last executing test programs:

1.886323637s ago: executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='kfree\x00'}, 0x10)
creat(&(0x7f0000000a80)='./file1\x00', 0x0)
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
fstat(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x100080d, &(0x7f0000003200)=ANY=[@ANYRES32=r2, @ANYRESOCT, @ANYRES8=r2, @ANYRESDEC, @ANYBLOB="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", @ANYRESHEX, @ANYRESOCT=0x0, @ANYRES32, @ANYRESDEC, @ANYRESOCT=r1, @ANYRES64, @ANYRES8=r2, @ANYRES8=r0], 0xff, 0x1f0, &(0x7f0000000900)="$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")

1.720360164s ago: executing program 0:
syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0918108ac051582588d0000000109022d00010000000009040000030b08000009058d67c87d2a000009050502000000000009058b6e"], 0x0)

1.304697318s ago: executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
rt_sigpending(0x0, 0x0)

1.270675463s ago: executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[], 0xc0}, 0x1, 0x7}, 0x0)

1.260549785s ago: executing program 4:
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x1805a, &(0x7f0000000000)=ANY=[], 0x1, 0x105c3, &(0x7f0000020c00)="$eJzs3E1vG0UYB/DHDW3aUkqF+sKNlRBSImGrTtKKCgkCtAKkpop4OXABHHtjubW9IXackDNIHPgavSEuHPgEXPgeSAhxAYkbCOTdTdVUPbTUxC35/aTNf3Y8fjxj5eDxJhvAoXUm+eP3SpyOExExExGnIvJ2pTxyy0U8HxEvRMSRu45K2X+n41hEnIyI0+PiRc1K+dC3n33/12j3+le3X/3l4yu3f6tMb9XAQXv9nvOXIqK3UbS3e0Vm7SJvlv2NUSfP3tKozOKB3q3yPCtyO13LK2w39sY18lxsF+Ozja3BONe7jeY42531vH+jX7zgYNTeq5M/4WZjMz9vpWt5dgZZnu3dYl47Ze4OhkWdVlnv87x8DId7WfSnO2mxno1beTb7w7K/qJu10p1xjsosXy6aWbeVz2Ptod7qJ8r1Tn9rJxmlm4NO1k8u1eqv1OqXq/XNrJUO06Vqo9e6vJTMtbvjYdVh2ugtt7Os3U1rzaw3n8y1m81qvZ7MXU3XOo1+Uq/XFmsXq5fmy9bLyds3Pky6rWRunG92+lvDTneQrGebSfGM+WShtnhlPnmxnry/spqsvnft2srqB59c/ejGGyvvvlUO2pvWbP47MUyXkrmFiwsL1frF6kJ9/vCs/860Jrh+eCQ+SQI8NPt/YBrs//fv/2ft/w/l/vewrx8eiU+SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH1k9Hv3snb5wpzp8u+58pu56LiAsRcT4izkXE3/cxE8f21TwbEZWyfb/xR++Zww+VyCuMnzNbHicjYrk8/nz2v34XAAAA4P/rmx+/+DJiZtzMf7w27QlxkMovbY5Pql7+lc9Tk6p2Ni+2M6Fq5/ZKTsT5iDh65tcJVbsQEUdOfTqhag9kZl8cvysqRRw5yNkAAAAHY/9OYGK7NwAAAB47X097AkxHfr22/Fv88lrwbBHlBcET+84AAACAJ1Bl2hMAAAAAHti//V/dfP8/6fv//ez+fwAAAPBYKe7/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8A87d4+jNhDFAfyB45BPBUV8XIUqSknBIXKElDlAcpt0HCGKhDgH6XKECCLGs4VXFKv1GO+i308yb8aCPw+oxoMMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAn/7U2/XP/fcfXXOOv06dlPk0AAAAwCWHertOg2kzf5vPv8+nPkbEMiIWETGPiEtr9ypetjJnETHK40vPr+/18DsiJZxfM8nHm4j4nI9/H/r+FgAAAOB27XerTUR1HqaHT0M3xDXlizavSuWlSz4vSqXNUti3Qmnzu8giFhFRT/8WSltGxPjdl0JpD1Ll0vrt02TUlPE1uwEAAK6japViqzcAAACenK9DN8Aw0n5t/i9+3gueNCVvC75uzQAAAIBnaDR0AwAAAEDv0vrf/f8AAADgtjX3/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBPh3q73u9Wm645x1M3j3rTcdeuAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP/sz8sJhEAYhMHe9Z3TYP5hSYPG4MEqED7+xsMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHzL7/7yf2JqnEnmXhtLzyPJ2qmxdWrsnRtHfxhvvwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC725+4EQiAIwmDf+Z/TYv5hSYPGIEIVLHzMMA8LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCxAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWF/bm3TRgI4zj8+pIocZuMkN5KYAYaKgQj8CEhWfIMDMBCNFS0FovACiDBuaYzBc/T/H/FFfcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvKbLwxdvEVFE6jJFGm9+Tu8R8RFp27ajz1sWu/Ox+brnbH+Y5PyO6W8ZEWUUfZwDANC7qtscq3W9/Mv7n3eQd5i3mjf14pmfBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAruzbP2sUWxQA8LPZP0leqte84tkICkmj68Z/G0grRASxsbAMyRqCGw1JBBNEiN9A8AvYa5XWz2BvYaGVIClURLBRNjub3OiCUXFmSX4/uDPnXnZm7t1i4cy5CwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwS7Y3Y6wXlyLi/8pe3PHy/f25fud3H1/812s3nleW03t2blGNiJuL7daZHNcyaB58119d37g12263Vv5iMJzjswRFBhEDMQ1BEkT59y4v4McJAIBDrZq1Tl7/uro10xkrTUd8fbI//x9P4jhg/v/56cPL6bPS/L+R2woHX31tabm+ur5xanFpdqG10LrdmJo6d7558cJko77zrqR+1N+YAAAA8KdqWUvz/6HpH+v//yRxHDD/v3vl2rHO2Eh2TVn+39de0a/omQAAABxt/x7/9KHUZ7xUq8W92bW1lUb3uNuf7B4LmOrPXd/fHc5amv+XpwuaGwAAAJCr7c3SWERs9frz2blv/X9i77q0/v/qceVqes9yRIxm9f/Tc3fa87msZPDl8SfkotcIAABAsUazltb/qzv7/yu7nxmKiIkT3bg3epD9/+Mnn71Nn5Xu/z+b2woH01Cz+33snJsRlWbRMwIAAOAwG8laJ/9/U42ZlS+PLtXs/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+sWP3KBEDUQCAk52NVuKCYGPjCUQ7qwULwXuIguARvIJ38A7eI6VoaS1biIWtvElGl20WLBJ/vg8m7yUMmZep8gYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtRYnX3mKy6zLJ/2zx9eb84hPKzG8vLW7MSKvhyz6F6qPx64AAACA/yCV/r6qqufm/iziZJ77/6bMiZ7/bqvLSz+/2veXWHr/GHvp4f1zoVm3Trz08ur64nCwL/z5ttfOmOadz2cvqRzC7CyavJ/1bduebuR0c4BiAYBvOSixT8r/UMSjMQsD4C/bX76Z9qNa6v/TfJS6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb1EQAA//9TYmvH")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r1, &(0x7f0000000f80)='./file2\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x141842, 0x0)
write(r2, &(0x7f0000004200)="74efc4c419fdb8d66bbba728f371d056ad6f01e9762d70401d1c9d331b48b925e9e6a7759abb206b9b18bfc3f3f96adb2b37c2121ef21e91bac768dd33df29649da1d82e826a55c4d620b6f510daee26004b741c951d528d806efbe00c439f2df46d3adf8be24e280b948a49afd17d56437c6e752d84f99bf37a88f0c54488dd13b848f2381d7d2aecb68ed16762e4a3c1a847565364b9f1af92c9c89e06e89fe6179cb7078a742cb968a9f09cc690dc473df29d6ad9af5879e9a2618c63702117a3a63d3a4236baee86f5f452e9663a795306dabb97db884348ab437bdc13b7cfb03eff1cf216f09d21078e1852fc7c96413d9d65c52ce9baa6bc26de7f028738a17120de30a433c9c3c8e276f3ae5e18a1f95767fffe8e98b0c3f134f12263b01c36866d4e0e856cc14ecf50279adb9438c6219c49cae973d8e7faf33dcdeb96d7ef7e89ae828cb91df22939307bb1f7fb7392e1e24f6b63166b89937c00eb8fea0245cd93e4aa803160bd71c1a0bbb6b8285d8ab654485ab985f1dd2eb9abf53131a9680dcafe4000d3ea528dd52aba3e4ff6a3883ec614253d5627bd91522d881128328ed1e00907fa6cc48cec5268bbedd85ec02d8bac3183460dd1a27fbc06b5642473a41a6cbfb07f53deab2473b37c3d10a125d610f1b9ea5c83e7d462048f25fc1e79295eeff750a23faf5d542758c421bb0673504c9dbae2959f77", 0xffe00)

1.086250522s ago: executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r4}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'\x00', 0x41})

1.081030123s ago: executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$VT_SETMODE(r2, 0x5450, 0x0)

1.059365016s ago: executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2}, &(0x7f0000000000), &(0x7f0000000140)}, 0x20)
write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd"], 0xfdef)

1.038473929s ago: executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46)
dup3(r2, r1, 0x0)
sendmsg$netlink(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=ANY=[], 0x10}], 0x1}, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340), 0xffffff46)
recvmsg(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffeda}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)='D', 0x1}], 0x1}, 0x0)
rt_sigreturn()
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
pwritev2(r3, &(0x7f0000000300)=[{&(0x7f0000000080)="06", 0x7ffffff2}], 0x2, 0x0, 0x0, 0x0)

944.413414ms ago: executing program 3:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='kfree\x00', r0}, 0x10)
creat(0x0, 0x0)
r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
fstat(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x100080d, &(0x7f0000003200)=ANY=[@ANYRES32=r3, @ANYRESOCT, @ANYRES8=r3, @ANYRESDEC, @ANYBLOB="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", @ANYRESHEX, @ANYRESOCT=0x0, @ANYRES32, @ANYRESDEC, @ANYRESOCT=r2, @ANYRES64, @ANYRES8=r3, @ANYRES8=r1], 0xff, 0x1f0, &(0x7f0000000900)="$eJzsmb2LE0EYxp+Z3cuehwg2FjYWHniit19RueaKE8RKEE5Ry2A2IbhJJFkhCYgEGxtLEcHWf8DCIpWFnZ2tFioIFqYULISRmR03k8QNCRYJ5P1BJs/7ztc7Q/JssSAIYm35+uXn56eX926cB3AU23B0/rs1GsOBLPr04sG5Z/tXXr7++Opd49jDweR6mwCEmH9/ufDbAwuJioQQj8b7t2XzfDx3Exxntb4FBjeVv4UiDSIw3FHKBjINNI9oEUfu3WZcrtTiyJdNIJtQNkVzLzl72GcoZ2cTghn97W7vXimOo9ak2BB/95nqWlTMuj9V3wHHvo5lfRzA7SeP+zLWdwMfPL1LAAE4Aq2LYDjUeg8OXNcdXYlx/pP2aH1rnvMvS7Bf6c9AZo7vLr+etRHCWYky5hBsMiP/0FnmxHDwfnrWt1UpPl8w5DiOMi4AWeaqHvNhK46v/cemBb3jdJdl+hOzgTOGP9mwM//wkvp9r93t7dbqpWpUjRphWLzkX/D9i6FXqTnwPWVHM/xvU/nTlrH+hjnAeKAUWAGdUpK0gg6QtIIsDtPWcNzDN80fag5X/sexczpdQ16yOrbz73qY/nD1LdWOlVs8QRAEQRAEQRAEQRAEQRDEQpwCQ/oKRL2oEjmE19XoPwEAAP//j3Zt3A==")

942.698464ms ago: executing program 1:
close(0xffffffffffffffff)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0)
signalfd(0xffffffffffffffff, 0x0, 0x0)
openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/dmi', 0x0, 0x0)
r0 = socket(0x1, 0x3, 0x0)
recvmsg$inet_nvme(r0, &(0x7f00000014c0)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x0)
close(r1)
r2 = gettid()
r3 = getpgid(0x0)
tgkill(r3, r2, 0x21)

890.131332ms ago: executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
rt_sigpending(0x0, 0x0)

841.44726ms ago: executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+  \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, 0x0)
write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[], 0xff67)
sendfile(r0, r1, &(0x7f0000000000), 0xfffb)
fcntl$addseals(r1, 0x409, 0x8)
lseek(r1, 0x100000, 0x3)
write(r1, 0x0, 0x0)

639.007781ms ago: executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)

610.044826ms ago: executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x8000, 0x0, 0x2e)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000200000000000000080006000100000004000b"], 0x24}}, 0x0)

440.876282ms ago: executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8910, 0x0)

432.926053ms ago: executing program 4:
mlockall(0x3)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000180)={@loopback, @remote}, 0x8)

199.70132ms ago: executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%%\x00\xb1\x9aF\xe2\xba[\xc77\x88 \xeeQR\x9f\x01\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\b\x00\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\x00\x10/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xcec\xab\x05\x19\x96\xb9_6*-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\"\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\x00\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad#\xd8b\x90\xeb\x05\x9f\t5\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdem\xe3+q:3\xfa*\x98o\'f\xbcY\x8e?\xf9\x84y\x89Y\x1c]\xad$\x7fp\xf1\xa3\x99[\xff\x1f\x94\xc2\xdb\xb8G\xa6UD\x88Y6\x11Y\xd4\xd1\xde\x9a{]\xe2\x98W\xb9\x13\x17<\x8b!?\x8e\xbc\xae\xf9\xcc\b\x90n\x15\x7f\xd5WS\xfbN\xec)B\xe7R\xa5\xd7O\x83\x80}\xcc5\x99\xdb\xd6\xbd\x9c\x05l\xfc.\xf4\xbbeF\xa3\xea}\xf1\x86z\xca\x16\tP\x9c%\x9bL\x16\xef:\xee\x10\xb2\xd6\xc8\xf4\xb5\xdd\xd8c!@JRY\xa3|P\x06\xbd&\xf86\xddXv\xc9\x1322L\xd6\x99\xf6\a\x00\x00\x00\x00\x00\x00\x00\xf9sNG\x02\x83\xe6Bl\xd2\x02\xfb[\x82\xc0I\xb7\xf6\xe5Z\xa1}\xee}\x8b\x89\x04\x8a\'\xc7J\xca\xdf:\x8ft\xe0\xf8\a\x00'/626, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r1, 0x8910, 0x0)

189.320101ms ago: executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0xc0}, 0x1, 0x7}, 0x0)

