f0000000400)={0xc0, 0x24, 0xc0, {0xc0, 0x14, "6c2e4d04d9c0d316adf94ba907bab6d7a837b7a97afb590ecd2b6cd3c866c3a9cb06ffcc006173763bd2a91e40ede3d509fa0edb68fddfb7f4209fe5c2f5dbd03fed730d184f5a6ba19ab8f2b052f29bff93fecde09fb018bd9bf5e14f745bfd19e6526661fcaf5727659465d6f66de1d9c570eac46c4448fd107cac8a295d6ed1c83fd36566cab979271c59d5857a9b5a66cc397c98ed5d127996706a7ad2f082386f6e53c216bf732b16e6c6c467ee4cade63c816d77aa724c4d006f05"}}, &(0x7f0000000500)={0x0, 0x3, 0xd5, @string={0xd5, 0x3, "af0672a5adeb66389e577b22a14feebb822643ef2c5723789de56693d2fe8c521aa4dae1fb940d522f6015e0d97e223e24773ecec019368ee6963ac6994fee3c898f003b24c9cf3c9ae7a8f39ef73388848e8b4830e2c6cb6f78d81fbac0e6c92b4faccc16fc58c83aa54f002eb6c910bd151fc20d6d0a13ed35461eb2a63fdd682c27ad1091f7d0222e90af09497f6113ff18f939ef79ca683f7fc72ae4f2ff2f73040a68edbb5540025dc9703f0b6578541007272bee559061b472558cfc06181c575ef3e4c6de043541822dc8a4d39c4597"}}, &(0x7f00000000c0)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x40, 0x2, 0x7, 0xf000, 0x5, [0x1bf00, 0x3f30]}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x1, 0x80, "ab7c9c13", "0ffd0ff9"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x8, 0x8, 0x8, 0x2c}}}, &(0x7f00000009c0)={0x84, &(0x7f0000000340)={0x0, 0x10, 0x47, "cf42375147b2c8b5e9140cdf2c4e6b2f69c040737a3d63a233da2077c35e3409bb3364e3411da61ff2b93f597080889cf5c4a9b8ece7625f90f4bd0e1f3bbcdb55d0a64d1c3897"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000006c0)={0x20, 0x0, 0x8, {0x120, 0x40, [0xfff0]}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000780)={0x40, 0xb, 0x2, "82b3"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x81}, &(0x7f0000000800)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000840)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, &(0x7f0000000880)={0x40, 0x19, 0x2, "c52e"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0xca}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0xfa}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0x5}}) io_setup(0x2, &(0x7f0000000000)=0x0) r4 = syz_clone3(&(0x7f0000000280)={0x21800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_cancel(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x1, r1, 0x0, 0x0, 0x200}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) syz_open_procfs(r4, &(0x7f0000000a80)='fd/3\x00') ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 2.768213657s ago: executing program 4 (id=817): syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @dev, {[@generic={0x89, 0x3, "19"}, @lsrr={0x83, 0x3, 0x6d}]}}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x1, 0x0, {0x5, 0x4, 0x2, 0x1, 0x3, 0x64, 0x0, 0x4, 0x62, 0x9, @multicast2, @local}, "cade0ddcf90f9ddf"}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000004000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000008ff000e61147500000000001d430000000000007a0a00fe00581c1f6114500000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e28488b0522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b669615f2710eb8df39fc8c04d2c9c196fa6facfea613569a35cde6451f2edf55ce25c7d72ec7ea85a92458c0559ca3a94727d495bd4671a55a70bc544d71d8e0257707a31936f1adf224077310a86bf447ec92c650acca8c6b0721020894b06178c32f4472d17174d6eb2b067030c5d2c12583f46d2da7fba42d4083259c7cdc8bf1f4299c248865d3c809356c3ed"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x2000000}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x4, 0xa}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000300), 0x0}, 0x20) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) 2.73822987s ago: executing program 5 (id=818): syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x1, 0x1f3, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r4, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r6, r5, 0x15, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x3}}, 0x30) getsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, &(0x7f0000000040)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) fadvise64(r7, 0x8000, 0xffff, 0x3) 2.065446399s ago: executing program 4 (id=819): syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x1, 0x1f3, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r3, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r5, r4, 0x15, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x3}}, 0x30) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) fadvise64(r6, 0x8000, 0xffff, 0x3) 1.776880024s ago: executing program 5 (id=820): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x48}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x80, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff024}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x41, 0x3, 0x290, 0x140, 0x19, 0x0, 0x140, 0x0, 0x1f8, 0x1f0, 0x1f0, 0x1f8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xe0, 0x140, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@limit={{0x48}, {0x0, 0x1}}, @common=@inet=@socket1={{0x28}, 0xc}]}, @common=@SET={0x60}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2f}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2709fb5a2bab03dc, 0xff0000ff, 'bridge_slave_0\x00', 'pimreg\x00', {}, {0xe8835d89a38d226f}, 0xff, 0x2, 0x1}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="6f000002801000fe00c8010000000008001e000200"/36], 0x24}, 0x1, 0x0, 0x0, 0x5c0c1}, 0x4010) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100008110bd40820525009dbb0000000109022400011b00000009040000"], 0x0) 1.675840513s ago: executing program 1 (id=821): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) clock_nanosleep(0x2, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)={0x5, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0xa000, 0x8d, &(0x7f0000000880)=""/141}, {0xffffffff, 0x56, &(0x7f00000001c0)=""/86}, {0x5000, 0x5b, &(0x7f00000002c0)=""/91}, {0x0, 0x3, &(0x7f0000000780)=""/3}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 1.548195304s ago: executing program 1 (id=822): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000100)='^', 0x1) 1.311756365s ago: executing program 3 (id=823): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x48}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) 942.051597ms ago: executing program 4 (id=824): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)='^', 0x1) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 650.456964ms ago: executing program 1 (id=825): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xa04}, 0x1, 0x0, 0x0, 0x34004083}, 0x40800) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r4, &(0x7f0000000d40), 0x0}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 297.435234ms ago: executing program 3 (id=826): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x4, 0x4) 0s ago: executing program 4 (id=827): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x2c, 0x8) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000000500)=ANY=[], 0x3a) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r4, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) r7 = getpgid(r0) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x4209, r7, &(0x7f00000000c0)={0x41e, 0x0, 0x4}, &(0x7f0000000300)=[{}, {}, {}, {}]) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x100010, 0xffffffffffffffff, 0x2000000) kernel console output (not intermixed with test programs): erofs: (device loop3): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 158.206761][ T2367] erofs: (device loop3): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 158.215887][ T2367] erofs: (device loop3): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 158.224959][ T2367] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 158.234080][ T2367] erofs: (device loop3): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 158.243214][ T2367] erofs: (device loop3): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 158.252189][ T2367] erofs: (device loop3): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 158.261245][ T2367] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 158.270901][ T2367] syz.3.542: attempt to access beyond end of device [ 158.270901][ T2367] loop3: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 158.284872][ T2367] syz.3.542: attempt to access beyond end of device [ 158.284872][ T2367] loop3: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 158.298401][ T2367] syz.3.542: attempt to access beyond end of device [ 158.298401][ T2367] loop3: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 158.312239][ T2367] syz.3.542: attempt to access beyond end of device [ 158.312239][ T2367] loop3: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 158.490674][ T2374] erofs: (device loop2): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 158.499816][ T2374] erofs: (device loop2): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 158.508999][ T2374] erofs: (device loop2): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 158.518255][ T2374] erofs: (device loop2): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 158.527644][ T2374] erofs: (device loop2): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 158.536821][ T2374] erofs: (device loop2): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 158.546196][ T2374] erofs: (device loop2): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 158.555391][ T2374] erofs: (device loop2): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 158.564483][ T2374] erofs: (device loop2): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 158.573539][ T2374] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 158.583317][ T2374] syz.2.541: attempt to access beyond end of device [ 158.583317][ T2374] loop2: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 158.597563][ T2374] syz.2.541: attempt to access beyond end of device [ 158.597563][ T2374] loop2: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 158.617787][ T2377] erofs: (device loop1): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 158.626992][ T2377] erofs: (device loop1): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 158.636123][ T2377] erofs: (device loop1): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 158.645244][ T2377] erofs: (device loop1): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 158.654470][ T2377] erofs: (device loop1): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 158.663626][ T2377] erofs: (device loop1): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 158.672897][ T2377] erofs: (device loop1): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 158.682172][ T2377] erofs: (device loop1): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 158.691217][ T2377] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 158.700236][ T2377] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 159.766260][ T2369] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 159.798105][ T2382] loop1: detected capacity change from 0 to 1024 [ 159.807998][ T2369] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 159.830878][ T2379] loop2: detected capacity change from 0 to 16 [ 159.862358][ T2379] erofs: (device loop2): mounted with root inode @ nid 36. [ 159.953604][ T286] EXT4-fs (loop4): unmounting filesystem. [ 160.072442][ T2393] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 160.239175][ T2402] erofs: (device loop2): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 160.340432][ T2402] erofs: (device loop2): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 160.415107][ T2402] erofs: (device loop2): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 160.499819][ T2402] erofs: (device loop2): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 160.584347][ T2402] erofs: (device loop2): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 160.746549][ T2402] erofs: (device loop2): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 160.889945][ T2402] erofs: (device loop2): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 160.943312][ T2402] erofs: (device loop2): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 160.952508][ T2402] erofs: (device loop2): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 160.961797][ T2402] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 161.002192][ T2407] loop3: detected capacity change from 0 to 256 [ 161.020558][ T2407] exfat: Bad value for 'dmask' [ 161.071407][ T2411] loop4: detected capacity change from 0 to 16 [ 161.079632][ T2411] erofs: (device loop4): mounted with root inode @ nid 36. [ 161.104166][ T2413] loop3: detected capacity change from 0 to 16 [ 161.113864][ T2413] erofs: (device loop3): mounted with root inode @ nid 36. [ 161.150885][ T2409] overlayfs: overlapping lowerdir path [ 161.161318][ T2409] overlayfs: overlapping lowerdir path [ 161.287424][ T2414] erofs: (device loop4): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 161.297098][ T2414] erofs: (device loop4): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 161.306227][ T2414] erofs: (device loop4): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 161.315472][ T2414] erofs: (device loop4): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 161.324603][ T2414] erofs: (device loop4): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 161.333676][ T2414] erofs: (device loop4): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 161.342817][ T2414] erofs: (device loop4): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 161.352019][ T2414] erofs: (device loop4): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 161.361024][ T2414] erofs: (device loop4): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 161.369982][ T2414] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 161.471285][ T2417] erofs: (device loop3): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 161.480418][ T2417] erofs: (device loop3): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 161.489482][ T2417] erofs: (device loop3): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 161.499104][ T2417] erofs: (device loop3): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 161.508222][ T2417] erofs: (device loop3): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 161.517317][ T2417] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 161.526455][ T2417] erofs: (device loop3): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 161.535589][ T2417] erofs: (device loop3): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 161.544589][ T2417] erofs: (device loop3): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 161.553579][ T2417] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 161.563199][ T2417] bio_check_eod: 14 callbacks suppressed [ 161.563214][ T2417] syz.3.556: attempt to access beyond end of device [ 161.563214][ T2417] loop3: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 161.582814][ T2417] syz.3.556: attempt to access beyond end of device [ 161.582814][ T2417] loop3: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 161.596363][ T2417] syz.3.556: attempt to access beyond end of device [ 161.596363][ T2417] loop3: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 161.610167][ T2417] syz.3.556: attempt to access beyond end of device [ 161.610167][ T2417] loop3: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 161.662534][ T2426] loop0: detected capacity change from 0 to 16 [ 161.669401][ T2426] erofs: (device loop0): mounted with root inode @ nid 36. [ 161.858094][ T2435] erofs: (device loop0): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 161.867315][ T2435] erofs: (device loop0): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 161.876406][ T2435] erofs: (device loop0): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 161.885567][ T2435] erofs: (device loop0): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 161.894856][ T2435] erofs: (device loop0): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 161.904147][ T2435] erofs: (device loop0): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 161.913456][ T2435] erofs: (device loop0): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 161.922784][ T2435] erofs: (device loop0): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 