176.917353ms ago: executing program 2:
r0 = memfd_create(&(0x7f0000000c00)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xbd\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xc0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd67\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\x9e\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\x7f\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1$)\x85\xc7O]\'9\x92\xad\xfb\n\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x03\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\x05\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x84h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\aJq\xcb3=M\x84\x7f\x18Cb\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xccr?\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\b\x00\x00\x00\x00\x00\x00\x00\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Pc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf1<cN\xb6p\xd5\rb\xfa\xdf\v\x00X9\xcd\xb2\xfaF\xb9\xaf\x88X\xbc\xc6\xd1x\xd7\x13\xf1\x9f\xff\x81\xd5\xf3\xd14\xc2\x81\xca \xec\v\x89\xf6\x0f\xb8{u\xfeI\x96\xaa\xa1\xdb\xb20J\xdf\x03q\xf7\xb5>\xf0/\x9d6\x8aK\x18\\2\xb0Q\xa3\aPv\xd1u/\x96\x1d\x15\x88\n\xc5=Y\'\x1aE\xbbYk\x9d\xf1\xaa@\xce\x05o\xf7$\x1c\x9d\xfe*`\xc9\x9d\x15\x0e\xa8HO)\x1aJ\xadr#\x9f[lHV7o\xefed\x95\xc3\xb2[e\x91\xf1\xb0\xf3=\x04\xc9\xbe\xfcu\xa9!\x13\x8c\xce\xc3\xc6\xadg-\xa8j\xa1<\xd9\x18\x16tz.\xdd\xf6rn\x94S\xf9\xb4\x93\xc9\xa5!\xb8|g\xe0<\"\x0e\x86\xc6\x14vg\xbd\xbf\xecq\xd8\x8b\xefH\xe3\x15\x88`{\xa7\x0e\xe4k\x8eX\x89\xd3\xf5\xe6b\xff\x1f\x16\xb4\xadF\xcf\xda\x82\xd9z\xd2!P\x9b\v7+;\xc7\xd6\xad\x85\x021P1\xde6%<\xa5\x1e\xa9^8\x85Vr\xe3\xa4\xfbj\x9a\xb4\xd2\xfd\xf2\x0et\f2\xf8\xd8\x9eJ\xb6E*\xe5=\x85\xb4\xcc?\x04\xcd\x0f,zf\x81\t\x01\x96A\xb1\xdc\xb320\xc5\n2\xb1\x1c\b\x83\x0f\x1a\bO\xe9\xc9`\xd3\xdd\x01\x1fk;\xc0F)\xe6\x81\xfd\xc6n%6R\x99\xf1\x8ej\xdcJ\xd9i\x89\xcek\x03\xca\xb1I\xab\xb9\xd0\xfe\x1d\xb8,\f?\x00'/1207, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
ioctl$TIOCSLCKTRMIOS(r1, 0x5452, 0x0)

173.936353ms ago: executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r2}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r4}, 0x10)
close(r3)

164.046535ms ago: executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
rt_sigpending(0x0, 0x0)

137.770739ms ago: executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r4}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'\x00', 0x41})

128.99627ms ago: executing program 2:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
mlockall(0x0)
r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000240)='.pending_reads\x00', 0x2042, 0x0)
dup3(r0, r1, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, 0x0, 0x13)

116.095072ms ago: executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='kfree\x00', r0}, 0x10)
creat(&(0x7f0000000a80)='./file1\x00', 0x0)
r1 = open(0x0, 0x0, 0x0)
fstat(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x100080d, &(0x7f0000003200)=ANY=[@ANYRES32=r3, @ANYRESOCT, @ANYRES8=r3, @ANYRESDEC, @ANYBLOB="215aa15bf29ed2ff6f9241ff60693d298a3d41143bfc9091146111b4930c37eddcf542d641b821af229e7d8780d50b6f47fa3e5928555eb4d6d507d92b87b0b01c19c789895e02891afc082bb85a47087f168a6aa2c2bc51a3f3a404a4a1e6e2fbad00d592df65bd2a593f488bf41dbc7ea43fe2554fbe34e4a77f606f35e445aff55aaa19f7ffffffffffffff19bd4739c80c9e6681229c48e0c6de634c35c029c4eb3b43412c95089416a3d63f08577a303758410658a4ec52e5b778eda9cd1bd8834e145c111690b0da927087e805000000000000008fd8b9bdfbdaa777db54127463a589eed325c34b6459505702f3a45f285c53c1b25bab2eef6324d67ad8d7e247317d80ff3ad9120b4e2294e67de9adaab76fa991571a187cd8f7fbc49bf45d6f8dbf69ef0d765a02ad98e802b1688148a8c017e3af238f82c49bbd8ba542fbfec5693d82158e3216b95656986f9d7eec7244a27dfaf8623fc76943bf142a61d9d6c622dbcac3d324d07be5a5cc88f85a857ff9d45924d5d82a04424d3453c96fafa37d952940f3147d5af234b39c3ff742a2e5300e10ee692a32f5c3321d44eadaa8c44bf9d534b52fe758082299e04f839e529a6d0293bf12770ac948730a0c367e117137c6fd930b1f306138163b7180e111d6926255a71bd227b1d27f2897721e3bda884b0792a81134d8fbc9aafc732b15aee5c9e0a835ac17b457efa36ce1095a3196d278207846ea81172826d49b87aac6e662bb824f16b0b65fc6989395ba022bd6af2f1830375c311bdf55f15d9830564e65dc76e5b7c9a91e857dbcef3909cfd628649337de6ff04a398f4325a430467aee51d7fa12ef61bc0b67d1e18e62754d8a2b65fb", @ANYRESHEX, @ANYRESOCT=0x0, @ANYRES32, @ANYRESDEC, @ANYRESOCT=r2, @ANYRES64, @ANYRES8=r3, @ANYRES8=r1], 0xff, 0x1f0, &(0x7f0000000900)="$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")

98.472385ms ago: executing program 0:
mlockall(0x1)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'})

95.415596ms ago: executing program 1:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, 0x0, &(0x7f00000003c0)=""/129}, 0x20)

62.673861ms ago: executing program 1:
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f4adff7b9a40000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

46.253023ms ago: executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+  \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, 0x0)
write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[], 0xff67)
sendfile(r0, r1, &(0x7f0000000000), 0xfffb)
fcntl$addseals(r1, 0x409, 0x8)
lseek(r1, 0x100000, 0x3)
write(r1, 0x0, 0x0)

0s ago: executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_remove_space_done\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
write$cgroup_int(r2, &(0x7f0000000100), 0x12)
ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}})

kernel console output (not intermixed with test programs):

mmy_hcd
[ 2245.287800][T19167] 9pnet: Insufficient options for proto=fd
[ 2245.439474][ T7143] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2245.450398][ T7143] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2245.460153][ T7143] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2245.469023][ T7143] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2245.477458][ T7143] usb 4-1: config 0 descriptor??
[ 2245.610596][T19174] 9pnet: Insufficient options for proto=fd
[ 2245.630930][   T30] audit: type=1326 audit(1717602302.290:106515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19175 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36bf842f69 code=0x0
[ 2245.859445][ T2918] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[ 2246.059383][ T7143] usbhid 4-1:0.0: can't add hid device: -71
[ 2246.065146][ T7143] usbhid: probe of 4-1:0.0 failed with error -71
[ 2246.080066][ T7143] usb 4-1: USB disconnect, device number 57
[ 2246.135752][T19179] loop1: detected capacity change from 0 to 40427
[ 2246.190375][T19179] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[ 2246.197937][T19179] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 2246.207132][T19179] F2FS-fs (loop1): invalid crc value
[ 2246.214196][T19179] F2FS-fs (loop1): Found nat_bits in checkpoint
[ 2246.246247][T19179] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[ 2246.253321][T19179] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 2246.260726][ T2918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2246.271646][ T2918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2246.281341][ T2918] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2246.309276][ T2918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2246.329520][ T2918] usb 3-1: config 0 descriptor??
[ 2247.677697][T15336] Bluetooth: hci1: command 0x1009 tx timeout
[ 2247.750902][T13867] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[ 2247.760179][T13867] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[ 2247.772114][   T30] audit: type=1326 audit(1717602304.430:106516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19197 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93ce68ef69 code=0x0
[ 2247.803795][T19202] incfs: Options parsing error. -22
[ 2247.808947][T19202] incfs: mount failed -22
[ 2247.910292][T19208] 9pnet: Insufficient options for proto=fd
[ 2247.984827][ T2918] usb 3-1: string descriptor 0 read error: -71
[ 2248.019420][ T2918] uclogic 0003:256C:006D.01F9: failed retrieving string descriptor #200: -71
[ 2248.028068][ T2918] uclogic 0003:256C:006D.01F9: failed retrieving pen parameters: -71
[ 2248.036031][ T2918] uclogic 0003:256C:006D.01F9: failed probing pen v2 parameters: -71
[ 2248.044227][ T2918] uclogic 0003:256C:006D.01F9: failed probing parameters: -71
[ 2248.051709][ T2918] uclogic: probe of 0003:256C:006D.01F9 failed with error -71
[ 2248.063493][ T2918] usb 3-1: USB disconnect, device number 57
[ 2248.095478][T19213] 9pnet: Insufficient options for proto=fd
[ 2248.171292][T19214] 9pnet: Insufficient options for proto=fd
[ 2248.628799][T19220] syz-executor.2[19220] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2248.628865][T19220] syz-executor.2[19220] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2248.880231][T19233] 9pnet: Insufficient options for proto=fd
[ 2249.096985][T19235] 9pnet: Insufficient options for proto=fd
[ 2249.103368][T19235] 9pnet: Insufficient options for proto=fd
[ 2249.915402][   T20] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[ 2250.289534][   T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2250.300381][   T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2250.305849][T19245] loop2: detected capacity change from 0 to 40427
[ 2250.310330][   T20] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2250.325317][   T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2250.342224][   T20] usb 2-1: config 0 descriptor??
[ 2250.360805][T19245] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[ 2250.368479][T19245] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 2250.377534][T19245] F2FS-fs (loop2): invalid crc value
[ 2250.384503][T19245] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 2250.416069][T19245] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 2250.423069][T19245] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 2250.532979][T19256] incfs: Options parsing error. -22
[ 2250.538266][T19256] incfs: mount failed -22
[ 2250.639337][T18287] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 2250.680142][T15523] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[ 2250.688861][T15523] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[ 2250.825288][T19258] syz-executor.2[19258] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2250.825375][T19258] syz-executor.2[19258] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2250.941481][   T30] audit: type=1326 audit(1717602307.600:106517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19265 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ccc321f69 code=0x7ffc0000
[ 2250.981630][   T30] audit: type=1326 audit(1717602307.600:106518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19265 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ccc321f69 code=0x7ffc0000
[ 2251.023143][   T30] audit: type=1326 audit(1717602307.630:106519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19265 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f3ccc321f69 code=0x7ffc0000
[ 2251.047851][   T30] audit: type=1326 audit(1717602307.630:106520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19265 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ccc321f69 code=0x7ffc0000
[ 2251.066049][T18287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2251.087805][   T30] audit: type=1326 audit(1717602307.630:106521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19265 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ccc321f69 code=0x7ffc0000
[ 2251.099771][T18287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2251.112341][   T30] audit: type=1326 audit(1717602307.630:106522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19265 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ccc321f69 code=0x7ffc0000
[ 2251.134455][T18287] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2251.155208][T18287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2251.163963][T18287] usb 4-1: config 0 descriptor??
[ 2251.167381][   T30] audit: type=1326 audit(1717602307.630:106523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19265 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ccc321f69 code=0x7ffc0000
[ 2251.192958][   T30] audit: type=1326 audit(1717602307.630:106524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19265 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ccc321f69 code=0x7ffc0000
[ 2251.217168][   T30] audit: type=1326 audit(1717602307.630:106525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19265 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3ccc321f69 code=0x7ffc0000
[ 2251.241483][   T30] audit: type=1326 audit(1717602307.630:106526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19265 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ccc321f69 code=0x7ffc0000
[ 2251.362062][T19273] 9pnet: Insufficient options for proto=fd
[ 2251.549498][ T7641] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[ 2251.599451][   T20] usb 2-1: string descriptor 0 read error: -71
[ 2251.619451][   T20] uclogic 0003:256C:006D.01FA: failed retrieving string descriptor #200: -71
[ 2251.628318][   T20] uclogic 0003:256C:006D.01FA: failed retrieving pen parameters: -71
[ 2251.636315][   T20] uclogic 0003:256C:006D.01FA: failed probing pen v2 parameters: -71
[ 2251.644326][   T20] uclogic 0003:256C:006D.01FA: failed probing parameters: -71
[ 2251.651746][   T20] uclogic: probe of 0003:256C:006D.01FA failed with error -71
[ 2251.660349][   T20] usb 2-1: USB disconnect, device number 51
[ 2251.890122][T19282] 9pnet: Insufficient options for proto=fd
[ 2251.929448][T18287] usb 4-1: string descriptor 0 read error: -71
[ 2251.946080][T19280] loop4: detected capacity change from 0 to 40427
[ 2251.952521][T18287] uclogic 0003:256C:006D.01FB: failed retrieving string descriptor #200: -71
[ 2251.961249][ T7641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2251.972068][T18287] uclogic 0003:256C:006D.01FB: failed retrieving pen parameters: -71
[ 2251.980016][ T7641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2251.989634][T18287] uclogic 0003:256C:006D.01FB: failed probing pen v2 parameters: -71
[ 2251.997562][ T7641] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2252.006475][T18287] uclogic 0003:256C:006D.01FB: failed probing parameters: -71
[ 2252.013720][ T7641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2252.021542][T18287] uclogic: probe of 0003:256C:006D.01FB failed with error -71
[ 2252.030805][ T7641] usb 1-1: config 0 descriptor??
[ 2252.037050][T18287] usb 4-1: USB disconnect, device number 58
[ 2252.172120][T19284] loop2: detected capacity change from 0 to 40427
[ 2252.200494][T19284] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[ 2252.208195][T19284] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 2252.217703][T19284] F2FS-fs (loop2): invalid crc value
[ 2252.224752][T19284] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 2252.269806][T19284] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 2252.276830][T19284] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 2252.327985][T19294] syz-executor.1[19294] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2252.328073][T19294] syz-executor.1[19294] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2252.360746][T15523] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2252.551690][T19312] incfs: Options parsing error. -22
[ 2252.556780][T19312] incfs: mount failed -22
[ 2252.639420][ T7641] usbhid 1-1:0.0: can't add hid device: -71
[ 2252.645349][ T7641] usbhid: probe of 1-1:0.0 failed with error -71
[ 2252.656702][ T7641] usb 1-1: USB disconnect, device number 76
[ 2252.775170][T19314] loop4: detected capacity change from 0 to 40427
[ 2252.791110][T13867] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[ 2252.799949][T13867] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[ 2252.921439][T19316] 9pnet: Insufficient options for proto=fd
[ 2253.124199][T19320] 9pnet: Insufficient options for proto=fd
[ 2253.397676][T19333] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2253.407771][T19333] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2253.759409][   T26] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[ 2254.119436][ T7641] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[ 2254.139506][   T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2254.150336][   T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2254.160163][   T26] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2254.169000][   T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2254.177497][   T26] usb 1-1: config 0 descriptor??
[ 2254.303567][T19347] incfs: Options parsing error. -22
[ 2254.308693][T19347] incfs: mount failed -22
[ 2254.419445][T18287] Bluetooth: hci1: command 0x1003 tx timeout
[ 2254.425331][   T47] Bluetooth: hci1: sending frame failed (-49)
[ 2254.509422][ T7641] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2254.520270][ T7641] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2254.530043][ T7641] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2254.538894][ T7641] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2254.547408][ T7641] usb 3-1: config 0 descriptor??
[ 2254.599298][ T2918] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 2254.909473][   T26] usb 1-1: string descriptor 0 read error: -71
[ 2254.929487][   T26] uclogic 0003:256C:006D.01FC: failed retrieving string descriptor #200: -71
[ 2254.938218][   T26] uclogic 0003:256C:006D.01FC: failed retrieving pen parameters: -71
[ 2254.946109][   T26] uclogic 0003:256C:006D.01FC: failed probing pen v2 parameters: -71
[ 2254.954136][   T26] uclogic 0003:256C:006D.01FC: failed probing parameters: -71
[ 2254.961458][   T26] uclogic: probe of 0003:256C:006D.01FC failed with error -71
[ 2254.969611][   T26] usb 1-1: USB disconnect, device number 77
[ 2254.979378][ T2918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2254.990156][ T2918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2254.999745][ T2918] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2255.008550][ T2918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2255.017102][ T2918] usb 4-1: config 0 descriptor??
[ 2255.147036][T19354] incfs: Options parsing error. -22
[ 2255.152276][T19354] incfs: mount failed -22
[ 2255.249437][ T7641] usb 3-1: string descriptor 0 read error: -71
[ 2255.269506][ T7641] uclogic 0003:256C:006D.01FD: failed retrieving string descriptor #200: -71
[ 2255.278139][ T7641] uclogic 0003:256C:006D.01FD: failed retrieving pen parameters: -71
[ 2255.286063][ T7641] uclogic 0003:256C:006D.01FD: failed probing pen v2 parameters: -71
[ 2255.294023][ T7641] uclogic 0003:256C:006D.01FD: failed probing parameters: -71
[ 2255.301230][ T7641] uclogic: probe of 0003:256C:006D.01FD failed with error -71
[ 2255.309410][ T7641] usb 3-1: USB disconnect, device number 58
[ 2255.453923][T19361] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2255.463715][T19361] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2255.609425][ T2918] usbhid 4-1:0.0: can't add hid device: -71
[ 2255.615265][ T2918] usbhid: probe of 4-1:0.0 failed with error -71
[ 2255.622097][ T2918] usb 4-1: USB disconnect, device number 59
[ 2255.892926][T19368] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2255.902717][T19368] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2256.001605][T19374] Invalid ELF header magic: != ELF
[ 2256.012109][T19374] overlayfs: './bus' not a directory
[ 2256.499338][ T2918] Bluetooth: hci1: command 0x1001 tx timeout
[ 2256.505265][   T47] Bluetooth: hci1: sending frame failed (-49)
[ 2256.689288][ T3077] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[ 2256.768058][T19391] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2256.779427][T19391] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2256.896987][   T30] kauditd_printk_skb: 32 callbacks suppressed
[ 2256.897004][   T30] audit: type=1326 audit(1717602313.550:106559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19394 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ccc321f69 code=0x0
[ 2257.010171][T19399] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2257.020214][T19399] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2257.069397][ T3077] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2257.080521][ T3077] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2257.090131][ T3077] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2257.098903][ T3077] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2257.099389][ T2918] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[ 2257.116104][T19402] incfs: Options parsing error. -22
[ 2257.121262][T19402] incfs: mount failed -22
[ 2257.122343][ T3077] usb 1-1: config 0 descriptor??
[ 2257.719450][ T2918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2257.730214][ T2918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2257.739741][ T2918] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2257.748567][ T2918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2257.757328][ T2918] usb 5-1: config 0 descriptor??
[ 2257.849833][ T3077] usb 1-1: string descriptor 0 read error: -71
[ 2257.869438][ T3077] uclogic 0003:256C:006D.01FE: failed retrieving string descriptor #200: -71
[ 2257.878105][ T3077] uclogic 0003:256C:006D.01FE: failed retrieving pen parameters: -71
[ 2257.885998][ T3077] uclogic 0003:256C:006D.01FE: failed probing pen v2 parameters: -71
[ 2257.895523][ T3077] uclogic 0003:256C:006D.01FE: failed probing parameters: -71
[ 2257.903275][ T3077] uclogic: probe of 0003:256C:006D.01FE failed with error -71
[ 2257.911664][ T3077] usb 1-1: USB disconnect, device number 78
[ 2258.169409][   T26] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[ 2258.333454][T19414] Invalid ELF header magic: != ELF
[ 2258.343994][T19414] overlayfs: './bus' not a directory
[ 2258.469423][ T2918] usb 5-1: string descriptor 0 read error: -71
[ 2258.499436][ T2918] uclogic 0003:256C:006D.01FF: failed retrieving string descriptor #200: -71
[ 2258.513661][ T2918] uclogic 0003:256C:006D.01FF: failed retrieving pen parameters: -71
[ 2258.521904][ T2918] uclogic 0003:256C:006D.01FF: failed probing pen v2 parameters: -71
[ 2258.529926][ T2918] uclogic 0003:256C:006D.01FF: failed probing parameters: -71
[ 2258.537319][ T2918] uclogic: probe of 0003:256C:006D.01FF failed with error -71
[ 2258.546036][ T2918] usb 5-1: USB disconnect, device number 96
[ 2258.569552][   T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2258.580438][   T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2258.590254][   T26] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2258.599365][   T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2258.608070][   T26] usb 3-1: config 0 descriptor??
[ 2258.613032][ T7641] Bluetooth: hci1: command 0x1009 tx timeout
[ 2258.670115][T19418] loop0: detected capacity change from 0 to 40427
[ 2259.003796][T19425] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2259.013428][T19425] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2259.140399][ T2918] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[ 2259.149574][T19427] 9pnet: Insufficient options for proto=fd
[ 2259.297842][T19435] incfs: Options parsing error. -22
[ 2259.303067][T19435] incfs: mount failed -22
[ 2259.364335][T19436] syz-executor.4[19436] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2259.364798][T19436] syz-executor.4[19436] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2259.389676][   T26] usb 3-1: string descriptor 0 read error: -71
[ 2259.420093][   T26] uclogic 0003:256C:006D.0200: failed retrieving string descriptor #200: -71
[ 2259.429058][   T26] uclogic 0003:256C:006D.0200: failed retrieving pen parameters: -71
[ 2259.437261][   T26] uclogic 0003:256C:006D.0200: failed probing pen v2 parameters: -71
[ 2259.446336][   T26] uclogic 0003:256C:006D.0200: failed probing parameters: -71
[ 2259.453896][   T26] uclogic: probe of 0003:256C:006D.0200 failed with error -71
[ 2259.465509][   T26] usb 3-1: USB disconnect, device number 59
[ 2259.539471][ T2918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2259.550330][ T2918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2259.559951][ T2918] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2259.568711][ T2918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2259.577165][ T2918] usb 4-1: config 0 descriptor??
[ 2260.129344][ T2918] usbhid 4-1:0.0: can't add hid device: -71
[ 2260.135201][ T2918] usbhid: probe of 4-1:0.0 failed with error -71
[ 2260.142188][ T2918] usb 4-1: USB disconnect, device number 60
[ 2260.211084][T19443] loop0: detected capacity change from 0 to 40427
[ 2260.240384][T19443] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[ 2260.248021][T19443] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[ 2260.257394][T19443] F2FS-fs (loop0): invalid crc value