161.931841][ T2435] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 161.940910][ T2435] erofs: (device loop0): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 161.950801][ T2435] syz.0.561: attempt to access beyond end of device [ 161.950801][ T2435] loop0: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 161.964923][ T2435] syz.0.561: attempt to access beyond end of device [ 161.964923][ T2435] loop0: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 161.978640][ T2435] syz.0.561: attempt to access beyond end of device [ 161.978640][ T2435] loop0: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 161.992629][ T2435] syz.0.561: attempt to access beyond end of device [ 161.992629][ T2435] loop0: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 163.459982][ T2438] loop4: detected capacity change from 0 to 128 [ 163.576720][ T2444] loop1: detected capacity change from 0 to 512 [ 163.600987][ T2444] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 163.750051][ T2444] EXT4-fs (loop1): 1 orphan inode deleted [ 163.904326][ T2452] binder: 2445:2452 ioctl 40046205 0 returned -22 [ 163.913605][ T28] audit: type=1400 audit(1771904372.191:242): avc: denied { write } for pid=2445 comm="syz.3.566" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 163.936393][ T2444] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 163.981703][ T2444] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.025881][ T2147] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 164.046068][ T2147] EXT4-fs error (device loop1): ext4_release_dquot:6858: comm kworker/u4:21: Failed to release dquot type 1 [ 164.172774][ T287] EXT4-fs (loop1): unmounting filesystem. [ 164.232258][ T2461] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.570' sets config #-1 [ 164.246166][ T2459] loop2: detected capacity change from 0 to 2048 [ 164.322789][ T2459] loop2: p2 < > p4 [ 164.330796][ T2459] loop2: p4 size 262144 extends beyond EOD, truncated [ 164.345216][ T2466] loop0: detected capacity change from 0 to 16 [ 164.361846][ T28] audit: type=1400 audit(1771904372.651:243): avc: denied { read write } for pid=2458 comm="syz.2.569" name="loop2p4" dev="devtmpfs" ino=1481 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 164.387415][ T2468] sit: Src spoofed 0.0.0.0/2002:0:64::576d:0 -> 224.0.0.1/::42c4:3acc:eaa8:ac00:0:0 [ 164.397155][ T2466] erofs: (device loop0): mounted with root inode @ nid 36. [ 164.410753][ T28] audit: type=1400 audit(1771904372.661:244): avc: denied { open } for pid=2458 comm="syz.2.569" path="/dev/loop2p4" dev="devtmpfs" ino=1481 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 164.457063][ T2470] loop1: detected capacity change from 0 to 16 [ 164.470606][ T2470] erofs: (device loop1): mounted with root inode @ nid 36. [ 164.663566][ T2477] erofs: (device loop1): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 164.672752][ T2477] erofs: (device loop1): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 164.681930][ T2477] erofs: (device loop1): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 164.691198][ T2477] erofs: (device loop1): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 164.700436][ T2477] erofs: (device loop1): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 164.709533][ T2477] erofs: (device loop1): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 164.718873][ T2477] erofs: (device loop1): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 164.728148][ T2477] erofs: (device loop1): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 164.737211][ T2477] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 164.746296][ T2477] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 164.756052][ T2477] syz.1.574: attempt to access beyond end of device [ 164.756052][ T2477] loop1: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 164.770317][ T2477] syz.1.574: attempt to access beyond end of device [ 164.770317][ T2477] loop1: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 164.788040][ T2359] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 164.804581][ T2478] erofs: (device loop0): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 164.830290][ T2478] erofs: (device loop0): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 164.854812][ T2478] erofs: (device loop0): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 164.867593][ T2478] erofs: (device loop0): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 164.897659][ T2478] erofs: (device loop0): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 164.944968][ T2478] erofs: (device loop0): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 164.981273][ T2478] erofs: (device loop0): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 164.990753][ T2359] usb 3-1: Using ep0 maxpacket: 8 [ 164.997857][ T2359] usb 3-1: config 0 interface 0 has no altsetting 0 [ 165.017074][ T2359] usb 3-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 165.039535][ T2478] erofs: (device loop0): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 165.055902][ T2359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.086368][ T2359] usb 3-1: config 0 descriptor?? [ 165.163085][ T2478] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 165.195387][ T2478] erofs: (device loop0): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 165.447814][ T2480] loop1: detected capacity change from 0 to 16 [ 165.496347][ T2480] erofs: (device loop1): mounted with root inode @ nid 36. [ 165.511500][ T2359] wacom 0003:056A:0317.0001: unknown main item tag 0x0 [ 165.527487][ T2359] wacom 0003:056A:0317.0001: unknown main item tag 0x0 [ 165.547483][ T2359] wacom 0003:056A:0317.0001: unknown main item tag 0x0 [ 165.554711][ T2359] wacom 0003:056A:0317.0001: unknown main item tag 0x0 [ 165.562013][ T2359] wacom 0003:056A:0317.0001: unknown main item tag 0x0 [ 165.569342][ T2359] wacom 0003:056A:0317.0001: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 165.640274][ T2359] wacom 0003:056A:0317.0001: hidraw0: USB HID v0.01 Device [HID 056a:0317] on usb-dummy_hcd.2-1/input0 [ 165.661617][ T2359] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0317.0001/input/input4 [ 165.742258][ T2486] erofs: (device loop1): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 165.751437][ T2486] erofs: (device loop1): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 165.760565][ T2486] erofs: (device loop1): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 165.769683][ T2486] erofs: (device loop1): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 165.779068][ T2486] erofs: (device loop1): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 165.788235][ T2486] erofs: (device loop1): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 165.797709][ T2486] erofs: (device loop1): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 165.807083][ T2486] erofs: (device loop1): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 165.816168][ T2486] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 165.825204][ T2486] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 165.857073][ T2459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.996560][ T2459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.024298][ T28] audit: type=1400 audit(1771904374.321:245): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=1495 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 166.052820][ T28] audit: type=1400 audit(1771904374.321:246): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1495 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 166.117437][ T28] audit: type=1400 audit(1771904374.391:247): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1495 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 166.161162][ T2359] usb 3-1: USB disconnect, device number 13 [ 166.199455][ T420] udevd[420]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 166.212034][ T366] udevd[366]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 166.233329][ T28] audit: type=1400 audit(1771904374.451:248): avc: denied { create } for pid=2458 comm="syz.2.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.249572][ T2491] fido_id[2491]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 166.316446][ T366] udevd[366]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 166.713481][ T2495] xt_socket: unknown flags 0xc [ 166.719249][ T2495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2408 sclass=netlink_route_socket pid=2495 comm=syz.1.579 [ 170.245250][ T6] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 170.358504][ T2500] loop2: detected capacity change from 0 to 40427 [ 170.403177][ T2500] F2FS-fs (loop2): Unrecognized mount option "extentcache" or missing value [ 170.724368][ T2523] loop2: detected capacity change from 0 to 512 [ 170.913120][ T2515] loop0: detected capacity change from 0 to 256 [ 171.635758][ T2515] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 171.917741][ T2536] xt_socket: unknown flags 0xc [ 171.953058][ T2536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2408 sclass=netlink_route_socket pid=2536 comm=syz.3.589 [ 172.223927][ T2538] loop2: detected capacity change from 0 to 16 [ 172.263423][ T2538] erofs: (device loop2): mounted with root inode @ nid 36. [ 172.363956][ T2514] loop4: detected capacity change from 0 to 131072 [ 172.371596][ T2514] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 172.379855][ T2514] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 172.402843][ T2514] F2FS-fs (loop4): Found nat_bits in checkpoint [ 172.460274][ T389] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 172.517315][ T2514] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 172.524522][ T2514] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 172.619516][ T2547] erofs: (device loop2): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 172.628638][ T2547] erofs: (device loop2): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 172.637796][ T2547] erofs: (device loop2): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 172.646861][ T2547] erofs: (device loop2): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 172.655973][ T2547] erofs: (device loop2): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 172.665066][ T2547] erofs: (device loop2): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 172.674215][ T2547] erofs: (device loop2): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 172.683325][ T2547] erofs: (device loop2): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 172.692297][ T2547] erofs: (device loop2): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 172.701273][ T2547] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 172.710973][ T2547] bio_check_eod: 10 callbacks suppressed [ 172.710988][ T2547] syz.2.590: attempt to access beyond end of device [ 172.710988][ T2547] loop2: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 172.730627][ T2547] syz.2.590: attempt to access beyond end of device [ 172.730627][ T2547] loop2: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 172.744490][ T2547] syz.2.590: attempt to access beyond end of device [ 172.744490][ T2547] loop2: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 172.758290][ T2547] syz.2.590: attempt to access beyond end of device [ 172.758290][ T2547] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 172.779045][ T6] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 172.820794][ T389] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 172.841479][ T389] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice=bb.9d [ 172.858558][ T389] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.990229][ T6] usb 2-1: Using ep0 maxpacket: 8 [ 172.996537][ T6] usb 2-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.022474][ T6] usb 2-1: config 0 interface 0 has no altsetting 0 [ 173.035426][ T6] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 173.054786][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.077761][ T6] usb 2-1: config 0 descriptor?? [ 173.408313][ T2558] loop4: detected capacity change from 0 to 4096 [ 173.432971][ T2558] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 173.448119][ T2558] syz.4.592 (pid 2558) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 173.523851][ T6] zeroplus 0003:0C12:0005.0002: hidraw0: USB HID v0.09 Device [HID 0c12:0005] on usb-dummy_hcd.1-1/input0 [ 173.538326][ T6] zeroplus 0003:0C12:0005.0002: no inputs found [ 173.545021][ T389] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 173.700235][ T389] usb 1-1: device descriptor read/64, error -71 [ 173.728301][ T2540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.737931][ T2540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.747633][ T39] usb 2-1: USB disconnect, device number 10 [ 173.970268][ T389] usb 1-1: device descriptor read/64, error -71 [ 174.085370][ T286] EXT4-fs (loop4): unmounting filesystem. [ 174.111299][ T2571] loop2: detected capacity change from 0 to 512 [ 174.130743][ T2571] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 174.162483][ T39] usb 4-1: USB disconnect, device number 17 [ 174.180884][ T2571] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 174.189405][ T2571] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.598: invalid indirect mapped block 2683928664 (level 1) [ 174.203765][ T2571] EXT4-fs (loop2): Remounting filesystem read-only [ 174.210982][ T2571] EXT4-fs (loop2): 1 truncate cleaned up [ 174.216838][ T2571] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 174.281918][ T2571] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 174.302715][ T2571] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 174.426999][ T2583] xt_socket: unknown flags 0xc [ 174.432859][ T2583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2408 sclass=netlink_route_socket pid=2583 comm=syz.4.599 [ 174.448662][ T389] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 174.570248][ T28] audit: type=1400 audit(1771904382.851:249): avc: denied { write } for pid=2570 comm="syz.2.598" name="event2" dev="devtmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 174.670301][ T389] usb 1-1: device descriptor read/64, error -71 [ 174.685068][ T284] EXT4-fs (loop2): unmounting filesystem. [ 174.722961][ T28] audit: type=1400 audit(1771904382.851:250): avc: denied { open } for pid=2570 comm="syz.2.598" path="/dev/input/event2" dev="devtmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 174.805240][ T2587] loop2: detected capacity change from 0 to 16 [ 174.817955][ T2587] erofs: (device loop2): mounted with root inode @ nid 36. [ 174.960349][ T389] usb 1-1: device descriptor read/64, error -71 [ 175.010256][ T2359] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 175.069667][ T2589] loop3: detected capacity change from 0 to 256 [ 175.085967][ T2589] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5955b8de, utbl_chksum : 0xe619d30d) [ 175.090534][ T389] usb usb1-port1: attempt power cycle [ 175.109149][ T28] audit: type=1400 audit(1771904383.401:251): avc: denied { write } for pid=2588 comm="syz.3.603" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 175.221942][ T2359] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 175.235473][ T2591] erofs: (device loop2): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 175.245599][ T2359] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice=bb.9d [ 175.256346][ T2359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.266277][ T2591] erofs: (device loop2): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 176.380469][ T2591] erofs: (device loop2): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 176.413023][ T2591] erofs: (device loop2): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 176.733385][ T2591] erofs: (device loop2): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 176.746355][ T2591] erofs: (device loop2): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 176.787032][ T2601] overlayfs: failed to resolve './file1': -2 [ 176.974281][ T2591] erofs: (device loop2): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 176.992877][ T2591] erofs: (device loop2): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 177.041901][ T2601] overlayfs: overlapping lowerdir path [ 177.083598][ T2591] erofs: (device loop2): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 177.097588][ T2604] overlayfs: overlapping lowerdir path [ 177.227206][ T2591] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 177.282676][ T28] audit: type=1400 audit(1771904385.581:252): avc: denied { read write } for pid=2607 comm="syz.1.608" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 177.331580][ T2591] syz.2.602: attempt to access beyond end of device [ 177.331580][ T2591] loop2: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 177.335291][ T28] audit: type=1400 audit(1771904385.601:253): avc: denied { open } for pid=2607 comm="syz.1.608" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 177.369914][ T2591] syz.2.602: attempt to access beyond end of device [ 177.369914][ T2591] loop2: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 177.394251][ T2591] syz.2.602: attempt to access beyond end of device [ 177.394251][ T2591] loop2: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 177.408637][ T2591] syz.2.602: attempt to access beyond end of device [ 177.408637][ T2591] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 177.422873][ T28] audit: type=1400 audit(1771904385.721:254): avc: denied { ioctl } for pid=2607 comm="syz.1.608" path="/dev/uhid" dev="devtmpfs" ino=267 ioctlcmd=0x583a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 177.691011][ T412] usb 5-1: USB disconnect, device number 8 [ 177.779806][ T2621] fuse: Unknown parameter 'fd0x0000000000000005' [ 178.384400][ T2636] loop3: detected capacity change from 0 to 2048 [ 178.391253][ T2636] FAT-fs (loop3): Unrecognized mount option "?