[ 2260.264553][T19443] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 2260.297179][T19443] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[ 2260.304175][T19443] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 2260.329445][T18287] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[ 2261.100575][T18287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2261.116496][T18287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2261.131209][T18287] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2261.147315][T18287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2261.163073][T18287] usb 5-1: config 0 descriptor??
[ 2261.178675][T13867] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[ 2261.187415][T13867] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[ 2261.311997][T19460] 9pnet: Insufficient options for proto=fd
[ 2261.394246][T19464] 9pnet: Insufficient options for proto=fd
[ 2261.563602][T19476] incfs: Options parsing error. -22
[ 2261.568824][T19476] incfs: mount failed -22
[ 2261.621019][T19477] syz-executor.0[19477] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2261.621114][T19477] syz-executor.0[19477] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2261.819542][   T26] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[ 2261.889463][T18287] usb 5-1: string descriptor 0 read error: -71
[ 2261.919552][T18287] uclogic 0003:256C:006D.0201: failed retrieving string descriptor #200: -71
[ 2261.928539][T18287] uclogic 0003:256C:006D.0201: failed retrieving pen parameters: -71
[ 2261.936641][T18287] uclogic 0003:256C:006D.0201: failed probing pen v2 parameters: -71
[ 2261.944802][T18287] uclogic 0003:256C:006D.0201: failed probing parameters: -71
[ 2261.952602][T18287] uclogic: probe of 0003:256C:006D.0201 failed with error -71
[ 2261.963114][T18287] usb 5-1: USB disconnect, device number 97
[ 2262.209543][   T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2262.220575][   T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2262.230279][   T26] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2262.239300][   T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2262.249827][   T26] usb 3-1: config 0 descriptor??
[ 2262.565740][T19492] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2262.587682][T19492] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2262.638033][T19495] 9pnet: Insufficient options for proto=fd
[ 2262.789390][   T26] usbhid 3-1:0.0: can't add hid device: -71
[ 2262.795262][   T26] usbhid: probe of 3-1:0.0 failed with error -71
[ 2262.814712][   T26] usb 3-1: USB disconnect, device number 60
[ 2262.911403][T19489] loop3: detected capacity change from 0 to 40427
[ 2263.238065][T19505] loop4: detected capacity change from 0 to 40427
[ 2263.277865][T19510] incfs: Options parsing error. -22
[ 2263.283074][T19510] incfs: mount failed -22
[ 2263.675006][T13867] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2263.682324][   T30] audit: type=1326 audit(1717602320.340:106560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19515 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb70690f69 code=0x0
[ 2263.788414][T19520] overlayfs: failed to resolve './file1': -2
[ 2263.829300][T22468] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[ 2263.982847][T19529] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2263.992590][T19529] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2264.154189][T19540] 9pnet: Insufficient options for proto=fd
[ 2264.199521][T22468] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2264.210835][T22468] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2264.220543][T22468] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2264.229460][T22468] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2264.237963][T22468] usb 1-1: config 0 descriptor??
[ 2264.369354][T18287] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[ 2264.779504][T18287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2264.791744][T18287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2264.801397][T18287] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2264.810277][T18287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2264.818726][T18287] usb 3-1: config 0 descriptor??
[ 2264.959339][T22468] usb 1-1: string descriptor 0 read error: -71
[ 2264.979341][T22468] uclogic 0003:256C:006D.0202: failed retrieving string descriptor #200: -71
[ 2264.988105][T22468] uclogic 0003:256C:006D.0202: failed retrieving pen parameters: -71
[ 2264.996587][T22468] uclogic 0003:256C:006D.0202: failed probing pen v2 parameters: -71
[ 2265.004850][T22468] uclogic 0003:256C:006D.0202: failed probing parameters: -71
[ 2265.014615][T22468] uclogic: probe of 0003:256C:006D.0202 failed with error -71
[ 2265.022988][T22468] usb 1-1: USB disconnect, device number 79
[ 2265.124431][T19551] 9pnet: Insufficient options for proto=fd
[ 2265.193818][T19552] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2265.210473][T19552] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2265.460205][T18287] usbhid 3-1:0.0: can't add hid device: -71
[ 2265.467745][T18287] usbhid: probe of 3-1:0.0 failed with error -71
[ 2265.474892][T18287] usb 3-1: USB disconnect, device number 61
[ 2265.538779][T19563] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2265.548434][T19563] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2265.587193][T19565] overlayfs: failed to resolve './file1': -2
[ 2265.707356][   T26] Bluetooth: hci1: command 0x1003 tx timeout
[ 2265.715393][   T47] Bluetooth: hci1: sending frame failed (-49)
[ 2266.006624][T19571] 9pnet: Insufficient options for proto=fd
[ 2266.075227][T19574] 9pnet: Insufficient options for proto=fd
[ 2266.282371][T19578] syz-executor.2[19578] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2266.282463][T19578] syz-executor.2[19578] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2267.177988][T19594] 9pnet: Insufficient options for proto=fd
[ 2267.526475][T19606] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2267.533410][T19598] loop2: detected capacity change from 0 to 40427
[ 2267.537675][T19606] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2267.643917][T19613] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2267.653735][T19613] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2267.769492][ T3077] Bluetooth: hci1: command 0x1001 tx timeout
[ 2267.776080][   T47] Bluetooth: hci1: sending frame failed (-49)
[ 2267.900632][T19623] 9pnet: Insufficient options for proto=fd
[ 2268.144655][T19625] 9pnet: Insufficient options for proto=fd
[ 2268.257861][T19627] syz-executor.3[19627] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2268.257956][T19627] syz-executor.3[19627] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2269.241544][T19635] loop4: detected capacity change from 0 to 40427
[ 2269.247023][T19631] loop2: detected capacity change from 0 to 40427
[ 2269.318120][T19645] 9pnet: Insufficient options for proto=fd
[ 2269.339503][ T3077] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[ 2269.699528][ T3077] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2269.710374][ T3077] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2269.720327][ T3077] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2269.729338][ T3077] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2269.738394][ T3077] usb 4-1: config 0 descriptor??
[ 2269.849363][   T60] Bluetooth: hci1: command 0x1009 tx timeout
[ 2269.920660][T19651] loop2: detected capacity change from 0 to 40427
[ 2270.004764][T19657] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2270.014698][T19657] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2270.038938][T19654] loop4: detected capacity change from 0 to 40427
[ 2270.261035][T19661] 9pnet: Insufficient options for proto=fd
[ 2270.539481][ T3077] usb 4-1: string descriptor 0 read error: -71
[ 2270.559491][ T3077] uclogic 0003:256C:006D.0203: failed retrieving string descriptor #200: -71
[ 2270.568241][ T3077] uclogic 0003:256C:006D.0203: failed retrieving pen parameters: -71
[ 2270.576354][ T3077] uclogic 0003:256C:006D.0203: failed probing pen v2 parameters: -71
[ 2270.584502][ T3077] uclogic 0003:256C:006D.0203: failed probing parameters: -71
[ 2270.591931][ T3077] uclogic: probe of 0003:256C:006D.0203 failed with error -71
[ 2270.603833][ T3077] usb 4-1: USB disconnect, device number 61
[ 2270.712384][T19671] 9pnet: Insufficient options for proto=fd
[ 2270.950764][T19670] loop4: detected capacity change from 0 to 40427
[ 2271.281088][T19681] syz-executor.0[19681] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2271.281477][T19681] syz-executor.0[19681] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2271.649158][T19680] loop3: detected capacity change from 0 to 40427
[ 2271.918652][T19690] loop4: detected capacity change from 0 to 40427
[ 2271.956918][T19696] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2271.967540][T19696] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2272.110431][T19701] incfs: Options parsing error. -22
[ 2272.115514][T19701] incfs: mount failed -22
[ 2272.289411][   T26] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[ 2272.408854][T19706] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2272.418560][T19706] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2272.601900][T19710] 9pnet: Insufficient options for proto=fd
[ 2272.720427][   T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2272.773695][   T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2272.798129][   T26] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2272.807235][   T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2272.816461][   T26] usb 4-1: config 0 descriptor??
[ 2273.060189][T19720] 9pnet: Insufficient options for proto=fd
[ 2273.545801][T19724] syz-executor.4[19724] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2273.545891][T19724] syz-executor.4[19724] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2273.579375][   T26] usb 4-1: string descriptor 0 read error: -71
[ 2273.619412][   T26] uclogic 0003:256C:006D.0204: failed retrieving string descriptor #200: -71
[ 2273.628045][   T26] uclogic 0003:256C:006D.0204: failed retrieving pen parameters: -71
[ 2273.639755][   T26] uclogic 0003:256C:006D.0204: failed probing pen v2 parameters: -71
[ 2273.647671][   T26] uclogic 0003:256C:006D.0204: failed probing parameters: -71
[ 2273.654993][   T26] uclogic: probe of 0003:256C:006D.0204 failed with error -71
[ 2273.663442][   T26] usb 4-1: USB disconnect, device number 62
[ 2274.177747][T19748] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2274.206359][T19748] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2274.474304][T19754] 9pnet: Insufficient options for proto=fd
[ 2274.861188][T19735] loop0: detected capacity change from 0 to 40427
[ 2274.899185][T19744] loop1: detected capacity change from 0 to 40427
[ 2274.914547][T19737] loop2: detected capacity change from 0 to 40427
[ 2274.936848][T19749] loop3: detected capacity change from 0 to 40427
[ 2275.172189][   T30] audit: type=1326 audit(1717602331.830:106561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19755 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36bf842f69 code=0x7ffc0000
[ 2275.196863][   T30] audit: type=1326 audit(1717602331.830:106562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19755 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36bf842f69 code=0x7ffc0000
[ 2275.232870][   T30] audit: type=1326 audit(1717602331.830:106563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19755 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f36bf842f69 code=0x7ffc0000
[ 2275.325648][   T30] audit: type=1326 audit(1717602331.830:106564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19755 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36bf842f69 code=0x7ffc0000
[ 2275.419832][   T30] audit: type=1326 audit(1717602331.830:106565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19755 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36bf842f69 code=0x7ffc0000
[ 2275.475285][T19769] 9pnet: Insufficient options for proto=fd
[ 2276.209292][T19771] 9pnet: Insufficient options for proto=fd
[ 2276.340518][   T30] audit: type=1326 audit(1717602331.830:106566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19755 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f36bf842f69 code=0x7ffc0000
[ 2276.395841][   T30] audit: type=1326 audit(1717602331.830:106567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19755 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36bf842f69 code=0x7ffc0000
[ 2276.420752][   T30] audit: type=1326 audit(1717602331.830:106568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19755 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36bf842f69 code=0x7ffc0000
[ 2276.445434][   T30] audit: type=1326 audit(1717602331.830:106569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19755 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f36bf842f69 code=0x7ffc0000
[ 2276.472110][ T1008] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2276.478737][   T30] audit: type=1326 audit(1717602331.830:106570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19755 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36bf842f69 code=0x7ffc0000
[ 2276.619563][T19782] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2276.638986][T19782] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2276.688294][T19785] 9pnet: Insufficient options for proto=fd
[ 2276.912387][   T20] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[ 2276.935375][T25421] Bluetooth: hci2: Frame reassembly failed (-84)
[ 2277.289355][   T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2277.300187][   T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2277.309835][   T20] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2277.318787][   T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2277.328287][   T20] usb 5-1: config 0 descriptor??
[ 2277.721144][T19804] loop0: detected capacity change from 0 to 40427
[ 2278.049378][   T20] usb 5-1: string descriptor 0 read error: -71
[ 2278.054797][T19806] 9pnet: Insufficient options for proto=fd
[ 2278.069340][   T20] uclogic 0003:256C:006D.0205: failed retrieving string descriptor #200: -71
[ 2278.078023][   T20] uclogic 0003:256C:006D.0205: failed retrieving pen parameters: -71
[ 2278.085991][   T20] uclogic 0003:256C:006D.0205: failed probing pen v2 parameters: -71
[ 2278.093922][   T20] uclogic 0003:256C:006D.0205: failed probing parameters: -71
[ 2278.101174][   T20] uclogic: probe of 0003:256C:006D.0205 failed with error -71
[ 2278.109415][   T20] usb 5-1: USB disconnect, device number 98
[ 2278.499339][T18287] Bluetooth: hci1: command 0x1003 tx timeout
[ 2278.505250][ T1037] Bluetooth: hci1: sending frame failed (-49)
[ 2278.686332][T19814] 9pnet: Insufficient options for proto=fd
[ 2278.969514][ T7143] Bluetooth: hci2: command 0x1003 tx timeout
[ 2278.975390][ T1037] Bluetooth: hci2: sending frame failed (-49)
[ 2279.142858][T19819] incfs: Options parsing error. -22
[ 2279.147982][T19819] incfs: mount failed -22
[ 2279.267825][T19822] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2279.277538][T19822] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2280.569335][   T20] Bluetooth: hci1: command 0x1001 tx timeout
[ 2280.575697][ T1037] Bluetooth: hci1: sending frame failed (-49)
[ 2280.689115][T19846] 9pnet: Insufficient options for proto=fd
[ 2280.744382][T19849] loop4: detected capacity change from 0 to 40427
[ 2281.049275][T18287] Bluetooth: hci2: command 0x1001 tx timeout
[ 2281.055227][ T1037] Bluetooth: hci2: sending frame failed (-49)
[ 2281.383327][T19858] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2281.393331][T19858] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2281.409285][T18287] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[ 2281.615881][T19865] 9pnet: Insufficient options for proto=fd
[ 2282.139614][T18287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2282.150361][T18287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2282.159936][T18287] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2282.168716][T18287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2282.177346][T18287] usb 3-1: config 0 descriptor??
[ 2282.552985][T19871] loop0: detected capacity change from 0 to 40427
[ 2282.649319][   T26] Bluetooth: hci1: command 0x1009 tx timeout
[ 2282.779528][T18287] usbhid 3-1:0.0: can't add hid device: -71
[ 2282.785373][T18287] usbhid: probe of 3-1:0.0 failed with error -71
[ 2282.792309][T18287] usb 3-1: USB disconnect, device number 62
[ 2283.129375][T18287] Bluetooth: hci2: command 0x1009 tx timeout
[ 2283.142855][T19884] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2283.152542][T19884] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2283.258836][   T30] kauditd_printk_skb: 17 callbacks suppressed
[ 2283.258851][   T30] audit: type=1326 audit(1717602339.910:106588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19887 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ccc321f69 code=0x0
[ 2283.628720][T19894] loop0: detected capacity change from 0 to 40427
[ 2283.763573][T19896] 9pnet: Insufficient options for proto=fd
[ 2284.407607][T19904] loop0: detected capacity change from 0 to 40427
[ 2284.464459][T19904] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[ 2284.472432][T19904] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[ 2284.486911][T19904] F2FS-fs (loop0): invalid crc value
[ 2284.500019][T19908] 9pnet: Insufficient options for proto=fd
[ 2284.677495][T19904] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 2284.709602][T19904] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[ 2284.716734][T19904] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 2285.114905][T13867] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[ 2285.123844][T13867] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[ 2285.539284][ T7143] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[ 2285.831714][   T30] audit: type=1326 audit(1717602342.490:106589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19936 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36bf842f69 code=0x0
[ 2285.899408][ T7143] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2285.910214][ T7143] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2285.919793][ T7143] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2285.928620][ T7143] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2285.937208][ T7143] usb 1-1: config 0 descriptor??
[ 2286.461582][T19939] loop2: detected capacity change from 0 to 40427
[ 2286.500333][T19939] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[ 2286.507898][T19939] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 2286.517091][T19939] F2FS-fs (loop2): invalid crc value
[ 2286.522357][ T7143] usbhid 1-1:0.0: can't add hid device: -71
[ 2286.528121][ T7143] usbhid: probe of 1-1:0.0 failed with error -71
[ 2286.534043][T19939] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 2286.535190][ T7143] usb 1-1: USB disconnect, device number 80
[ 2286.568957][T19939] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 2286.575946][T19939] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 2287.486685][T13867] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[ 2287.501550][T13867] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[ 2287.553893][T19959] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2287.570419][T19959] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2287.628831][T19961] device syzkaller0 entered promiscuous mode
[ 2287.786519][T19952] loop1: detected capacity change from 0 to 40427
[ 2288.384474][T19963] loop2: detected capacity change from 0 to 40427
[ 2288.440500][T19963] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[ 2288.449163][T19963] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 2288.463623][T19963] F2FS-fs (loop2): invalid crc value
[ 2288.488406][T19963] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 2288.564221][T19969] loop3: detected capacity change from 0 to 40427
[ 2288.575150][T19963] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 2288.583973][T19963] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 2289.227895][T25421] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2289.234915][   T30] audit: type=1326 audit(1717602345.890:106590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19988 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a665eff69 code=0x0
[ 2289.448536][T25421] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[ 2289.462791][T25421] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[ 2289.539886][T20001] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2289.549416][T22468] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[ 2289.559785][T20001] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2289.691711][T19998] loop3: detected capacity change from 0 to 40427
[ 2289.712271][   T30] audit: type=1326 audit(1717602346.370:106591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20005 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb70690f69 code=0x0
[ 2289.751120][T19998] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[ 2289.758707][T19998] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 2289.780722][T19998] F2FS-fs (loop3): invalid crc value
[ 2289.791738][T19998] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 2289.926898][T22468] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2289.958824][T22468] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2289.968786][T22468] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2289.978008][T22468] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2289.995142][T22468] usb 5-1: config 0 descriptor??
[ 2290.052442][T19998] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 2290.068293][T19998] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 2290.676864][T25421] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[ 2290.686388][T25421] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[ 2290.699426][T22468] usbhid 5-1:0.0: can't add hid device: -71
[ 2290.705291][T22468] usbhid: probe of 5-1:0.0 failed with error -71
[ 2290.724648][T22468] usb 5-1: USB disconnect, device number 99
[ 2290.976446][T20031] 9pnet: Insufficient options for proto=fd
[ 2291.575666][   T20] Bluetooth: hci1: command 0x1003 tx timeout
[ 2291.589378][T22940] Bluetooth: hci1: sending frame failed (-49)
[ 2291.906557][T20046] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2292.091927][T20046] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2292.364705][T20054] 9pnet: Insufficient options for proto=fd
[ 2292.494495][T20040] loop2: detected capacity change from 0 to 40427
[ 2292.515551][T20050] loop4: detected capacity change from 0 to 40427
[ 2292.872730][T20058] loop2: detected capacity change from 0 to 40427
[ 2292.920450][T20058] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[ 2292.930955][T20058] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 2292.954663][T20058] F2FS-fs (loop2): invalid crc value
[ 2292.972786][T20058] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 2293.035900][T20058] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 2293.043157][T20058] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 2293.520709][   T20] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[ 2293.570834][ T1008] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[ 2293.579974][ T1008] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[ 2293.609305][ T7143] Bluetooth: hci1: command 0x1001 tx timeout
[ 2293.616122][T22940] Bluetooth: hci1: sending frame failed (-49)
[ 2293.760500][T20087] incfs: Options parsing error. -22
[ 2293.765637][T20087] incfs: mount failed -22
[ 2293.829284][T22468] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[ 2293.879432][   T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2293.890209][   T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2293.899723][   T20] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2293.908532][   T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2293.916986][   T20] usb 2-1: config 0 descriptor??
[ 2294.189449][T22468] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2294.200693][T22468] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2294.421226][T22468] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2294.430168][T22468] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2294.438629][T22468] usb 4-1: config 0 descriptor??
[ 2294.519502][   T20] usbhid 2-1:0.0: can't add hid device: -71
[ 2294.525333][   T20] usbhid: probe of 2-1:0.0 failed with error -71
[ 2294.532797][   T20] usb 2-1: USB disconnect, device number 52
[ 2294.787929][T20095] loop2: detected capacity change from 0 to 40427
[ 2295.379512][T22468] usb 4-1: string descriptor 0 read error: -71
[ 2295.429770][T22468] uclogic 0003:256C:006D.0206: failed retrieving string descriptor #200: -71
[ 2295.466559][T22468] uclogic 0003:256C:006D.0206: failed retrieving pen parameters: -71
[ 2295.509666][T22468] uclogic 0003:256C:006D.0206: failed probing pen v2 parameters: -71
[ 2295.522313][T22468] uclogic 0003:256C:006D.0206: failed probing parameters: -71
[ 2295.532886][T22468] uclogic: probe of 0003:256C:006D.0206 failed with error -71
[ 2295.591521][T22468] usb 4-1: USB disconnect, device number 63
[ 2295.689507][ T3077] Bluetooth: hci1: command 0x1009 tx timeout
[ 2296.085587][T20116] 9pnet: Insufficient options for proto=fd
[ 2296.320669][T20117] 9pnet: Insufficient options for proto=fd
[ 2296.876797][   T30] audit: type=1326 audit(1717602353.530:106592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20126 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb70690f69 code=0x7ffc0000
[ 2296.928066][   T30] audit: type=1326 audit(1717602353.560:106593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20126 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fcb70690f69 code=0x7ffc0000
[ 2296.954100][   T30] audit: type=1326 audit(1717602353.560:106594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20126 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb70690f69 code=0x7ffc0000
[ 2296.986421][   T30] audit: type=1326 audit(1717602353.560:106595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20126 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcb70690f69 code=0x7ffc0000
[ 2297.044352][   T30] audit: type=1326 audit(1717602353.560:106596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20126 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb70690f69 code=0x7ffc0000
[ 2297.081264][   T30] audit: type=1326 audit(1717602353.560:106597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20126 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcb70690f69 code=0x7ffc0000
[ 2297.107536][   T30] audit: type=1326 audit(1717602353.560:106598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20126 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb70690f69 code=0x7ffc0000
[ 2297.369945][T22468] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[ 2297.731247][T20138] loop2: detected capacity change from 0 to 40427
[ 2297.739342][T22468] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2297.750209][T22468] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2297.760797][T22468] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2297.769821][T22468] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2297.778527][T22468] usb 2-1: config 0 descriptor??
[ 2298.479485][   T60] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[ 2298.499464][T22468] usb 2-1: string descriptor 0 read error: -71
[ 2298.519487][T22468] uclogic 0003:256C:006D.0207: failed retrieving string descriptor #200: -71
[ 2298.528198][T22468] uclogic 0003:256C:006D.0207: failed retrieving pen parameters: -71
[ 2298.536318][T22468] uclogic 0003:256C:006D.0207: failed probing pen v2 parameters: -71
[ 2298.544413][T22468] uclogic 0003:256C:006D.0207: failed probing parameters: -71
[ 2298.551738][T22468] uclogic: probe of 0003:256C:006D.0207 failed with error -71
[ 2298.560097][T22468] usb 2-1: USB disconnect, device number 53
[ 2298.696679][T20146] loop4: detected capacity change from 0 to 40427
[ 2298.749279][   T60] usb 3-1: device descriptor read/64, error -71
[ 2298.750642][T20146] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[ 2298.763026][T20146] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[ 2298.772292][T20146] F2FS-fs (loop4): invalid crc value
[ 2298.779114][T20146] F2FS-fs (loop4): Found nat_bits in checkpoint
[ 2298.811990][T20146] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[ 2298.818913][T20146] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 2299.801647][T20161] 9pnet: Insufficient options for proto=fd
[ 2300.358912][   T60] usb 3-1: device descriptor read/64, error -71
[ 2300.383745][   T30] audit: type=1326 audit(1717602357.040:106599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20164 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a665eff69 code=0x7ffc0000
[ 2300.449287][   T30] audit: type=1326 audit(1717602357.040:106600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20164 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a665eff69 code=0x7ffc0000
[ 2300.474921][   T30] audit: type=1326 audit(1717602357.070:106601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20164 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f8a665eff69 code=0x7ffc0000
[ 2300.480836][ T1008] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[ 2300.507899][ T1008] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[ 2300.559786][T20173] 9pnet: Insufficient options for proto=fd
[ 2300.649291][   T60] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[ 2300.765215][T20176] 9pnet: Insufficient options for proto=fd
[ 2300.928414][T20182] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2300.937315][   T60] usb 3-1: device descriptor read/64, error -71
[ 2301.012501][T20183] 9pnet: Insufficient options for proto=fd
[ 2301.171550][T20182] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2301.557807][T13867] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2301.685086][T18287] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[ 2301.882584][T20207] loop0: detected capacity change from 0 to 40427
[ 2301.920377][T20207] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[ 2301.927995][T20207] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[ 2301.937328][T20207] F2FS-fs (loop0): invalid crc value
[ 2301.944172][T20207] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 2301.977195][T20207] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[ 2301.984335][T20207] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 2302.119440][T18287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2302.130253][T18287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2302.139810][T18287] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2302.148651][T18287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2302.157612][T18287] usb 2-1: config 0 descriptor??
[ 2302.166126][T20217] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2302.175834][T20217] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2302.267688][T20222] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2302.277652][T20222] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2302.504695][T20226] 9pnet: Insufficient options for proto=fd
[ 2302.634304][T13867] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[ 2302.644315][T13867] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[ 2302.869440][T18287] usb 2-1: string descriptor 0 read error: -71
[ 2302.889406][T18287] uclogic 0003:256C:006D.0208: failed retrieving string descriptor #200: -71
[ 2302.898223][T18287] uclogic 0003:256C:006D.0208: failed retrieving pen parameters: -71
[ 2302.906239][T18287] uclogic 0003:256C:006D.0208: failed probing pen v2 parameters: -71
[ 2302.914359][T18287] uclogic 0003:256C:006D.0208: failed probing parameters: -71
[ 2302.921762][T18287] uclogic: probe of 0003:256C:006D.0208 failed with error -71
[ 2302.930372][T18287] usb 2-1: USB disconnect, device number 54
[ 2302.933438][T20230] loop0: detected capacity change from 0 to 40427
[ 2302.980292][T20230] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[ 2302.988322][T20230] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[ 2302.998037][T20230] F2FS-fs (loop0): invalid crc value
[ 2303.004986][T20230] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 2303.037572][T20230] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[ 2303.044760][T20230] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 2303.226088][T20237] 9pnet: Insufficient options for proto=fd
[ 2303.299995][T20240] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2303.310057][T20240] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2303.345225][T20244] 9pnet: Insufficient options for proto=fd
[ 2303.576522][T20256] 9pnet: Insufficient options for proto=fd
[ 2303.609481][T18287] Bluetooth: hci1: command 0x1003 tx timeout
[ 2303.615821][T22940] Bluetooth: hci1: sending frame failed (-49)
[ 2303.849884][ T1008] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[ 2303.858586][ T1008] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[ 2303.959762][T20255] loop2: detected capacity change from 0 to 40427
[ 2304.054838][T20259] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2304.064611][T20259] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2304.367733][T20274] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2304.482712][T20277] 9pnet: Insufficient options for proto=fd
[ 2304.489910][T20274] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2304.594994][T20284] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2304.618204][T20284] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2304.633310][T20286] overlayfs: failed to resolve './file1': -2
[ 2304.764015][T20293] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2304.773942][T20293] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2305.676402][T20287] loop0: detected capacity change from 0 to 40427
[ 2305.705398][ T2918] Bluetooth: hci1: command 0x1001 tx timeout
[ 2305.711618][T22940] Bluetooth: hci1: sending frame failed (-49)
[ 2305.829387][T20305] 9pnet: Insufficient options for proto=fd
[ 2306.581845][T20312] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2306.591673][T20312] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2306.628286][T20314] device syzkaller0 entered promiscuous mode
[ 2306.781038][T20325] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2306.791137][T20325] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2306.904192][T20329] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2306.935810][T20329] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2307.179337][ T2918] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[ 2307.272781][T20334] 9pnet: Insufficient options for proto=fd
[ 2307.589457][ T2918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2307.600366][ T2918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2307.610131][ T2918] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2307.619070][ T2918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2307.627824][ T2918] usb 1-1: config 0 descriptor??
[ 2307.769263][T18287] Bluetooth: hci1: command 0x1009 tx timeout
[ 2307.873416][T20338] loop1: detected capacity change from 0 to 40427
[ 2308.199906][T20342] loop2: detected capacity change from 0 to 40427
[ 2308.219372][ T2918] usbhid 1-1:0.0: can't add hid device: -71
[ 2308.225238][ T2918] usbhid: probe of 1-1:0.0 failed with error -71
[ 2308.232030][ T2918] usb 1-1: USB disconnect, device number 81
[ 2308.649999][T20346] 9pnet: Insufficient options for proto=fd
[ 2308.897835][T20351] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2308.907571][T20351] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2308.942092][T20353] device syzkaller0 entered promiscuous mode
[ 2309.388233][T20365] 9pnet: Insufficient options for proto=fd
[ 2309.432628][T20368] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2309.444530][T20368] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2309.519726][   T30] kauditd_printk_skb: 9 callbacks suppressed
[ 2309.519743][   T30] audit: type=1326 audit(1717602366.180:106611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20373 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb70690f69 code=0x0
[ 2309.569588][T20358] loop0: detected capacity change from 0 to 40427
[ 2309.739337][T18287] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[ 2309.989413][T22468] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[ 2310.169412][T18287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2310.180280][T18287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2310.190041][T18287] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2310.400409][T22468] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2310.422650][T18287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2310.431329][T18287] usb 4-1: config 0 descriptor??
[ 2310.437583][T22468] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2310.447517][T22468] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2310.456613][T22468] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2310.465447][T22468] usb 3-1: config 0 descriptor??
[ 2310.472307][T20383] device syzkaller0 entered promiscuous mode
[ 2311.396487][T20389] 9pnet: Insufficient options for proto=fd
[ 2311.519514][T22468] usbhid 3-1:0.0: can't add hid device: -71
[ 2311.525781][T22468] usbhid: probe of 3-1:0.0 failed with error -71
[ 2311.536708][T22468] usb 3-1: USB disconnect, device number 65
[ 2311.809454][T18287] usb 4-1: string descriptor 0 read error: -71
[ 2311.829543][T18287] uclogic 0003:256C:006D.0209: failed retrieving string descriptor #200: -71
[ 2311.838201][T18287] uclogic 0003:256C:006D.0209: failed retrieving pen parameters: -71
[ 2311.846088][T18287] uclogic 0003:256C:006D.0209: failed probing pen v2 parameters: -71
[ 2311.854075][T18287] uclogic 0003:256C:006D.0209: failed probing parameters: -71
[ 2311.865968][T18287] uclogic: probe of 0003:256C:006D.0209 failed with error -71
[ 2311.876137][T18287] usb 4-1: USB disconnect, device number 64
[ 2311.937386][T20403] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2311.950834][T20403] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2312.239656][T20405] loop1: detected capacity change from 0 to 40427
[ 2312.302185][T20414] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[ 2312.331070][T20414] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22
[ 2312.727025][T20409] loop4: detected capacity change from 0 to 40427
[ 2312.959265][   T60] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[ 2313.355546][T20435] 9pnet: Insufficient options for proto=fd
[ 2313.506000][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2313.516744][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2313.526345][   T60] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2313.535122][   T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2313.543653][   T60] usb 4-1: config 0 descriptor??
[ 2313.823792][T20442] incfs: Options parsing error. -22
[ 2313.828969][T20442] incfs: mount failed -22