¥ÿ" or missing value [ 178.680236][ T389] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 178.784648][ T2632] loop1: detected capacity change from 0 to 131072 [ 178.834243][ T2632] F2FS-fs (loop1): Test dummy encryption mode enabled [ 178.851511][ T2632] F2FS-fs (loop1): invalid crc value [ 178.900357][ T389] usb 4-1: Using ep0 maxpacket: 16 [ 178.907473][ T389] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.944215][ T2643] loop4: detected capacity change from 0 to 256 [ 178.953008][ T2643] exfat: Deprecated parameter 'namecase' [ 179.001398][ T389] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.033766][ T2643] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5cb490d, utbl_chksum : 0xe619d30d) [ 179.170261][ T28] audit: type=1400 audit(1771904387.391:255): avc: denied { remove_name } for pid=2637 comm="syz.4.617" name="file1" dev="loop4" ino=1048628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.199011][ T2632] F2FS-fs (loop1): Found nat_bits in checkpoint [ 179.219755][ T389] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 179.229770][ T28] audit: type=1400 audit(1771904387.391:256): avc: denied { unlink } for pid=2637 comm="syz.4.617" name="file1" dev="loop4" ino=1048628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 179.232098][ T389] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.260424][ T389] usb 4-1: Product: syz [ 179.264645][ T389] usb 4-1: Manufacturer: syz [ 179.269353][ T389] usb 4-1: SerialNumber: syz [ 179.337546][ T2632] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 179.483937][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 179.491360][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 179.498764][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 179.506270][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 179.513892][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 179.521224][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 179.528504][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 179.540348][ T389] usb 4-1: 0:2 : does not exist [ 179.548616][ T389] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 179.578356][ T389] usb 4-1: USB disconnect, device number 18 [ 179.810289][ T805] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 179.970216][ T805] usb 2-1: device descriptor read/64, error -71 [ 180.104821][ T2655] loop2: detected capacity change from 0 to 16 [ 180.191445][ T2655] erofs: (device loop2): mounted with root inode @ nid 36. [ 180.353068][ T2659] xt_socket: unknown flags 0xc [ 180.366896][ T2659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2408 sclass=netlink_route_socket pid=2659 comm=syz.3.621 [ 180.404001][ T805] usb 2-1: device descriptor read/64, error -71 [ 180.656043][ T2661] loop4: detected capacity change from 0 to 16 [ 180.676430][ T2661] erofs: (device loop4): mounted with root inode @ nid 36. [ 180.684641][ T805] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 180.692287][ T389] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 180.821363][ T2663] erofs: (device loop2): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 180.860234][ T805] usb 2-1: device descriptor read/64, error -71 [ 180.874255][ T2663] erofs: (device loop2): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 180.891330][ T389] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 180.907624][ T389] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice=bb.9d [ 180.921151][ T2663] erofs: (device loop2): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 180.930554][ T389] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.980238][ T2663] erofs: (device loop2): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 180.989380][ T2663] erofs: (device loop2): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 181.030026][ T2666] erofs: (device loop4): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 181.049592][ T2666] erofs: (device loop4): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 181.050614][ T2663] erofs: (device loop2): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 181.069860][ T2666] erofs: (device loop4): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 181.090351][ T2666] erofs: (device loop4): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 181.099454][ T2666] erofs: (device loop4): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 181.117132][ T2663] erofs: (device loop2): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 181.135990][ T2663] erofs: (device loop2): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 181.142597][ T2666] erofs: (device loop4): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 181.154846][ T2668] loop0: detected capacity change from 0 to 16 [ 181.161155][ T805] usb 2-1: device descriptor read/64, error -71 [ 181.169836][ T2668] erofs: (device loop0): mounted with root inode @ nid 36. [ 181.181468][ T2666] erofs: (device loop4): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 181.190758][ T2663] erofs: (device loop2): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 181.212196][ T2666] erofs: (device loop4): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 181.250988][ T2666] erofs: (device loop4): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 181.281656][ T2663] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 181.291779][ T2666] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 181.315729][ T805] usb usb2-port1: attempt power cycle [ 181.321263][ T2663] syz.2.620: attempt to access beyond end of device [ 181.321263][ T2663] loop2: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 181.335267][ T2663] syz.2.620: attempt to access beyond end of device [ 181.335267][ T2663] loop2: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 181.346354][ T2666] syz.4.622: attempt to access beyond end of device [ 181.346354][ T2666] loop4: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 181.349164][ T2663] syz.2.620: attempt to access beyond end of device [ 181.349164][ T2663] loop2: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 181.376772][ T2663] syz.2.620: attempt to access beyond end of device [ 181.376772][ T2663] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 181.431700][ T2666] syz.4.622: attempt to access beyond end of device [ 181.431700][ T2666] loop4: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 181.541873][ T2666] syz.4.622: attempt to access beyond end of device [ 181.541873][ T2666] loop4: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 181.571570][ T2672] erofs: (device loop0): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 181.587278][ T2666] syz.4.622: attempt to access beyond end of device [ 181.587278][ T2666] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 181.716774][ T2672] erofs: (device loop0): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 181.759417][ T2672] erofs: (device loop0): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 181.807964][ T2672] erofs: (device loop0): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 181.914584][ T2672] erofs: (device loop0): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 181.960459][ T2672] erofs: (device loop0): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 182.132345][ T2672] erofs: (device loop0): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 182.286810][ T2675] loop1: detected capacity change from 0 to 2048 [ 182.299317][ T2672] erofs: (device loop0): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 182.352044][ T2675] loop1: p2 < > p4 [ 182.359260][ T2675] loop1: p4 size 262144 extends beyond EOD, truncated [ 182.421500][ T2672] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 182.468791][ T2672] erofs: (device loop0): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 182.488672][ T2672] syz.0.623: attempt to access beyond end of device [ 182.488672][ T2672] loop0: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 182.540290][ T2672] syz.0.623: attempt to access beyond end of device [ 182.540290][ T2672] loop0: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 182.747375][ T425] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 182.820664][ T2691] loop0: detected capacity change from 0 to 16 [ 182.828585][ T2691] erofs: (device loop0): mounted with root inode @ nid 36. [ 182.910067][ T2691] erofs: (device loop0): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 182.919299][ T2691] erofs: (device loop0): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 182.928390][ T2691] erofs: (device loop0): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 182.937475][ T2691] erofs: (device loop0): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 182.946697][ T2691] erofs: (device loop0): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 182.955790][ T2691] erofs: (device loop0): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 182.964918][ T2691] erofs: (device loop0): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 182.974059][ T2691] erofs: (device loop0): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 182.983053][ T2691] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 182.992089][ T2691] erofs: (device loop0): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 183.030224][ T425] usb 2-1: Using ep0 maxpacket: 8 [ 183.036491][ T425] usb 2-1: config 0 interface 0 has no altsetting 0 [ 183.048071][ T425] usb 2-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 183.060112][ T425] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.068940][ T425] usb 2-1: config 0 descriptor?? [ 183.193379][ T805] usb 4-1: USB disconnect, device number 19 [ 183.555872][ T425] wacom 0003:056A:0317.0003: unknown main item tag 0x0 [ 183.586114][ T425] wacom 0003:056A:0317.0003: unknown main item tag 0x0 [ 183.601840][ T425] wacom 0003:056A:0317.0003: unknown main item tag 0x0 [ 183.609726][ T425] wacom 0003:056A:0317.0003: unknown main item tag 0x0 [ 183.616932][ T425] wacom 0003:056A:0317.0003: unknown main item tag 0x0 [ 183.628132][ T2701] loop4: detected capacity change from 0 to 1024 [ 183.637639][ T425] wacom 0003:056A:0317.0003: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 183.648092][ T425] wacom 0003:056A:0317.0003: hidraw0: USB HID v0.01 Device [HID 056a:0317] on usb-dummy_hcd.1-1/input0 [ 183.660499][ T425] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0317.0003/input/input7 [ 183.684757][ T2507] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 183.761390][ T2675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.779781][ T2675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.846728][ T39] usb 2-1: USB disconnect, device number 14 [ 183.863569][ T2572] udevd[2572]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 183.943254][ T2704] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 183.965933][ T2706] loop0: detected capacity change from 0 to 16 [ 183.982455][ T2706] erofs: (device loop0): mounted with root inode @ nid 36. [ 184.174201][ T2711] erofs: (device loop0): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 184.219955][ T2711] erofs: (device loop0): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 184.280434][ T2711] erofs: (device loop0): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 184.298489][ T2711] erofs: (device loop0): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 184.350944][ T2711] erofs: (device loop0): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 184.373511][ T2711] erofs: (device loop0): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 184.430294][ T2711] erofs: (device loop0): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 184.488807][ T2713] loop1: detected capacity change from 0 to 1024 [ 184.507308][ T2711] erofs: (device loop0): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 184.556283][ T2713] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 184.568108][ T2711] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 184.589930][ T2711] erofs: (device loop0): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 184.627316][ T2713] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 184.765217][ T2713] cgroup: Unknown subsys name 'uid<00000000000000003327' [ 184.965505][ T28] audit: type=1400 audit(1771904393.261:257): avc: denied { nlmsg_read } for pid=2717 comm="syz.3.