[ 2313.976531][T20446] 9pnet: Insufficient options for proto=fd
[ 2314.349251][ T3077] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[ 2314.519541][   T60] usb 4-1: string descriptor 0 read error: -71
[ 2314.539819][   T60] uclogic 0003:256C:006D.020A: failed retrieving string descriptor #200: -71
[ 2314.549018][   T60] uclogic 0003:256C:006D.020A: failed retrieving pen parameters: -71
[ 2314.567040][   T60] uclogic 0003:256C:006D.020A: failed probing pen v2 parameters: -71
[ 2314.575010][   T60] uclogic 0003:256C:006D.020A: failed probing parameters: -71
[ 2314.582258][   T60] uclogic: probe of 0003:256C:006D.020A failed with error -71
[ 2314.590435][   T60] usb 4-1: USB disconnect, device number 65
[ 2314.699183][T20460] incfs: Options parsing error. -22
[ 2314.704411][T20460] incfs: mount failed -22
[ 2314.729813][ T3077] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2314.740648][ T3077] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2314.750744][ T3077] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2314.759644][ T3077] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2314.771126][ T3077] usb 5-1: config 0 descriptor??
[ 2315.059550][T20464] device syzkaller0 entered promiscuous mode
[ 2315.069840][T20464] syzkaller0: tun_net_xmit 1280
[ 2315.399768][ T3077] usbhid 5-1:0.0: can't add hid device: -71
[ 2315.406157][ T3077] usbhid: probe of 5-1:0.0 failed with error -71
[ 2315.456509][ T3077] usb 5-1: USB disconnect, device number 100
[ 2315.854227][T20486] 9pnet: Insufficient options for proto=fd
[ 2316.180636][T20494] incfs: Options parsing error. -22
[ 2316.186088][T20494] incfs: mount failed -22
[ 2316.349246][ T3077] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[ 2316.399622][T20498] loop2: detected capacity change from 0 to 40427
[ 2316.709940][ T3077] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2316.724188][ T3077] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2316.733993][ T3077] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2316.742902][ T3077] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2316.755015][ T3077] usb 5-1: config 0 descriptor??
[ 2317.252072][T20587] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none.
[ 2317.434361][   T30] audit: type=1400 audit(1717602374.090:106612): avc:  denied  { nlmsg_read } for  pid=20615 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 2317.451752][T20618] loop0: detected capacity change from 0 to 256
[ 2317.456026][T20616] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2317.482852][T20618] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[ 2317.489665][T20620] loop1: detected capacity change from 0 to 512
[ 2317.499461][ T3077] usb 5-1: string descriptor 0 read error: -71
[ 2317.519567][ T3077] uclogic 0003:256C:006D.020B: failed retrieving string descriptor #200: -71
[ 2317.528316][ T3077] uclogic 0003:256C:006D.020B: failed retrieving pen parameters: -71
[ 2317.530366][T20620] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 2317.536429][ T3077] uclogic 0003:256C:006D.020B: failed probing pen v2 parameters: -71
[ 2317.556808][ T3077] uclogic 0003:256C:006D.020B: failed probing parameters: -71
[ 2317.564661][ T3077] uclogic: probe of 0003:256C:006D.020B failed with error -71
[ 2317.572089][T20620] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz-executor.1: invalid block
[ 2317.573801][ T3077] usb 5-1: USB disconnect, device number 101
[ 2317.598703][T20623] loop0: detected capacity change from 0 to 16
[ 2317.605020][T20620] EXT4-fs (loop1): Remounting filesystem read-only
[ 2317.611720][T20620] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 4294967295 (level 1)
[ 2317.626231][T20620] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 4294967295 (level 1)
[ 2317.648566][T20620] EXT4-fs (loop1): 2 truncates cleaned up
[ 2317.654870][T20623] erofs: (device loop0): mounted with root inode @ nid 36.
[ 2317.664624][T20620] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,dioread_nolock,. Quota mode: writeback.
[ 2317.687883][   T30] audit: type=1400 audit(1717602374.340:106613): avc:  denied  { link } for  pid=20619 comm="syz-executor.1" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 2317.927640][T20647] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none.
[ 2318.116984][   T30] audit: type=1400 audit(1717602374.770:106614): avc:  denied  { lock } for  pid=20657 comm="syz-executor.1" path="socket:[304337]" dev="sockfs" ino=304337 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[ 2318.208276][T20674] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none.
[ 2318.525685][T20695] loop4: detected capacity change from 0 to 512
[ 2318.575742][T20695] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[ 2318.584725][T20695] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz-executor.4: attempt to clear invalid blocks 2 len 1
[ 2318.602259][T20695] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[ 2318.622474][T20695] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 1819239214 (level 0)
[ 2318.639856][T20695] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 1819239214 (level 1)
[ 2318.655007][T20695] EXT4-fs (loop4): 1 truncate cleaned up
[ 2318.660626][T20695] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000004,sb=0x0000000000000006,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback.
[ 2318.683996][T20695] device wg2 entered promiscuous mode
[ 2318.735532][T20703] loop4: detected capacity change from 0 to 16
[ 2318.780265][T20703] erofs: (device loop4): mounted with root inode @ nid 36.
[ 2319.426660][T20708] loop3: detected capacity change from 0 to 256
[ 2320.181993][T20741] loop0: detected capacity change from 0 to 512
[ 2320.199238][ T2918] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[ 2320.270709][T20741] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 2320.289386][T20741] ext4 filesystem being mounted at /root/syzkaller-testdir2954402937/syzkaller.LwtDTK/257/bus supports timestamps until 2038 (0x7fffffff)
[ 2320.403615][T20748] loop2: detected capacity change from 0 to 16
[ 2320.437096][T20730] loop4: detected capacity change from 0 to 40427
[ 2320.449310][ T2918] usb 2-1: Using ep0 maxpacket: 32
[ 2320.470208][T20748] erofs: (device loop2): mounted with root inode @ nid 36.
[ 2320.501009][T20730] F2FS-fs (loop4): invalid crc value
[ 2320.521749][T20730] F2FS-fs (loop4): Found nat_bits in checkpoint
[ 2320.589412][ T2918] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2320.611613][ T2918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2320.629077][ T2918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2320.642646][ T2918] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 2320.659507][ T2918] usb 2-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15
[ 2320.668974][T20730] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[ 2320.677518][ T2918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2320.690442][ T2918] usb 2-1: config 0 descriptor??
[ 2320.829609][T16353] attempt to access beyond end of device
[ 2320.829609][T16353] loop4: rw=2049, want=45112, limit=40427
[ 2321.130556][T20739] loop3: detected capacity change from 0 to 131072
[ 2321.161987][T20739] F2FS-fs (loop3): invalid crc value
[ 2321.187516][T20739] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 2321.219449][ T2918] usbhid 2-1:0.0: can't add hid device: -71
[ 2321.225258][ T2918] usbhid: probe of 2-1:0.0 failed with error -71
[ 2321.246194][ T2918] usb 2-1: USB disconnect, device number 55
[ 2321.282842][T20739] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[ 2321.585965][T20786] syz-executor.2[20786] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2321.586056][T20786] syz-executor.2[20786] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2321.610675][T20786] syz-executor.2[20786] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2321.639436][T20786] syz-executor.2[20786] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2322.299940][T20819] loop4: detected capacity change from 0 to 2048
[ 2322.381862][T20819] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 2323.431370][T20853] loop4: detected capacity change from 0 to 256
[ 2323.474666][T20853] FAT-fs (loop4): Directory bread(block 64) failed
[ 2323.484627][T20853] FAT-fs (loop4): Directory bread(block 65) failed
[ 2323.496585][T20853] FAT-fs (loop4): Directory bread(block 66) failed
[ 2323.508781][T20853] FAT-fs (loop4): Directory bread(block 67) failed
[ 2323.520872][T20853] FAT-fs (loop4): Directory bread(block 68) failed
[ 2323.533919][T20853] FAT-fs (loop4): Directory bread(block 69) failed
[ 2323.547106][T20853] FAT-fs (loop4): Directory bread(block 70) failed
[ 2323.558982][T20853] FAT-fs (loop4): Directory bread(block 71) failed
[ 2323.572172][T20853] FAT-fs (loop4): Directory bread(block 72) failed
[ 2323.585178][T20853] FAT-fs (loop4): Directory bread(block 73) failed
[ 2323.854026][T20867] loop4: detected capacity change from 0 to 256
[ 2323.984047][T20871] 9pnet: Insufficient options for proto=fd
[ 2324.042568][T20876] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none.
[ 2324.216128][T20888] loop0: detected capacity change from 0 to 16
[ 2324.249970][T20888] erofs: Unknown parameter 'ÿÿÿÿ01777777777777777777777ÿ18446744073709551615!Z¡[òžÒÿo’Aÿ`i'
[ 2324.363287][T20906] loop0: detected capacity change from 0 to 1024
[ 2324.450676][T20906] EXT4-fs (loop0): Test dummy encryption mode enabled
[ 2324.463983][T20906] EXT4-fs (loop0): Ignoring removed orlov option
[ 2324.491931][T20906] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[ 2324.625799][T20905] kvm [20903]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x34500000800
[ 2324.643917][T20905] kvm [20903]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x34600000000
[ 2324.658949][T20905] kvm [20903]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x47e00000000
[ 2324.672368][T20905] kvm [20903]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x64e00000000
[ 2324.682320][T20905] kvm [20903]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x64f00000800
[ 2324.765931][   T30] audit: type=1400 audit(1717602381.420:106615): avc:  denied  { ioctl } for  pid=20918 comm="syz-executor.0" path="socket:[303830]" dev="sockfs" ino=303830 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 2325.040437][T20934] loop0: detected capacity change from 0 to 256
[ 2325.115624][T20934] FAT-fs (loop0): Directory bread(block 64) failed
[ 2325.129529][T20934] FAT-fs (loop0): Directory bread(block 65) failed
[ 2325.143834][T20934] FAT-fs (loop0): Directory bread(block 66) failed
[ 2325.157981][T20934] FAT-fs (loop0): Directory bread(block 67) failed
[ 2325.171091][T20934] FAT-fs (loop0): Directory bread(block 68) failed
[ 2325.185161][T20934] FAT-fs (loop0): Directory bread(block 69) failed
[ 2325.198227][T20934] FAT-fs (loop0): Directory bread(block 70) failed
[ 2325.206058][T20929] loop2: detected capacity change from 0 to 40427
[ 2325.212486][T20934] FAT-fs (loop0): Directory bread(block 71) failed
[ 2325.218965][T20934] FAT-fs (loop0): Directory bread(block 72) failed
[ 2325.225389][T20934] FAT-fs (loop0): Directory bread(block 73) failed
[ 2325.250429][T20929] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[ 2325.261357][T20929] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 2325.306482][T20929] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 2325.370244][T20929] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 2325.379390][T20929] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 2325.522013][T20938] loop4: detected capacity change from 0 to 40427
[ 2325.580208][T20938] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[ 2325.592182][T20938] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[ 2325.608953][T20938] F2FS-fs (loop4): invalid crc value
[ 2325.646053][T20938] F2FS-fs (loop4): Found nat_bits in checkpoint
[ 2325.655623][T20965] loop1: detected capacity change from 0 to 2048
[ 2325.721789][T20938] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[ 2325.743135][T20938] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 2325.762679][T20965] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 2326.212103][ T1008] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[ 2326.234652][ T1008] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[ 2326.769325][T20995] loop4: detected capacity change from 0 to 1024
[ 2326.821633][T20995] EXT4-fs (loop4): Test dummy encryption mode enabled
[ 2326.839483][T20995] EXT4-fs (loop4): Ignoring removed orlov option
[ 2326.872080][T20995] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[ 2327.355133][T21014] syz-executor.1[21014] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2327.355216][T21014] syz-executor.1[21014] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2327.377765][T21018] loop3: detected capacity change from 0 to 16
[ 2327.431717][T21018] erofs: (device loop3): mounted with root inode @ nid 36.
[ 2327.502325][T21028] EXT4-fs (sda1): Unrecognized mount option "" or missing value
[ 2327.520930][T21012] loop2: detected capacity change from 0 to 40427
[ 2327.531374][T21032] loop3: detected capacity change from 0 to 512
[ 2327.550991][T21012] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[ 2327.561274][T21012] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 2327.562953][T21032] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 2327.588153][T21012] F2FS-fs (loop2): invalid crc value
[ 2327.600270][T21032] EXT4-fs (loop3): 1 truncate cleaned up
[ 2327.610233][T21032] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 2327.621668][T21012] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 2327.644691][T21045] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none.
[ 2327.737569][T21012] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 2327.750326][T21012] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 2327.810349][T21051] loop3: detected capacity change from 0 to 16
[ 2327.863239][T21051] erofs: (device loop3): mounted with root inode @ nid 36.
[ 2328.277994][T25421] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[ 2328.294972][T25421] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[ 2328.526199][T21066] EXT4-fs (sda1): Unrecognized mount option "" or missing value
[ 2328.536649][T21068] syz-executor.2[21068] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2328.536744][T21068] syz-executor.2[21068] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2328.880335][T21095] EXT4-fs (sda1): Unrecognized mount option "" or missing value
[ 2328.955265][T21102] syz-executor.4[21102] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2328.956545][T21102] syz-executor.4[21102] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2329.081009][T21116] loop2: detected capacity change from 0 to 16
[ 2329.136954][T21116] erofs: (device loop2): mounted with root inode @ nid 36.
[ 2329.154373][T21125] loop4: detected capacity change from 0 to 16
[ 2329.192834][T21079] loop1: detected capacity change from 0 to 32768
[ 2329.210107][T21125] erofs: (device loop4): mounted with root inode @ nid 36.
[ 2329.392861][T21131] syz-executor.3[21131] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2329.392990][T21131] syz-executor.3[21131] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2329.415662][T21131] syz-executor.3[21131] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2329.438406][T21131] syz-executor.3[21131] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2329.506411][   T30] audit: type=1326 audit(1717602386.160:106616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21132 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ce68ef69 code=0x7ffc0000
[ 2329.599420][   T30] audit: type=1326 audit(1717602386.160:106617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21132 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ce68ef69 code=0x7ffc0000
[ 2329.662217][   T30] audit: type=1326 audit(1717602386.210:106618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21132 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93ce68ef69 code=0x7ffc0000
[ 2329.693109][T21127] loop2: detected capacity change from 0 to 40427
[ 2329.699697][   T30] audit: type=1326 audit(1717602386.210:106619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21132 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ce68ef69 code=0x7ffc0000
[ 2329.724384][   T30] audit: type=1326 audit(1717602386.210:106620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21132 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ce68ef69 code=0x7ffc0000
[ 2329.730962][T21129] loop4: detected capacity change from 0 to 40427
[ 2329.748854][   T30] audit: type=1326 audit(1717602386.210:106621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21132 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93ce68ef69 code=0x7ffc0000
[ 2329.780263][   T30] audit: type=1326 audit(1717602386.210:106622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21132 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ce68ef69 code=0x7ffc0000
[ 2329.805592][   T30] audit: type=1326 audit(1717602386.210:106623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21132 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ce68ef69 code=0x7ffc0000
[ 2329.830766][   T30] audit: type=1326 audit(1717602386.210:106624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21132 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f93ce68ef69 code=0x7ffc0000
[ 2329.855663][   T30] audit: type=1326 audit(1717602386.210:106625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21132 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ce68ef69 code=0x7ffc0000
[ 2329.883333][T21127] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 2329.910224][T21129] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[ 2329.932210][   T30] audit: type=1326 audit(1717602386.210:106626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21132 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ce68ef69 code=0x7ffc0000
[ 2329.936714][T21129] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[ 2329.981185][T21127] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 2330.033284][T21129] F2FS-fs (loop4): invalid crc value
[ 2330.096648][T21129] F2FS-fs (loop4): Found nat_bits in checkpoint
[ 2330.173887][T21151] attempt to access beyond end of device
[ 2330.173887][T21151] loop2: rw=2049, want=78800, limit=40427
[ 2330.285452][T21155] loop3: detected capacity change from 0 to 16
[ 2330.351384][T21129] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[ 2330.360632][T21155] erofs: (device loop3): mounted with root inode @ nid 36.
[ 2330.367751][T21129] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 2330.398586][ T1008] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[ 2330.407551][ T1008] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[ 2330.448215][T17674] attempt to access beyond end of device
[ 2330.448215][T17674] loop2: rw=2049, want=45104, limit=40427
[ 2330.475621][T21129] F2FS-fs (loop4): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint
[ 2331.019079][T21231] device syzkaller0 entered promiscuous mode
[ 2331.207794][T21220] loop2: detected capacity change from 0 to 40427
[ 2331.230638][T21220] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[ 2331.246367][T21220] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 2331.257066][T21220] F2FS-fs (loop2): Corrupted extension count (1573 + 1 > 64)
[ 2331.258339][T21233] loop1: detected capacity change from 0 to 40427
[ 2331.264705][T21220] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[ 2331.291816][T21233] F2FS-fs (loop1): invalid crc value
[ 2331.298805][T21233] F2FS-fs (loop1): Found nat_bits in checkpoint
[ 2331.331643][T21233] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[ 2331.449588][T21277] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2331.739667][T21281] loop1: detected capacity change from 0 to 40427
[ 2331.779515][T21281] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[ 2331.787133][T21281] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 2331.799919][T21281] F2FS-fs (loop1): invalid crc value
[ 2331.811193][T21281] F2FS-fs (loop1): Found nat_bits in checkpoint
[ 2331.888711][T21281] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[ 2331.897135][T21281] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[ 2331.999123][T21297] loop0: detected capacity change from 0 to 16
[ 2332.080488][T21297] erofs: (device loop0): mounted with root inode @ nid 36.
[ 2332.338385][T21292] loop4: detected capacity change from 0 to 40427
[ 2332.402916][T21292] F2FS-fs (loop4): invalid crc value
[ 2332.410331][T21292] F2FS-fs (loop4): Found nat_bits in checkpoint
[ 2332.463488][T21292] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[ 2332.509702][T21320] loop2: detected capacity change from 0 to 8192
[ 2332.561659][T21320] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 2332.623676][T21325] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2332.630876][T21325] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2332.642526][T21332] loop4: detected capacity change from 0 to 16
[ 2332.661528][T21332] erofs: (device loop4): mounted with root inode @ nid 36.
[ 2332.719300][   T60] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[ 2332.783417][T21344] device syzkaller0 entered promiscuous mode
[ 2332.795269][T21353] loop3: detected capacity change from 0 to 512
[ 2332.848901][T21353] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[ 2332.858032][T21353] EXT4-fs (loop3): invalid journal inode
[ 2332.868744][T21353] EXT4-fs (loop3): can't get journal size
[ 2332.897124][T21353] EXT4-fs (loop3): 1 truncate cleaned up
[ 2332.905941][T21353] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none.
[ 2333.039661][T21351] loop0: detected capacity change from 0 to 40427
[ 2333.052700][T21366] loop2: detected capacity change from 0 to 16
[ 2333.071948][T21351] F2FS-fs (loop0): invalid crc value
[ 2333.077254][T21366] erofs: (device loop2): mounted with root inode @ nid 36.
[ 2333.089640][   T60] usb 2-1: New USB device found, idVendor=0582, idProduct=00c4, bcdDevice=ac.5f
[ 2333.100745][   T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2333.113726][   T60] usb 2-1: config 0 descriptor??
[ 2333.118795][T21351] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 2333.193652][T21351] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[ 2333.363262][T21318] device vlan2 entered promiscuous mode
[ 2333.368641][T21318] device ip6gretap0 entered promiscuous mode
[ 2333.380423][T21318] device ip6gretap0 left promiscuous mode
[ 2333.715668][T21396] loop3: detected capacity change from 0 to 16
[ 2333.773288][T21396] erofs: (device loop3): mounted with root inode @ nid 36.
[ 2333.873429][T21404] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2333.880504][T21404] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2334.420971][   T60] usb 2-1: USB disconnect, device number 56
[ 2334.653308][T21419] loop2: detected capacity change from 0 to 8192
[ 2334.669915][T21419] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 2335.939743][T21448] device syzkaller0 entered promiscuous mode
[ 2336.348640][T21462] loop3: detected capacity change from 0 to 16
[ 2336.399962][T21462] erofs: (device loop3): mounted with root inode @ nid 36.
[ 2336.613279][T21491] loop1: detected capacity change from 0 to 16
[ 2336.660281][T21491] erofs: (device loop1): mounted with root inode @ nid 36.
[ 2336.721515][T21501] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2337.241136][T21528] loop0: detected capacity change from 0 to 128
[ 2337.303845][T21528] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 2337.314564][T21528] ext4 filesystem being mounted at /root/syzkaller-testdir2954402937/syzkaller.LwtDTK/326/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[ 2337.461985][T21528] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2337.479016][T21528] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2337.810118][T21539] loop3: detected capacity change from 0 to 16
[ 2337.830073][T21539] erofs: (device loop3): mounted with root inode @ nid 36.
[ 2337.889378][ T7641] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[ 2338.140796][T21547] 9pnet: Insufficient options for proto=fd
[ 2338.904763][T21548] 9pnet: Insufficient options for proto=fd
[ 2339.069619][ T7641] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2339.086023][   T30] audit: type=1326 audit(1717602395.740:106627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21551 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93ce68ef69 code=0x0
[ 2339.120394][ T7641] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2339.157182][ T7641] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2339.186909][ T7641] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2339.210993][ T7641] usb 2-1: config 0 descriptor??
[ 2339.446288][T21552] loop2: detected capacity change from 0 to 40427
[ 2339.789349][ T7641] usbhid 2-1:0.0: can't add hid device: -71
[ 2339.795231][ T7641] usbhid: probe of 2-1:0.0 failed with error -71
[ 2339.814958][ T7641] usb 2-1: USB disconnect, device number 57
[ 2340.002696][T21562] loop0: detected capacity change from 0 to 131072
[ 2340.041666][T21562] F2FS-fs (loop0): invalid crc value
[ 2340.049456][T21562] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 2340.095915][T21562] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[ 2340.107487][T21562] fscrypt (loop0, inode 8): Error -61 getting encryption context
[ 2341.244228][T21644] tmpfs: Unknown parameter 'usrquota'
[ 2342.666189][T21721] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none.
[ 2343.586049][T21736] loop2: detected capacity change from 0 to 1024
[ 2343.620329][T21736] EXT4-fs (loop2): Ignoring removed bh option
[ 2343.660055][T21736] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000c118, mo2=0002]
[ 2343.668043][T21736] System zones: 0-1, 3-12
[ 2343.672409][T21739] loop1: detected capacity change from 0 to 8192
[ 2343.680262][T21736] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,nobarrier,barrier=0x0000000000000000,norecovery,bh,lazytime,nodelalloc,acl,debug,,errors=continue. Quota mode: none.
[ 2343.809314][T21736] loop_set_status: loop2 () has still dirty pages (nrpages=4)
[ 2343.826472][T21733] loop4: detected capacity change from 0 to 40427
[ 2343.860542][T21733] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[ 2343.868226][T21733] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[ 2343.882788][T21733] F2FS-fs (loop4): Found nat_bits in checkpoint
[ 2343.928029][T21733] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[ 2343.935129][T21733] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 2344.145243][T21791] loop2: detected capacity change from 0 to 256
[ 2344.153534][T21792] loop4: detected capacity change from 0 to 512
[ 2344.177008][T21791] FAT-fs (loop2): Directory bread(block 64) failed
[ 2344.183700][T21791] FAT-fs (loop2): Directory bread(block 65) failed
[ 2344.190229][T21791] FAT-fs (loop2): Directory bread(block 66) failed
[ 2344.196591][T21791] FAT-fs (loop2): Directory bread(block 67) failed
[ 2344.200767][T21792] EXT4-fs (loop4): Ignoring removed oldalloc option
[ 2344.203280][T21791] FAT-fs (loop2): Directory bread(block 68) failed
[ 2344.212591][T21792] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz-executor.4: Parent and EA inode have the same ino 15
[ 2344.215799][T21791] FAT-fs (loop2): Directory bread(block 69) failed
[ 2344.228755][T21792] EXT4-fs (loop4): Remounting filesystem read-only
[ 2344.235035][T21791] FAT-fs (loop2): Directory bread(block 70) failed
[ 2344.241133][T21792] EXT4-fs error (device loop4): ext4_evict_inode:294: comm syz-executor.4: couldn't truncate inode 15 (err -30)
[ 2344.247548][T21791] FAT-fs (loop2): Directory bread(block 71) failed
[ 2344.259600][T21792] EXT4-fs (loop4): 1 orphan inode deleted
[ 2344.266284][T21791] FAT-fs (loop2): Directory bread(block 72) failed
[ 2344.271245][T21792] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,i_version,oldalloc,stripe=0x0000000000000005,. Quota mode: none.
[ 2344.277703][T21791] FAT-fs (loop2): Directory bread(block 73) failed
[ 2344.636789][T21825] loop4: detected capacity change from 0 to 256
[ 2344.662531][T21832] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2344.681002][T21833] loop3: detected capacity change from 0 to 2048
[ 2344.689872][T21825] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 2344.773271][T21833] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 2344.809747][T21825] loop_set_status: loop4 () has still dirty pages (nrpages=3)
[ 2344.846835][T21845] loop2: detected capacity change from 0 to 8192
[ 2345.305976][T21872] loop4: detected capacity change from 0 to 16
[ 2345.332706][T21872] erofs: (device loop4): mounted with root inode @ nid 36.
[ 2345.597565][T21882] loop1: detected capacity change from 0 to 128
[ 2345.634479][T21882] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[ 2345.677288][T21884] loop4: detected capacity change from 0 to 8192
[ 2345.949291][ T7143] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[ 2345.976976][T21913] loop0: detected capacity change from 0 to 256
[ 2346.043171][T21913] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 2346.109269][T21913] loop_set_status: loop0 () has still dirty pages (nrpages=3)
[ 2346.309369][ T7143] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2346.326830][ T7143] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 2346.353469][ T7143] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 2346.377850][ T7143] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2347.358504][T21946] loop2: detected capacity change from 0 to 256
[ 2347.395400][T21946] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 2347.479517][T21946] loop_set_status: loop2 () has still dirty pages (nrpages=3)
[ 2347.589441][ T7143] aiptek 2-1:17.0: Aiptek using 400 ms programming speed
[ 2347.597107][ T7143] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input138
[ 2347.610483][T21952] loop1: detected capacity change from 0 to 16
[ 2347.630483][ T7143] input: failed to attach handler kbd to device input138, error: -5
[ 2347.649440][ T7143] usb 2-1: USB disconnect, device number 58
[ 2347.673566][T21952] erofs: (device loop1): mounted with root inode @ nid 36.
[ 2347.715664][T21948] loop0: detected capacity change from 0 to 32768
[ 2347.939243][T18837] usb 3-1: new low-speed USB device number 66 using dummy_hcd
[ 2348.110433][   T30] audit: type=1400 audit(1717602404.770:106628): avc:  denied  { setattr } for  pid=21970 comm="syz-executor.4" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[ 2348.148740][T21966] loop0: detected capacity change from 0 to 40427
[ 2348.159900][T21976] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none.
[ 2348.177168][T21966] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 2348.219388][T21966] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 2348.235397][T16594] attempt to access beyond end of device
[ 2348.235397][T16594] loop0: rw=2049, want=45104, limit=40427
[ 2348.309529][T18837] usb 3-1: config index 0 descriptor too short (expected 1307, got 27)
[ 2348.320826][T18837] usb 3-1: config 0 has an invalid interface number: 0 but max is -1
[ 2348.341143][T18837] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 2348.369252][T18837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[ 2348.609428][T18837] usb 3-1: string descriptor 0 read error: -22
[ 2348.615536][T18837] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[ 2348.639229][T18837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2348.659504][T18837] usb 3-1: config 0 descriptor??
[ 2348.679501][T21955] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 2348.699850][T18837] hub 3-1:0.0: bad descriptor, ignoring hub
[ 2348.705588][T18837] hub: probe of 3-1:0.0 failed with error -5
[ 2348.720451][T18837] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input139
[ 2348.904289][T21955] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22
[ 2348.921256][T21955] fuse: Bad value for 'fd'
[ 2349.018107][   T30] audit: type=1400 audit(1717602405.670:106629): avc:  denied  { mount } for  pid=22027 comm="syz-executor.3" name="/" dev="pstore" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[ 2349.085983][   T30] audit: type=1400 audit(1717602405.710:106630): avc:  denied  { unmount } for  pid=15935 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[ 2349.340868][T22060] loop4: detected capacity change from 0 to 256
[ 2349.629558][   T30] audit: type=1326 audit(1717602406.290:106631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22078 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ce68ef69 code=0x7ffc0000
[ 2349.658351][   T30] audit: type=1326 audit(1717602406.320:106632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22078 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ce68ef69 code=0x7ffc0000
[ 2349.687029][   T30] audit: type=1326 audit(1717602406.320:106633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22078 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93ce68ef69 code=0x7ffc0000
[ 2349.708656][T22083] loop3: detected capacity change from 0 to 1024
[ 2349.717477][   T30] audit: type=1326 audit(1717602406.320:106634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22078 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ce68ef69 code=0x7ffc0000
[ 2349.741916][   T30] audit: type=1326 audit(1717602406.320:106635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22078 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ce68ef69 code=0x7ffc0000
[ 2349.766397][   T30] audit: type=1326 audit(1717602406.320:106636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22078 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93ce68ef69 code=0x7ffc0000
[ 2349.790656][   T30] audit: type=1326 audit(1717602406.320:106637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22078 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ce68ef69 code=0x7ffc0000
[ 2349.814693][T22083] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[ 2349.831490][T22083] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback.
[ 2350.241233][T22102] device syzkaller0 entered promiscuous mode
[ 2350.609725][T22126] loop0: detected capacity change from 0 to 512
[ 2350.639569][ T7143] usb 3-1: USB disconnect, device number 66
[ 2350.661092][T22126] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[ 2351.114027][T22159] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2351.148013][T22159] loop1: detected capacity change from 0 to 1024
[ 2351.180870][T22159] EXT4-fs (loop1): Ignoring removed orlov option
[ 2351.189640][T22159] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 2351.203989][T22159] EXT4-fs (loop1): Unrecognized mount option "euid>00000000000000000000" or missing value
[ 2351.434695][T22165] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1206913118 (2413826236 ns) > initial count (10 ns). Using initial count to start timer.
[ 2351.569490][T18837] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[ 2351.583799][T22180] loop2: detected capacity change from 0 to 16
[ 2351.651524][T22180] erofs: (device loop2): mounted with root inode @ nid 36.
[ 2351.809360][T18837] usb 2-1: Using ep0 maxpacket: 16
[ 2351.929493][T18837] usb 2-1: config 0 interface 0 altsetting 44 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2351.945887][T18837] usb 2-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 2351.972095][T18837] usb 2-1: config 0 interface 0 has no altsetting 0
[ 2352.139536][T18837] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[ 2352.153966][T18837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2352.177164][T18837] usb 2-1: Product: syz
[ 2352.189836][T18837] usb 2-1: Manufacturer: syz
[ 2352.200793][T18837] usb 2-1: SerialNumber: syz
[ 2352.214161][T18837] usb 2-1: config 0 descriptor??
[ 2352.460414][T22159] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2352.467424][T22159] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2352.661400][T22205] device syzkaller0 entered promiscuous mode
[ 2352.972427][T22235] loop2: detected capacity change from 0 to 512
[ 2352.995935][ T7143] usb 2-1: USB disconnect, device number 59
[ 2353.010663][T22235] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[ 2353.079822][T22241] loop1: detected capacity change from 0 to 512
[ 2353.149564][T22241] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 2353.169509][T22241] ext4 filesystem being mounted at /root/syzkaller-testdir4236950044/syzkaller.1e5oMI/396/bus supports timestamps until 2038 (0x7fffffff)
[ 2354.067754][   T30] kauditd_printk_skb: 4 callbacks suppressed
[ 2354.067770][   T30] audit: type=1400 audit(1717602410.720:106642): avc:  denied  { mount } for  pid=22275 comm="syz-executor.0" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[ 2354.096957][   T30] audit: type=1400 audit(1717602410.720:106643): avc:  denied  { mounton } for  pid=22275 comm="syz-executor.0" path="/root/syzkaller-testdir2954402937/syzkaller.LwtDTK/387/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[ 2354.139641][   T30] audit: type=1400 audit(1717602410.800:106644): avc:  denied  { unmount } for  pid=16594 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[ 2355.065741][T22315] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none.
[ 2355.381134][T22287] loop3: detected capacity change from 0 to 131072
[ 2355.401862][T22287] F2FS-fs (loop3): invalid crc value
[ 2355.427362][T22287] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 2355.566469][T22287] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[ 2355.595824][T22352] loop1: detected capacity change from 0 to 16
[ 2355.631169][T22287] fscrypt (loop3, inode 8): Error -61 getting encryption context
[ 2355.649936][T22352] erofs: (device loop1): mounted with root inode @ nid 36.
[ 2355.800028][T22366] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2355.836431][T22366] loop0: detected capacity change from 0 to 1024
[ 2355.900400][T22366] EXT4-fs (loop0): Ignoring removed orlov option
[ 2355.906979][T22366] EXT4-fs (loop0): Test dummy encryption mode enabled
[ 2355.927859][T22366] EXT4-fs (loop0): Unrecognized mount option "euid>00000000000000000000" or missing value
[ 2355.989364][ T7143] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[ 2356.114729][T22387] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2356.160441][T22399] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none.
[ 2356.239278][ T7143] usb 5-1: Using ep0 maxpacket: 16
[ 2356.319378][   T60] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[ 2356.339384][T18837] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[ 2356.359435][ T7143] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2356.370553][ T7143] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2356.383388][ T7143] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2356.392269][ T7143] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2356.400749][ T7143] usb 5-1: config 0 descriptor??