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 184.988661][ T2718] netlink: 332 bytes leftover after parsing attributes in process `syz.3.638'. [ 185.100240][ T805] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 185.279689][ T2729] netlink: 168 bytes leftover after parsing attributes in process `syz.2.641'. [ 185.373804][ T2732] loop0: detected capacity change from 0 to 256 [ 185.381962][ T2732] exfat: Deprecated parameter 'namecase' [ 185.575465][ T2732] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe5cb490d, utbl_chksum : 0xe619d30d) [ 185.590563][ T805] usb 2-1: Using ep0 maxpacket: 8 [ 185.666119][ T805] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 185.721317][ T805] usb 2-1: config 179 has no interface number 0 [ 185.775385][ T805] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 185.787159][ T805] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 185.798993][ T805] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 185.810552][ T805] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 185.820987][ T805] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 185.834568][ T805] usb 2-1: config 179 interface 65 has no altsetting 0 [ 185.841554][ T805] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 185.850768][ T805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.863478][ T805] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input10 [ 185.881321][ T2734] loop4: detected capacity change from 0 to 1024 [ 185.943024][ T2572] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 186.045102][ T2741] loop0: detected capacity change from 0 to 256 [ 186.137188][ T2744] xt_socket: unknown flags 0xc [ 186.149527][ T2744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2408 sclass=netlink_route_socket pid=2744 comm=syz.3.645 [ 186.303173][ T2741] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 186.323650][ T2741] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 186.333147][ T28] audit: type=1400 audit(1771904394.631:258): avc: denied { wake_alarm } for pid=2712 comm="syz.1.637" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 186.358430][ T2741] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 186.390476][ T2716] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 186.406727][ T28] audit: type=1400 audit(1771904394.701:259): avc: denied { read } for pid=2712 comm="syz.1.637" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 186.431946][ T2748] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 186.444897][ T28] audit: type=1400 audit(1771904394.701:260): avc: denied { open } for pid=2712 comm="syz.1.637" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 186.450391][ T805] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 186.471511][ T2713] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 186.488930][ T28] audit: type=1400 audit(1771904394.701:261): avc: denied { ioctl } for pid=2712 comm="syz.1.637" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 186.601601][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 186.610034][ T425] usb 2-1: USB disconnect, device number 15 [ 186.629304][ T425] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 186.691705][ T805] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 186.727651][ T805] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice=bb.9d [ 186.750385][ T805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.824757][ T2753] loop2: detected capacity change from 0 to 256 [ 186.824789][ T2752] loop4: detected capacity change from 0 to 512 [ 186.848997][ T2752] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 186.872426][ T2752] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 186.880871][ T2752] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.649: invalid indirect mapped block 2683928664 (level 1) [ 186.899789][ T28] audit: type=1400 audit(1771904395.191:262): avc: denied { append } for pid=2740 comm="syz.0.646" path="/131/bus/cpu.stat" dev="loop0" ino=1048633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 186.925794][ T2752] EXT4-fs (loop4): Remounting filesystem read-only [ 186.933160][ T2752] EXT4-fs (loop4): 1 truncate cleaned up [ 186.938947][ T2752] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 187.020492][ T2752] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 187.056085][ T2752] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 187.065536][ T2758] loop2: detected capacity change from 0 to 1024 [ 187.072508][ T2758] EXT4-fs: quotafile must be on filesystem root [ 187.088456][ T286] EXT4-fs (loop4): unmounting filesystem. [ 187.111813][ T2507] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 187.156527][ T2768] overlayfs: failed to resolve './file0': -2 [ 187.172228][ T2768] overlayfs: overlapping lowerdir path [ 187.184797][ T2768] overlayfs: overlapping lowerdir path [ 187.203166][ T2772] loop0: detected capacity change from 0 to 16 [ 187.216246][ T287] EXT4-fs (loop1): unmounting filesystem. [ 187.225349][ T2772] erofs: (device loop0): mounted with root inode @ nid 36. [ 187.251084][ T2774] erofs: (device loop1): mounted with root inode @ nid 36. [ 187.537568][ T2780] erofs: (device loop1): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 187.550126][ T2781] erofs: (device loop0): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 187.561325][ T2780] erofs: (device loop1): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 187.574865][ T2781] erofs: (device loop0): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 187.580444][ T2780] erofs: (device loop1): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 187.600590][ T2781] erofs: (device loop0): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 187.608285][ T2780] erofs: (device loop1): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 187.625281][ T2781] erofs: (device loop0): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 187.631158][ T2780] erofs: (device loop1): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 187.651218][ T2781] erofs: (device loop0): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 187.654386][ T2780] erofs: (device loop1): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 187.675175][ T2781] erofs: (device loop0): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 187.683914][ T2780] erofs: (device loop1): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 187.700268][ T2781] erofs: (device loop0): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 187.702298][ T2780] erofs: (device loop1): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 187.725001][ T2781] erofs: (device loop0): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 187.732694][ T2780] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 187.749674][ T2781] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 187.752862][ T2780] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 187.773276][ T2781] erofs: (device loop0): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 187.782778][ T2780] bio_check_eod: 10 callbacks suppressed [ 187.782811][ T2780] syz.1.656: attempt to access beyond end of device [ 187.782811][ T2780] loop1: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 187.783488][ T2780] syz.1.656: attempt to access beyond end of device [ 187.783488][ T2780] loop1: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 187.806764][ T2781] syz.0.655: attempt to access beyond end of device [ 187.806764][ T2781] loop0: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 187.846323][ T2780] syz.1.656: attempt to access beyond end of device [ 187.846323][ T2780] loop1: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 187.865143][ T2781] syz.0.655: attempt to access beyond end of device [ 187.865143][ T2781] loop0: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 187.872388][ T2780] syz.1.656: attempt to access beyond end of device [ 187.872388][ T2780] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 187.900796][ T2781] syz.0.655: attempt to access beyond end of device [ 187.900796][ T2781] loop0: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 187.940441][ T2781] syz.0.655: attempt to access beyond end of device [ 187.940441][ T2781] loop0: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 188.152796][ T2790] erofs: (device loop0): mounted with root inode @ nid 36. [ 188.162384][ T2507] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 188.354272][ T2793] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 188.443580][ T2796] erofs: (device loop0): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 188.473630][ T2796] erofs: (device loop0): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 188.510335][ T2796] erofs: (device loop0): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 188.541668][ T2796] erofs: (device loop0): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 188.573224][ T2796] erofs: (device loop0): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 188.604707][ T2796] erofs: (device loop0): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 188.636260][ T2796] erofs: (device loop0): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 188.668635][ T2796] erofs: (device loop0): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 188.700285][ T2796] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 188.732469][ T2796] erofs: (device loop0): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 188.766712][ T2796] syz.0.661: attempt to access beyond end of device [ 188.766712][ T2796] loop0: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 188.815625][ T2796] syz.0.661: attempt to access beyond end of device [ 188.815625][ T2796] loop0: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 188.964550][ T412] usb 4-1: USB disconnect, device number 20 [ 188.990435][ T2798] set_capacity_and_notify: 4 callbacks suppressed [ 188.990452][ T2798] loop2: detected capacity change from 0 to 512 [ 189.004361][ T2800] loop3: detected capacity change from 0 to 256 [ 189.020570][ T2798] EXT4-fs: Ignoring removed i_version option [ 189.036749][ T2798] EXT4-fs: Ignoring removed bh option [ 189.065336][ T2798] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 189.083679][ T2798] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.154741][ T28] audit: type=1400 audit(1771904397.451:263): avc: denied { ioctl } for pid=2797 comm="syz.2.673" path="/132/bus/file1" dev="loop2" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 189.193911][ T284] EXT4-fs (loop2): unmounting filesystem. [ 189.213782][ T2806] capability: warning: `syz.3.665' uses 32-bit capabilities (legacy support in use) [ 189.228463][ T2806] loop3: detected capacity change from 0 to 256 [ 189.254404][ T2806] FAT-fs (loop3): Directory bread(block 64) failed [ 189.261104][ T2806] FAT-fs (loop3): Directory bread(block 65) failed [ 189.267736][ T2806] FAT-fs (loop3): Directory bread(block 66) failed [ 189.275162][ T2806] FAT-fs (loop3): Directory bread(block 67) failed [ 189.281918][ T2806] FAT-fs (loop3): Directory bread(block 68) failed [ 189.288530][ T2806] FAT-fs (loop3): Directory bread(block 69) failed [ 189.296095][ T2806] FAT-fs (loop3): Directory bread(block 70) failed [ 189.302810][ T2806] FAT-fs (loop3): Directory bread(block 71) failed [ 189.309405][ T2806] FAT-fs (loop3): Directory bread(block 72) failed [ 189.316136][ T2806] FAT-fs (loop3): Directory bread(block 73) failed [ 189.369409][ T2815] loop4: detected capacity change from 0 to 16 [ 189.387819][ T2817] overlayfs: failed to resolve './file0': -2 [ 189.391546][ T2815] erofs: (device loop4): mounted with root inode @ nid 36. [ 189.470500][ T2818] xt_socket: unknown flags 0xc [ 189.479193][ T2818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2408 sclass=netlink_route_socket pid=2818 comm=syz.1.668 [ 189.632762][ T2817] overlayfs: overlapping lowerdir path [ 189.697197][ T2820] overlayfs: overlapping lowerdir path [ 189.759877][ T2829] loop3: detected capacity change from 0 to 16 [ 189.767440][ T2829] erofs: (device loop3): mounted with root inode @ nid 36. [ 189.880333][ T39] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 189.901851][ T2833] netlink: 168 bytes leftover after parsing attributes in process `syz.0.675'. [ 189.947944][ T2834] erofs: (device loop4): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 189.957081][ T2834] erofs: (device loop4): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 189.966204][ T2834] erofs: (device loop4): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 189.975327][ T2834] erofs: (device loop4): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 189.984435][ T2834] erofs: (device loop4): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 189.993525][ T2834] erofs: (device loop4): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 190.002673][ T2834] erofs: (device loop4): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 190.011785][ T2834] erofs: (device loop4): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 190.020761][ T2834] erofs: (device loop4): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 190.029715][ T2834] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 190.281826][ T39] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 190.323003][ T39] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice=bb.9d [ 190.395684][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.451129][ T28] audit: type=1400 audit(1771904398.751:264): avc: denied { read } for pid=2838 comm="syz.4.677" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 190.476213][ T28] audit: type=1400 audit(1771904398.751:265): avc: denied { ioctl } for pid=2838 comm="syz.4.677" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x556c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 190.503902][ T2840] erofs: (device loop3): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 190.513262][ T2840] erofs: (device loop3): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 190.522472][ T2840] erofs: (device loop3): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 190.531797][ T2840] erofs: (device loop3): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 190.541155][ T2840] erofs: (device loop3): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 190.550401][ T2840] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 190.559590][ T2840] erofs: (device loop3): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 190.574396][ T2840] erofs: (device loop3): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 190.583708][ T2840] erofs: (device loop3): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 190.597172][ T2840] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 190.607005][ T2842] loop2: detected capacity change from 0 to 1024 [ 190.660534][ T2507] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 190.724843][ T39] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 190.851351][ T2847] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 190.910268][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 190.918277][ T39] usb 5-1: config 1 has an invalid descriptor of length 109, skipping remainder of the config [ 190.959060][ T39] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 190.997256][ T39] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 191.055911][ T39] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 191.065116][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.073225][ T39] usb 5-1: Product: syz [ 191.077709][ T39] usb 5-1: Manufacturer: syz [ 191.082404][ T39] usb 5-1: SerialNumber: syz [ 191.101106][ T39] cdc_ncm 5-1:1.0: skipping garbage [ 191.115723][ T39] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 191.129567][ T39] cdc_ncm 5-1:1.0: bind() failure [ 191.302472][ T39] usb 5-1: USB disconnect, device number 9 [ 191.479357][ T2851] loop2: detected capacity change from 0 to 128 [ 191.509367][ T2853] overlayfs: failed to resolve './file0': -2 [ 191.516662][ T2853] overlayfs: overlapping lowerdir path [ 191.522904][ T2853] overlayfs: overlapping lowerdir path [ 191.530816][ T2851] Driver unsupported XDP return value 0 on prog (id 179) dev N/A, expect packet loss! [ 191.569969][ T2849] loop3: detected capacity change from 0 to 131072 [ 191.585326][ T2849] F2FS-fs (loop3): Test dummy encryption mode enabled [ 191.604143][ T2849] F2FS-fs (loop3): invalid crc value [ 191.627997][ T2849] F2FS-fs (loop3): Found nat_bits in checkpoint [ 191.649831][ T2858] netlink: 28 bytes leftover after parsing attributes in process `syz.0.684'. [ 192.568503][ T2863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2863 comm=syz.0.684 [ 192.586220][ T28] audit: type=1400 audit(1771904400.881:266): avc: denied { write } for pid=2850 comm="syz.2.681" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 192.601437][ T24] usb 2-1: USB disconnect, device number 16 [ 192.615775][ T28] audit: type=1400 audit(1771904400.881:267): avc: denied { open } for pid=2850 comm="syz.2.681" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 192.647839][ T2867] loop1: detected capacity change from 0 to 16 [ 192.649877][ T2849] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 192.662545][ T2867] erofs: (device loop1): mounted with root inode @ nid 36. [ 192.932780][ T2881] erofs: (device loop1): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 192.970253][ T2881] erofs: (device loop1): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 192.996846][ T2881] erofs: (device loop1): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 193.037423][ T2881] erofs: (device loop1): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 193.087163][ T2881] erofs: (device loop1): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 193.130237][ T2881] erofs: (device loop1): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 193.155931][ T2881] erofs: (device loop1): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 193.173829][ T2881] erofs: (device loop1): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 193.182977][ T2881] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 193.195004][ T2881] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 193.204817][ T2881] bio_check_eod: 10 callbacks suppressed [ 193.204831][ T2881] syz.1.685: attempt to access beyond end of device [ 193.204831][ T2881] loop1: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 193.225004][ T2881] syz.1.685: attempt to access beyond end of device [ 193.225004][ T2881] loop1: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 193.238638][ T2881] syz.1.685: attempt to access beyond end of device [ 193.238638][ T2881] loop1: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 193.252878][ T2881] syz.1.685: attempt to access beyond end of device [ 193.252878][ T2881] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 193.460378][ T24] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 193.610218][ T24] usb 4-1: device descriptor read/64, error -71 [ 193.658038][ T28] audit: type=1400 audit(1771904401.951:268): avc: denied { read } for pid=2888 comm="syz.2.691" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 193.700682][ T2892] loop4: detected capacity change from 0 to 1024 [ 193.748223][ T28] audit: type=1400 audit(1771904401.951:269): avc: denied { open } for pid=2888 comm="syz.2.691" path="/dev/rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 193.772100][ T2507] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 193.799597][ T28] audit: type=1400 audit(1771904401.961:270): avc: denied { ioctl } for pid=2888 comm="syz.2.691" path="/dev/rtc0" dev="devtmpfs" ino=263 ioctlcmd=0x700c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 193.920230][ T24] usb 4-1: device descriptor read/64, error -71 [ 194.006510][ T2902] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 194.033182][ T28] audit: type=1400 audit(1771904402.331:271): avc: denied { accept } for pid=2888 comm="syz.2.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 194.200275][ T24] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 194.360208][ T24] usb 4-1: device descriptor read/64, error -71 [ 194.579692][ T28] audit: type=1400 audit(1771904402.871:272): avc: denied { getopt } for pid=2909 comm="syz.1.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 194.602009][ T2911] loop1: detected capacity change from 0 to 512 [ 194.608586][ T2911] ext3: Unknown parameter 'appraise_type' [ 194.658260][ T2916] loop2: detected capacity change from 0 to 1024 [ 194.666887][ T24] usb 4-1: device descriptor read/64, error -71 [ 194.673945][ T2507] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 194.800609][ T24] usb usb4-port1: attempt power cycle [ 194.807115][ T2924] overlayfs: maximum fs stacking depth exceeded [ 195.210241][ T24] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 195.231239][ T2933] loop2: detected capacity change from 0 to 1024 [ 195.238499][ T2933] ext4: Bad value for 'journal_dev' [ 195.244972][ T24] usb 4-1: device descriptor read/8, error -71 [ 195.411295][ T24] usb 4-1: device descriptor read/8, error -71 [ 195.569197][ T2933] loop2: detected capacity change from 0 to 131072 [ 195.579000][ T2933] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 195.585941][ T2933] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 195.594600][ T2933] F2FS-fs (loop2): invalid crc value [ 195.601867][ T2933] F2FS-fs (loop2): Found nat_bits in checkpoint [ 195.637446][ T2933] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 195.644651][ T2933] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 195.659796][ T28] audit: type=1400 audit(1771904403.951:273): avc: denied { mounton } for pid=2932 comm="syz.2.703" path="/142/file1/bus" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 195.686231][ T28] audit: type=1400 audit(1771904403.981:274): avc: denied { getopt } for pid=2932 comm="syz.2.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 195.690372][ T24] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 195.725838][ T2944] loop4: detected capacity change from 0 to 16 [ 195.736012][ T2944] erofs: (device loop4): mounted with root inode @ nid 36. [ 195.751247][ T24] usb 4-1: device descriptor read/8, error -71 [ 195.857893][ T2947] loop0: detected capacity change from 0 to 16 [ 195.867824][ T2947] erofs: (device loop0): mounted with root inode @ nid 36. [ 195.912801][ T24] usb 4-1: device descriptor read/8, error -71 [ 195.927710][ T2948] erofs: (device loop4): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 195.936906][ T2948] erofs: (device loop4): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 195.945987][ T2948] erofs: (device loop4): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 195.955048][ T2948] erofs: (device loop4): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 195.964140][ T2948] erofs: (device loop4): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 195.973243][ T2948] erofs: (device loop4): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 195.982363][ T2948] erofs: (device loop4): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 195.991471][ T2948] erofs: (device loop4): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 196.000442][ T2948] erofs: (device loop4): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 196.009389][ T2948] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 196.019007][ T2948] syz.4.706: attempt to access beyond end of device [ 196.019007][ T2948] loop4: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 196.033043][ T2948] syz.4.706: attempt to access beyond end of device [ 196.033043][ T2948] loop4: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 196.046567][ T2948] syz.4.706: attempt to access beyond end of device [ 196.046567][ T2948] loop4: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 196.060361][ T2948] syz.4.706: attempt to access beyond end of device [ 196.060361][ T2948] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 196.136342][ T24] usb usb4-port1: unable to enumerate USB device [ 196.187779][ T2950] loop1: detected capacity change from 0 to 16 [ 196.208209][ T2953] loop3: detected capacity change from 0 to 256 [ 196.219942][ T2950] erofs: (device loop1): mounted with root inode @ nid 36. [ 196.233678][ T2953] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5955b8de, utbl_chksum : 0xe619d30d) [ 196.247594][ T2954] erofs: (device loop0): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 196.256694][ T2954] erofs: (device loop0): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 196.265749][ T2954] erofs: (device loop0): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 196.274793][ T2954] erofs: (device loop0): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 196.283906][ T2954] erofs: (device loop0): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 196.293002][ T2954] erofs: (device loop0): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 196.302162][ T2954] erofs: (device loop0): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 196.311266][ T2954] erofs: (device loop0): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 196.320252][ T2954] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 196.329199][ T2954] erofs: (device loop0): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 196.338883][ T2954] syz.0.708: attempt to access beyond end of device [ 196.338883][ T2954] loop0: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 196.352922][ T2954] syz.0.708: attempt to access beyond end of device [ 196.352922][ T2954] loop0: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 196.570907][ T2958] loop3: detected capacity change from 0 to 16 [ 196.577151][ T28] audit: type=1400 audit(1771904404.871:275): avc: denied { mounton } for pid=2959 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 196.585026][ T2958] erofs: (device loop3): mounted with root inode @ nid 36. [ 196.719008][ T2959] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.784783][ T2969] loop0: detected capacity change from 0 to 1024 [ 196.791845][ T2964] erofs: (device loop1): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 196.810679][ T2959] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.818222][ T2959] device bridge_slave_0 entered promiscuous mode [ 196.850274][ T2964] erofs: (device loop1): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 196.871617][ T2969] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 196.888414][ T2959] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.897547][ T2970] erofs: (device loop3): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 196.911189][ T2959] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.920863][ T2959] device bridge_slave_1 entered promiscuous mode [ 196.931038][ T2964] erofs: (device loop1): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 196.940230][ T2970] erofs: (device loop3): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 196.949661][ T2970] erofs: (device loop3): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 196.958798][ T2970] erofs: (device loop3): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 196.962860][ T2969] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 196.968337][ T2970] erofs: (device loop3): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 196.985886][ T2970] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 196.986577][ T10] device bridge_slave_1 left promiscuous mode [ 196.995191][ T2970] erofs: (device loop3): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 197.006407][ T2964] erofs: (device loop1): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 197.010354][ T2970] erofs: (device loop3): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 197.028138][ T2970] erofs: (device loop3): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 197.037152][ T2970] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 197.058961][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.067032][ T2969] cgroup: Unknown subsys name 'uid<00000000000000003327' [ 197.098243][ T10] device bridge_slave_0 left promiscuous mode [ 197.114611][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.137448][ T2964] erofs: (device loop1): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 197.147738][ T10] device veth1_macvtap left promiscuous mode [ 197.163473][ T10] device veth0_vlan left promiscuous mode [ 197.181258][ T2964] erofs: (device loop1): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 197.230298][ T2964] erofs: (device loop1): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 197.265591][ T2964] erofs: (device loop1): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 197.296630][ T28] audit: type=1400 audit(1771904405.591:276): avc: denied { mounton } for pid=2965 comm="syz.4.714" path="/150/file0" dev="tmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 197.305929][ T2964] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 197.380323][ T2359] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 197.465843][ T2964] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 197.570283][ T2359] usb 1-1: Using ep0 maxpacket: 8 [ 197.581355][ T2359] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 197.609881][ T2359] usb 1-1: config 179 has no interface number 0 [ 197.617693][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.625118][ T2359] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 197.646740][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.656865][ T2359] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 197.674060][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.690527][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.707720][ T2147] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.714823][ T2147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.739819][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.749861][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.795628][ T2359] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 197.839348][ T2359] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 197.856986][ T2147] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.864103][ T2147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.906582][ T2359] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 197.944168][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.996322][ T2359] usb 1-1: config 179 interface 65 has no altsetting 0 [ 198.717185][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.723918][ T2359] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 198.732341][ T2990] overlayfs: failed to resolve './file1': -2 [ 198.741056][ T2359] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.742919][ T2990] overlayfs: overlapping lowerdir path [ 198.756644][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.774952][ T2990] overlayfs: overlapping lowerdir path [ 198.780786][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.790003][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.960346][ T2959] device veth0_vlan entered promiscuous mode [ 198.974266][ T2959] device veth1_macvtap entered promiscuous mode [ 198.996401][ T2359] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input12 [ 199.061027][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 199.097434][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 199.105937][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 199.114438][ T2969] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 199.114588][ T2998] erofs: (device loop3): mounted with root inode @ nid 36. [ 199.137766][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 199.160856][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 199.170679][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 199.179830][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 199.219223][ T2999] xt_socket: unknown flags 0xc [ 199.227583][ T2999] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2408 sclass=netlink_route_socket pid=2999 comm=syz.1.719 [ 199.302943][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 199.337454][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 199.351100][ T24] usb 1-1: USB disconnect, device number 18 [ 199.351239][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 199.368243][ T24] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 199.397988][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 199.446481][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 199.534909][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 199.550677][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 199.578619][ T28] audit: type=1400 audit(1771904407.871:277): avc: denied { mounton } for pid=2959 comm="syz-executor" path="/root/syzkaller.XYKJd5/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 199.610408][ T805] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 199.628171][ T3001] set_capacity_and_notify: 1 callbacks suppressed [ 199.628189][ T3001] loop4: detected capacity change from 0 to 1024 [ 199.651295][ T3001] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 199.661727][ T3001] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 199.681533][ T3001] cgroup: Unknown subsys name 'uid<00000000000000003327' [ 199.745596][ T3006] erofs: (device loop3): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 199.754813][ T3006] erofs: (device loop3): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 199.763907][ T3006] erofs: (device loop3): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 199.772976][ T3006] erofs: (device loop3): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 199.782125][ T3006] erofs: (device loop3): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 199.791235][ T3006] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 199.800426][ T3006] erofs: (device loop3): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 199.809558][ T3006] erofs: (device loop3): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 199.818552][ T3006] erofs: (device loop3): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 199.827567][ T3006] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 199.837219][ T3006] bio_check_eod: 10 callbacks suppressed [ 199.837236][ T3006] syz.3.720: attempt to access beyond end of device [ 199.837236][ T3006] loop3: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 199.856958][ T3006] syz.3.720: attempt to access beyond end of device [ 199.856958][ T3006] loop3: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 199.870530][ T3006] syz.3.720: attempt to access beyond end of device [ 199.870530][ T3006] loop3: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 199.884334][ T3006] syz.3.720: attempt to access beyond end of device [ 199.884334][ T3006] loop3: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 199.941423][ T805] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 199.977464][ T805] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice=bb.9d [ 199.990250][ T805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.008918][ T283] EXT4-fs (loop0): unmounting filesystem. [ 200.043364][ T3004] loop5: detected capacity change from 0 to 40427 [ 200.058492][ T3004] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 200.067015][ T3004] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 200.084438][ T3004] F2FS-fs (loop5): invalid crc value [ 200.099003][ T3004] F2FS-fs (loop5): Found nat_bits in checkpoint [ 200.110330][ T412] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 200.144033][ T3004] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 200.151590][ T3004] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 200.243037][ T3014] loop0: detected capacity change from 0 to 256 [ 200.257129][ T3014] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 200.310278][ T412] usb 5-1: Using ep0 maxpacket: 8 [ 200.318039][ T412] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 200.340218][ T412] usb 5-1: config 179 has no interface number 0 [ 200.346538][ T412] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 200.368179][ T412] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 200.394128][ T412] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 200.405587][ T412] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 200.430676][ T412] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 200.445394][ T28] audit: type=1400 audit(1771904408.751:278): avc: denied { read } for pid=3003 comm="syz.5.712" name="usbmon9" dev="devtmpfs" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 200.468682][ T412] usb 5-1: config 179 interface 65 has no altsetting 0 [ 200.480226][ T412] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 200.489393][ T412] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.522922][ T412] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input13 [ 200.724768][ T412] usb 5-1: USB disconnect, device number 10 [ 200.730778][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 200.742759][ T412] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 201.314453][ T286] EXT4-fs (loop4): unmounting filesystem. [ 202.039204][ T24] usb 2-1: USB disconnect, device number 17 [ 202.689167][ T3045] 9pnet_fd: p9_fd_create_unix (3045): problem connecting socket: ./file1: -111 [ 202.698749][ T28] audit: type=1400 audit(1771904411.001:279): avc: denied { read } for pid=3046 comm="syz.5.727" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 202.761947][ T28] audit: type=1400 audit(1771904411.001:280): avc: denied { open } for pid=3046 comm="syz.5.727" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 202.791043][ T28] audit: type=1400 audit(1771904411.051:281): avc: denied { read } for pid=3046 comm="syz.5.727" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 202.868526][ T28] audit: type=1400 audit(1771904411.051:282): avc: denied { open } for pid=3046 comm="syz.5.727" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 202.919102][ T28] audit: type=1400 audit(1771904411.051:283): avc: denied { ioctl } for pid=3046 comm="syz.5.727" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 202.945730][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 203.687848][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 203.702640][ T24] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 203.713838][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.833545][ T28] audit: type=1400 audit(1771904412.121:284): avc: denied { write } for pid=3056 comm="syz.5.735" path="socket:[25058]" dev="sockfs" ino=25058 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 203.865226][ T24] usb 5-1: config 0 descriptor?? [ 205.082034][ T28] audit: type=1400 audit(1771904413.381:285): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 205.394200][ T28] audit: type=1400 audit(1771904413.691:286): avc: denied { create } for pid=3078 comm="syz.0.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 205.499060][ T3086] loop5: detected capacity change from 0 to 1024 [ 205.510624][ T3086] EXT4-fs: Ignoring removed orlov option [ 205.551277][ T3086] EXT4-fs: dax option not supported [ 205.885943][ T2437] usb 5-1: USB disconnect, device number 11 [ 206.396575][ T28] audit: type=1400 audit(1771904414.671:287): avc: denied { block_suspend } for pid=3107 comm="syz.1.750" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 206.720231][ T2437] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 206.930287][ T2437] usb 4-1: Using ep0 maxpacket: 8 [ 206.937702][ T2437] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 206.947726][ T2437] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 206.991090][ T3121] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3121 comm=syz.4.753 [ 207.053940][ T3121] loop4: detected capacity change from 0 to 512 [ 207.181014][ T2437] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 207.191726][ T3121] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 207.200345][ T2437] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 207.210576][ T2437] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.223808][ T2437] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 207.235897][ T2437] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.246449][ T3121] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.753: iget: bad i_size value: 360287970189639680 [ 207.266176][ T3121] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.753: couldn't read orphan inode 15 (err -117) [ 207.279612][ T3121] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 207.762695][ T28] audit: type=1400 audit(1771904415.831:288): avc: denied { map } for pid=3126 comm="syz.1.755" path="socket:[25221]" dev="sockfs" ino=25221 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 207.763493][ T3121] EXT4-fs (loop4): unmounting filesystem. [ 208.037275][ T3132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.050680][ T3132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.070512][ T3132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.083320][ T3132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.101784][ T3132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.133118][ T3132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.340328][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 208.373922][ T28] audit: type=1400 audit(1771904416.671:289): avc: denied { bind } for pid=3149 comm="syz.5.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 208.941981][ T3132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.951941][ T345] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 209.064987][ T3132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.211462][ T3132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.221455][ T3132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.235905][ T3166] loop5: detected capacity change from 0 to 16 [ 209.242820][ T3166] erofs: (device loop5): mounted with root inode @ nid 36. [ 209.500327][ T2437] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 209.561706][ T3170] erofs: (device loop5): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 209.570828][ T3170] erofs: (device loop5): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 209.579873][ T3170] erofs: (device loop5): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 209.588941][ T3170] erofs: (device loop5): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 209.598036][ T3170] erofs: (device loop5): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 209.607124][ T3170] erofs: (device loop5): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 209.616253][ T3170] erofs: (device loop5): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 209.625358][ T3170] erofs: (device loop5): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 209.634405][ T3170] erofs: (device loop5): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 209.643373][ T3170] erofs: (device loop5): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 209.652986][ T3170] syz.5.767: attempt to access beyond end of device [ 209.652986][ T3170] loop5: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 209.667031][ T3170] syz.5.767: attempt to access beyond end of device [ 209.667031][ T3170] loop5: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 209.680597][ T3170] syz.5.767: attempt to access beyond end of device [ 209.680597][ T3170] loop5: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 209.694581][ T3170] syz.5.767: attempt to access beyond end of device [ 209.694581][ T3170] loop5: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 209.776834][ T345] usb 5-1: config 3 has an invalid interface number: 171 but max is 0 [ 209.806944][ T345] usb 5-1: config 3 has no interface number 0 [ 209.813339][ T345] usb 5-1: config 3 interface 171 has no altsetting 0 [ 209.821701][ T345] usb 5-1: New USB device found, idVendor=2013, idProduct=0262, bcdDevice= 1.29 [ 209.831014][ T345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.839091][ T345] usb 5-1: Product: syz [ 209.843674][ T345] usb 5-1: Manufacturer: syz [ 209.848346][ T345] usb 5-1: SerialNumber: syz [ 209.971398][ T2437] usb 2-1: config 0 has an invalid interface number: 131 but max is 0 [ 209.979699][ T2437] usb 2-1: config 0 has no interface number 0 [ 209.987484][ T2437] usb 2-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=a8.c3 [ 209.996636][ T2437] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.004708][ T2437] usb 2-1: Product: syz [ 210.008935][ T2437] usb 2-1: Manufacturer: syz [ 210.013740][ T2437] usb 2-1: SerialNumber: syz [ 210.019447][ T2437] usb 2-1: config 0 descriptor?? [ 210.025777][ T2437] usb 2-1: Invalid firmware size=18. [ 210.066603][ T345] usb 5-1: USB disconnect, device number 12 [ 210.095581][ T3172] loop0: detected capacity change from 0 to 16 [ 210.122110][ T3172] erofs: (device loop0): mounted with root inode @ nid 36. [ 210.142271][ T3174] loop5: detected capacity change from 0 to 16 [ 210.152143][ T3174] erofs: (device loop5): mounted with root inode @ nid 36. [ 210.236074][ T2437] usb 2-1: USB disconnect, device number 18 [ 210.260584][ T39] usb 4-1: USB disconnect, device number 25 [ 210.545628][ T3176] erofs: (device loop5): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 210.554796][ T3176] erofs: (device loop5): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 210.563938][ T3176] erofs: (device loop5): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 210.573143][ T3176] erofs: (device loop5): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 210.582359][ T3176] erofs: (device loop5): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 210.591503][ T3176] erofs: (device loop5): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 210.600809][ T3176] erofs: (device loop5): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 210.609988][ T3176] erofs: (device loop5): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 210.619020][ T3176] erofs: (device loop5): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 210.628257][ T3176] erofs: (device loop5): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 210.637954][ T3176] syz.5.769: attempt to access beyond end of device [ 210.637954][ T3176] loop5: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 210.652023][ T3176] syz.5.769: attempt to access beyond end of device [ 210.652023][ T3176] loop5: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 210.665626][ T3176] syz.5.769: attempt to access beyond end of device [ 210.665626][ T3176] loop5: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 210.679510][ T3176] syz.5.769: attempt to access beyond end of device [ 210.679510][ T3176] loop5: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 210.693495][ T3177] erofs: (device loop0): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 210.702625][ T3177] erofs: (device loop0): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 210.711738][ T3177] erofs: (device loop0): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 210.720933][ T3177] erofs: (device loop0): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 210.730197][ T3177] erofs: (device loop0): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 210.739307][ T3177] erofs: (device loop0): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 210.748538][ T3177] erofs: (device loop0): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 210.757783][ T3177] erofs: (device loop0): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 210.766821][ T3177] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 210.775844][ T3177] erofs: (device loop0): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 210.785630][ T3177] syz.0.768: attempt to access beyond end of device [ 210.785630][ T3177] loop0: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 210.804338][ T3177] syz.0.768: attempt to access beyond end of device [ 210.804338][ T3177] loop0: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 212.110512][ T3181] xt_socket: unknown flags 0xc [ 212.115714][ T3181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2408 sclass=netlink_route_socket pid=3181 comm=syz.3.770 [ 212.176494][ T3191] loop0: detected capacity change from 0 to 1024 [ 212.184396][ T3191] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 212.194626][ T3191] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 212.206730][ T3191] cgroup: Unknown subsys name 'uid<00000000000000003327' [ 212.382540][ T28] audit: type=1400 audit(1771904420.681:290): avc: denied { mounton } for pid=3198 comm="syz.1.776" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 212.540244][ T2437] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 212.547896][ T39] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 212.805961][ T28] audit: type=1400 audit(1771904420.911:291): avc: denied { mounton } for pid=3198 comm="syz.1.776" path="/proc/492/cgroup" dev="proc" ino=25310 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 212.852231][ T28] audit: type=1400 audit(1771904420.921:292): avc: denied { mounton } for pid=3198 comm="syz.1.776" path="/proc/492/cgroup" dev="nsfs" ino=4026532551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 213.050266][ T2437] usb 1-1: Using ep0 maxpacket: 8 [ 213.056665][ T39] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 213.071841][ T2437] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 213.084316][ T39] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice=bb.9d [ 213.094820][ T2437] usb 1-1: config 179 has no interface number 0 [ 213.110369][ T2437] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 213.122204][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.136154][ T2437] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 213.162131][ T2437] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 213.191189][ T2437] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 213.202389][ T2437] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 213.288089][ T2437] usb 1-1: config 179 interface 65 has no altsetting 0 [ 213.295055][ T2437] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 213.304142][ T2437] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.317387][ T2437] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input14 [ 213.520012][ T2437] usb 1-1: USB disconnect, device number 19 [ 213.520056][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 213.535173][ T2437] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 213.628176][ T3214] loop4: detected capacity change from 0 to 16 [ 213.635030][ T3214] erofs: (device loop4): mounted with root inode @ nid 36. [ 213.801834][ T3216] erofs: (device loop4): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 213.811117][ T3216] erofs: (device loop4): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 213.820428][ T3216] erofs: (device loop4): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 213.829743][ T3216] erofs: (device loop4): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 213.839129][ T3216] erofs: (device loop4): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 213.848434][ T3216] erofs: (device loop4): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 213.857861][ T3216] erofs: (device loop4): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 213.867373][ T3216] erofs: (device loop4): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 213.876699][ T3216] erofs: (device loop4): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 213.885942][ T3216] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 214.055573][ T283] EXT4-fs (loop0): unmounting filesystem. [ 214.194743][ T3221] loop5: detected capacity change from 0 to 16 [ 214.204746][ T3221] erofs: (device loop5): mounted with root inode @ nid 36. [ 214.449600][ T3226] erofs: (device loop5): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 214.458889][ T3226] erofs: (device loop5): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 214.468041][ T3226] erofs: (device loop5): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 214.477164][ T3226] erofs: (device loop5): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 214.486378][ T3226] erofs: (device loop5): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 214.495501][ T3226] erofs: (device loop5): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 214.504891][ T3226] erofs: (device loop5): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 214.514143][ T3226] erofs: (device loop5): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 214.523168][ T3226] erofs: (device loop5): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 214.532433][ T3226] erofs: (device loop5): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 214.557098][ T345] usb 4-1: USB disconnect, device number 26 [ 214.633262][ T3230] loop3: detected capacity change from 0 to 16 [ 214.651021][ T3230] erofs: (device loop3): mounted with root inode @ nid 36. [ 215.205152][ T3231] erofs: (device loop3): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 215.214307][ T3231] erofs: (device loop3): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 215.223444][ T3231] erofs: (device loop3): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 215.232564][ T3231] erofs: (device loop3): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 215.241722][ T3231] erofs: (device loop3): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 215.250824][ T3231] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 215.260031][ T3231] erofs: (device loop3): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 215.269288][ T3231] erofs: (device loop3): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 215.278301][ T3231] erofs: (device loop3): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 215.287320][ T3231] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 215.297009][ T3231] bio_check_eod: 10 callbacks suppressed [ 215.297034][ T3231] syz.3.784: attempt to access beyond end of device [ 215.297034][ T3231] loop3: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 215.316828][ T3231] syz.3.784: attempt to access beyond end of device [ 215.316828][ T3231] loop3: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 215.330411][ T3231] syz.3.784: attempt to access beyond end of device [ 215.330411][ T3231] loop3: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 215.344283][ T3231] syz.3.784: attempt to access beyond end of device [ 215.344283][ T3231] loop3: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 215.463540][ T3238] loop5: detected capacity change from 0 to 16 [ 215.478249][ T3238] erofs: (device loop5): mounted with root inode @ nid 36. [ 215.526119][ T3240] loop3: detected capacity change from 0 to 16 [ 215.536946][ T3240] erofs: (device loop3): mounted with root inode @ nid 36. [ 215.633719][ T3243] overlayfs: overlapping lowerdir path [ 215.639897][ T3243] overlayfs: overlapping lowerdir path [ 215.730235][ T3244] erofs: (device loop5): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 215.739384][ T3244] erofs: (device loop5): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 215.748507][ T3244] erofs: (device loop5): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 215.757596][ T3244] erofs: (device loop5): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 215.767057][ T3244] erofs: (device loop5): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 215.776203][ T3244] erofs: (device loop5): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 215.785681][ T3244] erofs: (device loop5): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 215.795019][ T3244] erofs: (device loop5): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 215.804074][ T3244] erofs: (device loop5): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 215.813080][ T3244] erofs: (device loop5): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 215.823274][ T3244] syz.5.787: attempt to access beyond end of device [ 215.823274][ T3244] loop5: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 215.837481][ T3244] syz.5.787: attempt to access beyond end of device [ 215.837481][ T3244] loop5: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 215.851239][ T3244] syz.5.787: attempt to access beyond end of device [ 215.851239][ T3244] loop5: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 215.865209][ T3244] syz.5.787: attempt to access beyond end of device [ 215.865209][ T3244] loop5: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 215.991715][ T3248] loop4: detected capacity change from 0 to 1024 [ 215.998758][ T3248] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 216.025789][ T3248] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 216.053819][ T3248] cgroup: Unknown subsys name 'uid<00000000000000003327' [ 216.135245][ T3253] loop1: detected capacity change from 0 to 512 [ 216.144718][ T3253] EXT4-fs: dax option not supported [ 216.172575][ T3254] erofs: (device loop3): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 216.182090][ T3254] erofs: (device loop3): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 216.191162][ T3254] erofs: (device loop3): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 216.200241][ T3254] erofs: (device loop3): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 216.209333][ T3254] erofs: (device loop3): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 216.218405][ T3254] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 216.227529][ T3254] erofs: (device loop3): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 216.236649][ T3254] erofs: (device loop3): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 216.245622][ T3254] erofs: (device loop3): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 216.254591][ T3254] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 216.264210][ T3254] syz.3.788: attempt to access beyond end of device [ 216.264210][ T3254] loop3: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 216.278263][ T3254] syz.3.788: attempt to access beyond end of device [ 216.278263][ T3254] loop3: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 216.564645][ T3269] xt_socket: unknown flags 0xc [ 216.572686][ T3269] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2408 sclass=netlink_route_socket pid=3269 comm=syz.0.795 [ 216.610257][ T3262] loop1: detected capacity change from 0 to 256 [ 216.653314][ T3262] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 216.835786][ T19] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 216.880282][ T2437] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 217.030203][ T19] usb 5-1: Using ep0 maxpacket: 8 [ 217.037372][ T19] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 217.045847][ T19] usb 5-1: config 179 has no interface number 0 [ 217.052264][ T19] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 217.063714][ T19] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 217.071943][ T2437] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 217.075626][ T19] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 217.096013][ T2437] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice=bb.9d [ 217.096889][ T19] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 217.115789][ T19] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 217.118362][ T2437] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.137172][ T19] usb 5-1: config 179 interface 65 has no altsetting 0 [ 217.144242][ T19] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 217.153423][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.183330][ T19] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input15 [ 217.427370][ T412] usb 5-1: USB disconnect, device number 13 [ 217.427416][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 217.442522][ T412] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 217.660459][ T3281] loop1: detected capacity change from 0 to 16 [ 217.669784][ T3281] erofs: (device loop1): mounted with root inode @ nid 36. [ 217.835673][ T3283] erofs: (device loop1): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 217.844930][ T3283] erofs: (device loop1): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 217.854068][ T3283] erofs: (device loop1): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 217.863270][ T3283] erofs: (device loop1): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 217.872451][ T3283] erofs: (device loop1): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 217.881765][ T3283] erofs: (device loop1): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 217.890997][ T3283] erofs: (device loop1): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 217.909901][ T3283] erofs: (device loop1): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 217.919085][ T3283] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 217.928189][ T3283] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 217.962372][ T286] EXT4-fs (loop4): unmounting filesystem. [ 218.005255][ T3287] loop4: detected capacity change from 0 to 16 [ 218.016904][ T3287] erofs: Unknown parameter '00000000000000000000000' [ 218.146985][ T3292] loop5: detected capacity change from 0 to 16 [ 218.166083][ T3292] erofs: (device loop5): mounted with root inode @ nid 36. [ 218.360853][ T3296] erofs: (device loop5): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 218.369990][ T3296] erofs: (device loop5): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 218.379104][ T3296] erofs: (device loop5): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 218.388188][ T3296] erofs: (device loop5): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 218.397517][ T3296] erofs: (device loop5): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 218.406761][ T3296] erofs: (device loop5): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 218.416125][ T3296] erofs: (device loop5): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 218.425503][ T3296] erofs: (device loop5): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 218.434553][ T3296] erofs: (device loop5): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 218.443572][ T3296] erofs: (device loop5): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 218.670721][ T3300] loop1: detected capacity change from 0 to 16 [ 218.687507][ T3300] erofs: (device loop1): mounted with root inode @ nid 36. [ 218.917184][ T3302] erofs: (device loop1): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 218.926360][ T3302] erofs: (device loop1): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 218.935479][ T3302] erofs: (device loop1): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 218.944595][ T3302] erofs: (device loop1): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 218.954043][ T3302] erofs: (device loop1): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 218.963187][ T3302] erofs: (device loop1): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 218.972607][ T3302] erofs: (device loop1): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 218.981957][ T3302] erofs: (device loop1): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 218.990982][ T3302] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 219.000059][ T3302] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 219.412976][ T412] usb 1-1: USB disconnect, device number 20 [ 220.315566][ T3321] loop3: detected capacity change from 0 to 1024 [ 220.337987][ T3319] loop1: detected capacity change from 0 to 256 [ 220.455825][ T3321] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 220.521515][ T3319] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 220.540040][ T3321] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 220.590351][ T3321] cgroup: Unknown subsys name 'uid<00000000000000003327' [ 220.880220][ T39] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 221.070800][ T39] usb 4-1: Using ep0 maxpacket: 8 [ 221.082327][ T39] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 221.109777][ T3333] loop5: detected capacity change from 0 to 16 [ 221.120666][ T39] usb 4-1: config 179 has no interface number 0 [ 221.126974][ T39] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 221.144840][ T3333] erofs: (device loop5): mounted with root inode @ nid 36. [ 221.190205][ T39] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 221.212782][ T39] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 221.250210][ T39] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 221.280191][ T39] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 221.320216][ T39] usb 4-1: config 179 interface 65 has no altsetting 0 [ 221.327130][ T39] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 221.350225][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.390306][ T39] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input16 [ 221.470729][ T3335] erofs: (device loop5): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 221.479823][ T3335] erofs: (device loop5): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 221.488901][ T3335] erofs: (device loop5): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 221.498050][ T3335] erofs: (device loop5): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 221.507188][ T3335] erofs: (device loop5): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 221.516251][ T3335] erofs: (device loop5): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 221.525387][ T3335] erofs: (device loop5): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 221.534492][ T3335] erofs: (device loop5): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 221.543459][ T3335] erofs: (device loop5): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 221.552426][ T3335] erofs: (device loop5): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 221.562094][ T3335] bio_check_eod: 14 callbacks suppressed [ 221.562109][ T3335] syz.5.818: attempt to access beyond end of device [ 221.562109][ T3335] loop5: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 221.581773][ T3335] syz.5.818: attempt to access beyond end of device [ 221.581773][ T3335] loop5: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 221.595308][ T3335] syz.5.818: attempt to access beyond end of device [ 221.595308][ T3335] loop5: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 221.609134][ T3335] syz.5.818: attempt to access beyond end of device [ 221.609134][ T3335] loop5: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 221.680123][ T3336] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 221.698651][ T6] usb 4-1: USB disconnect, device number 27 [ 221.698715][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 221.712941][ T6] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 221.749510][ T3340] loop4: detected capacity change from 0 to 16 [ 221.790694][ T3340] erofs: (device loop4): mounted with root inode @ nid 36. [ 222.021616][ T3342] erofs: (device loop4): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 222.082835][ T3342] erofs: (device loop4): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 222.112187][ T3342] erofs: (device loop4): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 222.143824][ T3342] erofs: (device loop4): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 222.188389][ T3342] erofs: (device loop4): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 222.253231][ T3342] erofs: (device loop4): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 222.269053][ T3349] xt_socket: unknown flags 0xc [ 222.456269][ T3342] erofs: (device loop4): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 222.524858][ T285] EXT4-fs (loop3): unmounting filesystem. [ 222.541431][ T3342] erofs: (device loop4): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 222.550609][ T805] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 222.587892][ T3342] erofs: (device loop4): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 222.626578][ T3342] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 222.646934][ T3342] syz.4.819: attempt to access beyond end of device [ 222.646934][ T3342] loop4: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 222.687084][ T3342] syz.4.819: attempt to access beyond end of device [ 222.687084][ T3342] loop4: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 222.725610][ T3342] syz.4.819: attempt to access beyond end of device [ 222.725610][ T3342] loop4: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 222.761505][ T3342] syz.4.819: attempt to access beyond end of device [ 222.761505][ T3342] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 222.831335][ T805] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 222.841598][ T805] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice=bb.9d [ 222.850700][ T805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.980114][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 323.987120][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P3361/1:b..l [ 323.995065][ C1] (detected by 1, t=10003 jiffies, g=20793, q=264 ncpus=2) [ 324.002363][ C1] task:syz-executor state:R running task stack:27856 pid:3361 ppid:285 flags:0x00004000 [ 324.013262][ C1] Call Trace: [ 324.016560][ C1] [ 324.019519][ C1] __schedule+0xba6/0x1500 [ 324.023979][ C1] ? release_firmware_map_entry+0x190/0x190 [ 324.029907][ C1] ? preempt_schedule+0xbc/0xd0 [ 324.034788][ C1] preempt_schedule_common+0x9b/0xf0 [ 324.040105][ C1] preempt_schedule+0xbc/0xd0 [ 324.044829][ C1] ? __cfi_preempt_schedule+0x10/0x10 [ 324.050235][ C1] ? page_add_file_rmap+0x486/0x550 [ 324.055551][ C1] ? next_uptodate_page+0x863/0x890 [ 324.060807][ C1] preempt_schedule_thunk+0x16/0x18 [ 324.066029][ C1] _raw_spin_unlock+0x5f/0x70 [ 324.070739][ C1] filemap_map_pages+0x101c/0x12e0 [ 324.075878][ C1] ? _raw_spin_unlock+0x4c/0x70 [ 324.080764][ C1] ? __cfi_filemap_map_pages+0x10/0x10 [ 324.086264][ C1] ? preempt_schedule_irq+0xca/0x120 [ 324.091585][ C1] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 324.097342][ C1] ? __cfi____update_load_sum+0x10/0x10 [ 324.102926][ C1] do_fault+0xf6d/0x1e20 [ 324.107191][ C1] ? pte_marker_clear+0x220/0x220 [ 324.112238][ C1] handle_mm_fault+0x133a/0x26c0 [ 324.117218][ C1] ? __cfi_handle_mm_fault+0x10/0x10 [ 324.122535][ C1] ? lock_vma_under_rcu+0x400/0x4f0 [ 324.127771][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 324.133341][ C1] ? xfd_validate_state+0x70/0x150 [ 324.138486][ C1] do_user_addr_fault+0x905/0x1050 [ 324.143638][ C1] exc_page_fault+0x51/0xb0 [ 324.148167][ C1] asm_exc_page_fault+0x27/0x30 [ 324.153052][ C1] RIP: 0033:0x7f202857689f [ 324.157489][ C1] RSP: 002b:00007ffc6bee4798 EFLAGS: 00010287 [ 324.163575][ C1] RAX: 00000000000009c7 RBX: 00007ffc6bee4cd0 RCX: 0000000000000000 [ 324.171574][ C1] RDX: 00007ffc6bee4d90 RSI: 0000000000000025 RDI: 00007f20286339c7 [ 324.179565][ C1] RBP: 00007ffc6bee4eac R08: 00007ffc6bee4f40 R09: 0000000000000000 [ 324.187560][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000099 [ 324.195557][ C1] R13: 0000000000000000 R14: 00007f20286339c7 R15: 00007ffc6bee4d90 [ 324.203586][ C1] [ 324.206629][ C1] rcu: rcu_preempt kthread starved for 10024 jiffies! g20793 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 324.217837][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 324.227816][ C1] rcu: RCU grace-period kthread stack dump: [ 324.233714][ C1] task:rcu_preempt state:R running task stack:28064 pid:14 ppid:2 flags:0x00004000 [ 324.244529][ C1] Call Trace: [ 324.247828][ C1] [ 324.250797][ C1] __schedule+0xba6/0x1500 [ 324.255249][ C1] ? release_firmware_map_entry+0x190/0x190 [ 324.261200][ C1] schedule+0xbd/0x170 [ 324.265306][ C1] schedule_timeout+0x159/0x340 [ 324.270181][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 324.275585][ C1] ? preempt_schedule+0xbc/0xd0 [ 324.280513][ C1] ? __cfi_process_timeout+0x10/0x10 [ 324.285824][ C1] ? prepare_to_swait_event+0x308/0x320 [ 324.291399][ C1] rcu_gp_fqs_loop+0x2e9/0x10c0 [ 324.296270][ C1] ? _raw_spin_unlock_irq+0x60/0x70 [ 324.301509][ C1] ? rcu_gp_init+0xf30/0xf30 [ 324.306129][ C1] rcu_gp_kthread+0x99/0x390 [ 324.310791][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 324.316019][ C1] ? __kasan_check_read+0x11/0x20 [ 324.321064][ C1] ? __kthread_parkme+0x142/0x180 [ 324.326116][ C1] kthread+0x281/0x320 [ 324.330215][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 324.335440][ C1] ? __cfi_kthread+0x10/0x10 [ 324.340055][ C1] ret_from_fork+0x1f/0x30 [ 324.344507][ C1] [ 324.347543][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 324.353920][ C1] CPU: 1 PID: 3359 Comm: syz.1.825 Tainted: G W syzkaller #0 [ 324.362709][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 324.372783][ C1] RIP: 0010:_raw_spin_unlock_irq+0x48/0x70 [ 324.378641][ C1] Code: 74 12 48 89 fb 48 c7 c7 00 d5 0d 87 e8 21 07 b6 fc 48 89 df 48 83 3d 96 3c 0d 02 00 74 26 e8 13 0d 00 00 90 fb bf 01 00 00 00 03 0b 4c fc 65 8b 05 44 d5 01 7b 85 c0 74 03 5b 5d c3 e8 44 e4 [ 324.398274][ C1] RSP: 0018:ffffc9000ffbfbb0 EFLAGS: 00000246 [ 324.404367][ C1] RAX: 0000000000000001 RBX: 0000000000000021 RCX: dffffc0000000000 [ 324.412358][ C1] RDX: ffffc90001259000 RSI: 000000000007ffff RDI: 0000000000000001 [ 324.420354][ C1] RBP: ffffc9000ffbfbb8 R08: ffffc9000ffbfdff R09: 1ffff92001ff7fbf [ 324.428348][ C1] R10: dffffc0000000000 R11: fffff52001ff7fc0 R12: dffffc0000000000 [ 324.436341][ C1] R13: 1ffff11022c2febc R14: 000000001c000004 R15: ffff88811617f5e0 [ 324.444342][ C1] FS: 00007fe9a52ba6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 324.453302][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 324.459912][ C1] CR2: 000020000006b000 CR3: 000000012fd4b000 CR4: 00000000003506a0 [ 324.467912][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 324.475933][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 324.483931][ C1] Call Trace: [ 324.487230][ C1] [ 324.490182][ C1] get_signal+0x12a4/0x1520 [ 324.494722][ C1] arch_do_signal_or_restart+0xd1/0x1140 [ 324.500395][ C1] ? __cfi___x64_sys_rt_sigreturn+0x10/0x10 [ 324.506322][ C1] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 324.512506][ C1] exit_to_user_mode_loop+0x7a/0xb0 [ 324.517730][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 324.523215][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 324.528714][ C1] do_syscall_64+0x58/0xa0 [ 324.533157][ C1] ? clear_bhb_loop+0x30/0x80 [ 324.537857][ C1] ? clear_bhb_loop+0x30/0x80 [ 324.542558][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 324.548496][ C1] RIP: 0033:0x7fe9a439c627 [ 324.552952][ C1] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 324.572587][ C1] RSP: 002b:00007fe9a52ba028 EFLAGS: 00000246 [ 324.578675][ C1] RAX: 0000000000000113 RBX: 00007fe9a4615fa0 RCX: 00007fe9a439c629 [ 324.586668][ C1] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000004 [ 324.594664][ C1] RBP: 00007fe9a4432b39 R08: 0000000000000007 R09: 0000000000000000 [ 324.602655][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.610648][ C1] R13: 00007fe9a4616038 R14: 00007fe9a4615fa0 R15: 00007ffc62102088 [ 324.618648][ C1] [ 428.740214][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 203s! [ 428.749199][ C0] Showing busy workqueues and worker pools: [ 428.755128][ C0] workqueue events: flags=0x0 [ 428.759830][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 428.759879][ C0] pending: psi_avgs_work, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker [ 428.759972][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 428.760014][ C0] pending: vmstat_shepherd, kfree_rcu_monitor, key_garbage_collector, rht_deferred_worker [ 428.795721][ C0] workqueue events_long: flags=0x0 [ 428.800868][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 [ 428.800921][ C0] pending: br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup [ 428.800999][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 428.801044][ C0] pending: br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work [ 428.801117][ C0] workqueue events_unbound: flags=0x2 [ 428.841685][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4 [ 428.841734][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 428.841791][ C0] workqueue events_power_efficient: flags=0x80 [ 428.862819][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=6/256 refcnt=7 [ 428.862867][ C0] pending: neigh_managed_work, neigh_managed_work, neigh_periodic_work, neigh_periodic_work, gc_worker, reg_check_chans_work [ 428.862977][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 428.863018][ C0] pending: wg_ratelimiter_gc_entries, check_lifetime [ 428.863080][ C0] workqueue mm_percpu_wq: flags=0x8 [ 428.904038][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 428.904093][ C0] pending: vmstat_update [ 428.904133][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 428.904174][ C0] pending: vmstat_update [ 428.904212][ C0] workqueue writeback: flags=0x4a [ 428.933866][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=3/256 refcnt=5 [ 428.933919][ C0] pending: wb_workfn, wb_workfn, wb_workfn [ 428.933981][ C0] workqueue kblockd: flags=0x18 [ 428.952244][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 428.952374][ C0] pending: blk_mq_timeout_work [ 428.952411][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=3/256 refcnt=4 [ 428.952453][ C0] pending: blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work [ 428.952521][ C0] workqueue usb_hub_wq: flags=0x4 [ 428.987161][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 428.987217][ C0] pending: hub_event [ 428.987487][ C0] workqueue dm_bufio_cache: flags=0x8 [ 429.004795][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.004847][ C0] pending: work_fn [ 429.004948][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 429.022325][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=4 [ 429.022375][ C0] pending: addrconf_verify_work [ 429.022409][ C0] inactive: addrconf_verify_work, addrconf_verify_work [ 429.022456][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=4 [ 429.022497][ C0] pending: addrconf_verify_work [ 429.022525][ C0] inactive: addrconf_verify_work, addrconf_verify_work [ 429.022753][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.067823][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.067875][ C0] pending: wg_packet_encrypt_worker [ 429.067913][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.067956][ C0] pending: wg_packet_encrypt_worker [ 429.067992][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.099732][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.099782][ C0] pending: wg_packet_encrypt_worker [ 429.099819][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.099861][ C0] pending: wg_packet_encrypt_worker [ 429.099894][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.131723][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.131774][ C0] pending: wg_packet_encrypt_worker [ 429.131810][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.131852][ C0] pending: wg_packet_encrypt_worker [ 429.131885][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.163634][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.163690][ C0] pending: wg_packet_encrypt_worker [ 429.163731][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.163773][ C0] pending: wg_packet_encrypt_worker [ 429.163809][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.195543][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.195596][ C0] pending: wg_packet_encrypt_worker [ 429.195634][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.195677][ C0] pending: wg_packet_encrypt_worker [ 429.195712][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.227632][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.227684][ C0] pending: wg_packet_encrypt_worker [ 429.227722][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.227766][ C0] pending: wg_packet_encrypt_worker [ 429.227800][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.259506][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.259557][ C0] pending: wg_packet_encrypt_worker [ 429.259595][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.259638][ C0] pending: wg_packet_encrypt_worker [ 429.259673][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.291383][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.291432][ C0] pending: wg_packet_encrypt_worker [ 429.291468][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.291509][ C0] pending: wg_packet_encrypt_worker [ 429.291542][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.323233][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.323284][ C0] pending: wg_packet_encrypt_worker [ 429.323321][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.323364][ C0] pending: wg_packet_encrypt_worker [ 429.323461][ C0] workqueue wg-kex-wg0: flags=0x6 [ 429.354902][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 429.354951][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 429.355009][ C0] workqueue wg-kex-wg1: flags=0x6 [ 429.376299][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.376342][ C0] pending: wg_packet_handshake_send_worker [ 429.376375][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.395071][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.395123][ C0] pending: wg_packet_encrypt_worker [ 429.395165][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.395207][ C0] pending: wg_packet_encrypt_worker [ 429.395240][ C0] workqueue wg-kex-wg2: flags=0x6 [ 429.426909][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.426955][ C0] pending: wg_packet_handshake_send_worker [ 429.426991][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.445663][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.445712][ C0] pending: wg_packet_encrypt_worker [ 429.445746][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.445789][ C0] pending: wg_packet_encrypt_worker [ 429.445894][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.477615][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.477665][ C0] pending: wg_packet_encrypt_worker [ 429.477702][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.477744][ C0] pending: wg_packet_encrypt_worker [ 429.477778][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.509461][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.509512][ C0] pending: wg_packet_encrypt_worker [ 429.509550][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.509591][ C0] pending: wg_packet_encrypt_worker [ 429.509624][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.541350][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.541405][ C0] pending: wg_packet_encrypt_worker [ 429.541447][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.541491][ C0] pending: wg_packet_encrypt_worker