[ 2356.539247][T18287] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[ 2356.579365][T18837] usb 1-1: Using ep0 maxpacket: 16
[ 2356.689360][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2356.700372][T18837] usb 1-1: config 0 interface 0 altsetting 44 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2356.711170][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2356.720765][T18837] usb 1-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 2356.733587][   T60] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[ 2356.742411][T18837] usb 1-1: config 0 interface 0 has no altsetting 0
[ 2356.748877][   T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2356.757329][   T60] usb 4-1: config 0 descriptor??
[ 2356.799247][T18287] usb 2-1: Using ep0 maxpacket: 8
[ 2356.899519][T18837] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[ 2356.908398][T18837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2356.916230][T18837] usb 1-1: Product: syz
[ 2356.920277][T18837] usb 1-1: Manufacturer: syz
[ 2356.924617][T18837] usb 1-1: SerialNumber: syz
[ 2356.929396][T18287] usb 2-1: config index 0 descriptor too short (expected 5924, got 36)
[ 2356.929955][T18837] usb 1-1: config 0 descriptor??
[ 2356.937666][T18287] usb 2-1: config 250 has an invalid interface number: 228 but max is -1
[ 2356.950560][T18287] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0
[ 2356.959705][T18287] usb 2-1: config 250 has no interface number 0
[ 2356.965860][T18287] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[ 2356.977226][T18287] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[ 2356.987489][T18287] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[ 2356.997545][T18287] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[ 2357.007734][T18287] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[ 2357.021753][T18287] usb 2-1: config 250 interface 228 has no altsetting 0
[ 2357.071372][T22418] loop2: detected capacity change from 0 to 256
[ 2357.119089][T17674] FAT-fs (loop2): error, corrupted directory (invalid entries)
[ 2357.126698][T17674] FAT-fs (loop2): Filesystem has been set read-only
[ 2357.133585][T17674] FAT-fs (loop2): error, corrupted directory (invalid entries)
[ 2357.169412][T18287] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[ 2357.178332][T18287] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[ 2357.186484][T18287] usb 2-1: Product: syz
[ 2357.190605][T18287] usb 2-1: SerialNumber: syz
[ 2357.240714][   T60] hid-generic 0003:0D8C:0022.020C: unknown main item tag 0x0
[ 2357.247996][   T60] hid-generic 0003:0D8C:0022.020C: unknown main item tag 0x0
[ 2357.250024][T18287] hub 2-1:250.228: bad descriptor, ignoring hub
[ 2357.256623][   T60] hid-generic 0003:0D8C:0022.020C: hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0
[ 2357.263573][T18287] hub: probe of 2-1:250.228 failed with error -5
[ 2357.322123][T22421] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2357.329040][T22421] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2357.336293][ T7143] usbhid 5-1:0.0: can't add hid device: -71
[ 2357.337419][T22421] device bridge_slave_0 entered promiscuous mode
[ 2357.342104][ T7143] usbhid: probe of 5-1:0.0 failed with error -71
[ 2357.343125][ T7143] usb 5-1: USB disconnect, device number 102
[ 2357.349584][T22421] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2357.367036][T22421] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2357.374404][T22421] device bridge_slave_1 entered promiscuous mode
[ 2357.432718][T22421] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2357.439599][T22421] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2357.446685][T22421] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2357.453462][T22421] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2357.457883][   T60] usb 4-1: USB disconnect, device number 66
[ 2357.466632][T18287] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 60 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[ 2357.485426][T15336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2357.494066][T15336] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2357.501977][T15336] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2357.513650][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2357.521759][   T20] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2357.528591][   T20] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2357.540364][T15336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2357.548342][T15336] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2357.555186][T15336] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2357.568867][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2357.578488][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2357.593969][T15336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2357.608403][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2357.616359][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2357.623722][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2357.632388][T22421] device veth0_vlan entered promiscuous mode
[ 2357.643828][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2357.655842][T22421] device veth1_macvtap entered promiscuous mode
[ 2357.666468][T15336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2357.681577][T15336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2357.702332][ T7641] usb 1-1: USB disconnect, device number 82
[ 2357.727094][T13867] device bridge_slave_1 left promiscuous mode
[ 2357.737781][T13867] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2357.746379][T13867] device bridge_slave_0 left promiscuous mode
[ 2357.746976][T22429] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none.
[ 2357.752619][T13867] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2357.768860][T13867] device veth1_macvtap left promiscuous mode
[ 2357.777189][T13867] device veth0_vlan left promiscuous mode
[ 2357.925078][T22441] loop4: detected capacity change from 0 to 32768
[ 2358.137560][T22456] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2358.163578][T22456] loop4: detected capacity change from 0 to 1024
[ 2358.189483][T18837] usb 2-1: USB disconnect, device number 60
[ 2358.196553][T18837] usblp0: removed
[ 2358.212200][T22456] EXT4-fs (loop4): Ignoring removed orlov option
[ 2358.220226][T22456] EXT4-fs (loop4): Test dummy encryption mode enabled
[ 2358.233528][T22456] EXT4-fs (loop4): Unrecognized mount option "euid>00000000000000000000" or missing value
[ 2358.594430][T22475] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 2358.612594][ T7641] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[ 2358.805364][T22514] device pim6reg1 entered promiscuous mode
[ 2358.859333][ T7641] usb 5-1: Using ep0 maxpacket: 16
[ 2358.889261][T15336] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[ 2358.989393][ T7641] usb 5-1: config 0 interface 0 altsetting 44 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2359.000479][ T7641] usb 5-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 2359.014735][ T7641] usb 5-1: config 0 interface 0 has no altsetting 0
[ 2359.229836][ T7641] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[ 2359.248513][ T7641] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2359.275923][ T7641] usb 5-1: Product: syz
[ 2359.289310][ T7641] usb 5-1: Manufacturer: syz
[ 2359.293786][ T7641] usb 5-1: SerialNumber: syz
[ 2359.299023][ T7641] usb 5-1: config 0 descriptor??
[ 2359.309321][T15336] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2359.327500][T15336] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2359.351039][T15336] usb 1-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00
[ 2359.373241][T15336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2359.384646][T15336] usb 1-1: config 0 descriptor??
[ 2359.542353][T22456] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2359.549545][T22456] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2359.633152][T22527] loop1: detected capacity change from 0 to 131072
[ 2359.671549][T22527] F2FS-fs (loop1): invalid crc value
[ 2359.706477][T22527] F2FS-fs (loop1): Found nat_bits in checkpoint
[ 2359.754876][T22527] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[ 2359.765195][T22527] fscrypt (loop1, inode 8): Error -61 getting encryption context
[ 2359.851043][T15336] wacom 0003:056A:0315.020D: unknown main item tag 0x0
[ 2359.858009][T15336] wacom 0003:056A:0315.020D: Unknown device_type for 'HID 056a:0315'. Assuming pen.
[ 2359.868136][T15336] wacom 0003:056A:0315.020D: hidraw0: USB HID v0.00 Device [HID 056a:0315] on usb-dummy_hcd.0-1/input0
[ 2359.879944][T15336] input: Wacom Intuos Pro M Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0315.020D/input/input140
[ 2359.945339][T22563] device syzkaller0 entered promiscuous mode
[ 2360.069705][   T20] usb 1-1: USB disconnect, device number 83
[ 2360.087288][T18837] usb 5-1: USB disconnect, device number 103
[ 2360.183600][    C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
[ 2360.755486][T22640] loop0: detected capacity change from 0 to 16
[ 2360.810486][T22640] erofs: (device loop0): mounted with root inode @ nid 36.
[ 2360.952253][   T30] audit: type=1400 audit(1717602417.610:106645): avc:  denied  { connect } for  pid=22654 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 2361.001537][T22644] loop1: detected capacity change from 0 to 40427
[ 2361.040258][T22644] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[ 2361.047740][T22644] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 2361.057094][T22644] F2FS-fs (loop1): invalid crc value
[ 2361.079355][T22644] F2FS-fs (loop1): Found nat_bits in checkpoint
[ 2361.124922][T22644] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[ 2361.132055][T22644] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[ 2361.150412][T22659] loop3: detected capacity change from 0 to 40427
[ 2361.156973][T15888] attempt to access beyond end of device
[ 2361.156973][T15888] loop1: rw=2049, want=45104, limit=40427
[ 2361.189383][   T26] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[ 2361.190851][T22659] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 2361.243197][T22659] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 2361.252674][T22675] loop4: detected capacity change from 0 to 16
[ 2361.260058][T15935] attempt to access beyond end of device
[ 2361.260058][T15935] loop3: rw=2049, want=45104, limit=40427
[ 2361.290472][T22675] erofs: (device loop4): mounted with root inode @ nid 36.
[ 2361.336166][T22677] loop1: detected capacity change from 0 to 16
[ 2361.379797][T22677] erofs: (device loop1): mounted with root inode @ nid 36.
[ 2361.439245][   T26] usb 1-1: Using ep0 maxpacket: 8
[ 2361.569393][   T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[ 2361.589692][   T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024
[ 2361.609385][   T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2361.619235][   T26] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2361.629310][   T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 2361.640314][   T26] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[ 2361.649874][   T26] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58
[ 2361.658759][   T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2361.667599][   T26] usb 1-1: config 0 descriptor??
[ 2361.691093][T22707] loop3: detected capacity change from 0 to 16
[ 2361.710068][T22648] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 2361.720663][T22707] erofs: (device loop3): mounted with root inode @ nid 36.
[ 2361.900765][T22683] loop4: detected capacity change from 0 to 131072
[ 2361.931413][T15336] usb 1-1: USB disconnect, device number 84
[ 2361.938137][T22683] F2FS-fs (loop4): invalid crc value
[ 2361.946849][T22683] F2FS-fs (loop4): Found nat_bits in checkpoint
[ 2361.988957][T22683] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[ 2362.001983][T22683] fscrypt (loop4, inode 8): Error -61 getting encryption context
[ 2362.120488][T22736] loop2: detected capacity change from 0 to 16
[ 2362.160606][T22736] erofs: (device loop2): mounted with root inode @ nid 36.
[ 2362.534403][T22765] loop2: detected capacity change from 0 to 16
[ 2362.579671][T22765] erofs: Unknown parameter 'ÿÿÿÿ01777777777777777777777ÿ18446744073709551615!Z¡[òžÒÿo’Aÿ`i'
[ 2362.657678][T22775] BUG: unable to handle page fault for address: ffffffffff600000
[ 2362.665240][T22775] #PF: supervisor read access in kernel mode
[ 2362.671052][T22775] #PF: error_code(0x0001) - permissions violation
[ 2362.677302][T22775] PGD 6812067 P4D 6812067 PUD 6814067 PMD 6816067 PTE 8000000006809165
[ 2362.685378][T22775] Oops: 0001 [#1] PREEMPT SMP KASAN
[ 2362.690409][T22775] CPU: 0 PID: 22775 Comm: syz-executor.2 Tainted: G        W         5.15.149-syzkaller-00131-g79bd336c7a94 #0
[ 2362.701953][T22775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[ 2362.711860][T22775] RIP: 0010:copy_from_kernel_nofault+0x86/0x2e0
[ 2362.717923][T22775] Code: 48 89 55 d0 0f 85 ea 01 00 00 ff 02 bf 07 00 00 00 4c 89 ee e8 cb 92 d6 ff 49 83 fd 07 76 5c 4d 89 fe 49 83 c5 f8 49 83 c7 08 <49> 8b 1c 24 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80
[ 2362.737365][T22775] RSP: 0018:ffffc90000c6f350 EFLAGS: 00010296
[ 2362.743266][T22775] RAX: 0000000000000002 RBX: 00007ffffffff000 RCX: ffff88812133cf00
[ 2362.751073][T22775] RDX: ffff88812133da90 RSI: 0000000000000008 RDI: 0000000000000007
[ 2362.758889][T22775] RBP: ffffc90000c6f388 R08: ffffffff8199a795 R09: ffffed10242679e1
[ 2362.766701][T22775] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffffff600000
[ 2362.774512][T22775] R13: 0000000000000000 R14: ffffc90000c6f3e8 R15: ffffc90000c6f3f0
[ 2362.782320][T22775] FS:  00007f40d1c576c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 2362.791086][T22775] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2362.797508][T22775] CR2: ffffffffff600000 CR3: 0000000125746000 CR4: 00000000003506b0
[ 2362.805324][T22775] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 2362.813131][T22775] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 2362.820939][T22775] Call Trace:
[ 2362.824066][T22775]  <TASK>
[ 2362.826853][T22775]  ? __die_body+0x62/0xb0
[ 2362.831009][T22775]  ? __die+0x7e/0x90
[ 2362.834742][T22775]  ? page_fault_oops+0x7f9/0xa90
[ 2362.839515][T22775]  ? kernelmode_fixup_or_oops+0x270/0x270
[ 2362.845068][T22775]  ? ext4_has_metadata_csum+0x1f0/0x1f0
[ 2362.850451][T22775]  ? exc_page_fault+0x521/0x830
[ 2362.855146][T22775]  ? asm_exc_page_fault+0x27/0x30
[ 2362.859995][T22775]  ? copy_from_kernel_nofault+0x75/0x2e0
[ 2362.865464][T22775]  ? copy_from_kernel_nofault+0x86/0x2e0
[ 2362.870933][T22775]  bpf_probe_read_compat+0x112/0x180
[ 2362.876054][T22775]  bpf_prog_baa065642a502c00+0x64/0x324
[ 2362.881435][T22775]  bpf_trace_run6+0x18d/0x2c0
[ 2362.885949][T22775]  ? bpf_trace_run5+0x290/0x290
[ 2362.890641][T22775]  ? memset+0x35/0x40
[ 2362.894455][T22775]  __bpf_trace_ext4_ext_remove_space_done+0x4a/0x60
[ 2362.900878][T22775]  ext4_ext_remove_space+0x48b4/0x4a60
[ 2362.906182][T22775]  ? ext4_ext_index_trans_blocks+0x120/0x120
[ 2362.911984][T22775]  ? ext4_es_remove_extent+0x297/0x460
[ 2362.917284][T22775]  ext4_punch_hole+0x794/0xbf0
[ 2362.921881][T22775]  ext4_fallocate+0x30c/0x1f10
[ 2362.926482][T22775]  ? ext4_ext_truncate+0x240/0x240
[ 2362.931424][T22775]  ? fsnotify_perm+0x6a/0x5d0
[ 2362.935943][T22775]  vfs_fallocate+0x492/0x570
[ 2362.940369][T22775]  do_vfs_ioctl+0x2238/0x2a80
[ 2362.944879][T22775]  ? __x64_compat_sys_ioctl+0x90/0x90
[ 2362.950090][T22775]  ? __fsnotify_update_child_dentry_flags+0x2b0/0x2b0
[ 2362.956682][T22775]  ? ioctl_has_perm+0x1f8/0x560
[ 2362.961371][T22775]  ? ioctl_has_perm+0x3f5/0x560
[ 2362.966059][T22775]  ? has_cap_mac_admin+0x3c0/0x3c0
[ 2362.971007][T22775]  ? file_end_write+0x1c0/0x1c0
[ 2362.975693][T22775]  ? selinux_file_ioctl+0x3cc/0x540
[ 2362.980725][T22775]  ? __mutex_lock_slowpath+0x10/0x10
[ 2362.985844][T22775]  ? selinux_file_alloc_security+0x120/0x120
[ 2362.991666][T22775]  ? __fget_files+0x31e/0x380
[ 2362.996177][T22775]  ? security_file_ioctl+0x84/0xb0
[ 2363.001121][T22775]  __se_sys_ioctl+0x99/0x190
[ 2363.005551][T22775]  __x64_sys_ioctl+0x7b/0x90
[ 2363.009977][T22775]  do_syscall_64+0x3d/0xb0
[ 2363.014226][T22775]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 2363.019954][T22775] RIP: 0033:0x7f40d28dcf69
[ 2363.024212][T22775] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2363.043655][T22775] RSP: 002b:00007f40d1c570c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2363.051893][T22775] RAX: ffffffffffffffda RBX: 00007f40d2a13f80 RCX: 00007f40d28dcf69
[ 2363.059707][T22775] RDX: 0000000020000280 RSI: 000000004030582b RDI: 0000000000000006
[ 2363.067517][T22775] RBP: 00007f40d293a6fe R08: 0000000000000000 R09: 0000000000000000
[ 2363.075329][T22775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2363.083140][T22775] R13: 000000000000000b R14: 00007f40d2a13f80 R15: 00007fff0e2cac78
[ 2363.090956][T22775]  </TASK>
[ 2363.093815][T22775] Modules linked in:
[ 2363.097556][T22775] CR2: ffffffffff600000
[ 2363.101555][T22775] ---[ end trace a223a8a23116f894 ]---
[ 2363.101592][T16353] BUG: unable to handle page fault for address: ffffffffff600000
[ 2363.106835][T22775] RIP: 0010:copy_from_kernel_nofault+0x86/0x2e0
[ 2363.114389][T16353] #PF: supervisor read access in kernel mode
[ 2363.120463][T22775] Code: 48 89 55 d0 0f 85 ea 01 00 00 ff 02 bf 07 00 00 00 4c 89 ee e8 cb 92 d6 ff 49 83 fd 07 76 5c 4d 89 fe 49 83 c5 f8 49 83 c7 08 <49> 8b 1c 24 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80
[ 2363.126276][T16353] #PF: error_code(0x0001) - permissions violation
[ 2363.145721][T22775] RSP: 0018:ffffc90000c6f350 EFLAGS: 00010296
[ 2363.151971][T16353] PGD 6812067 P4D 6812067 PUD 6814067 
[ 2363.157872][T22775] RAX: 0000000000000002 RBX: 00007ffffffff000 RCX: ffff88812133cf00
[ 2363.157892][T22775] RDX: ffff88812133da90 RSI: 0000000000000008 RDI: 0000000000000007
[ 2363.163163][T16353] PMD 6816067 PTE 8000000006809165
[ 2363.171064][T22775] RBP: ffffc90000c6f388 R08: ffffffff8199a795 R09: ffffed10242679e1
[ 2363.178872][T16353] 
[ 2363.178880][T16353] Oops: 0001 [#2] PREEMPT SMP KASAN
[ 2363.183819][T22775] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffffff600000
[ 2363.191634][T16353] CPU: 1 PID: 16353 Comm: syz-executor.4 Tainted: G      D W         5.15.149-syzkaller-00131-g79bd336c7a94 #0
[ 2363.193800][T22775] R13: 0000000000000000 R14: ffffc90000c6f3e8 R15: ffffc90000c6f3f0
[ 2363.198838][T16353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[ 2363.206647][T22775] FS:  00007f40d1c576c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 2363.218191][T16353] RIP: 0010:copy_from_kernel_nofault+0x86/0x2e0
[ 2363.226003][T22775] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2363.235897][T16353] Code: 48 89 55 d0 0f 85 ea 01 00 00 ff 02 bf 07 00 00 00 4c 89 ee e8 cb 92 d6 ff 49 83 fd 07 76 5c 4d 89 fe 49 83 c5 f8 49 83 c7 08 <49> 8b 1c 24 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80
[ 2363.244662][T22775] CR2: ffffffffff600000 CR3: 0000000125746000 CR4: 00000000003506b0
[ 2363.250739][T16353] RSP: 0018:ffffc90000f37510 EFLAGS: 00010292
[ 2363.257164][T22775] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 2363.276616][T16353] 
[ 2363.276626][T16353] RAX: 0000000000000000 RBX: 00007ffffffff000 RCX: ffff88810c4b13c0
[ 2363.284417][T22775] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 2363.290318][T16353] RDX: ffff88810c4b1f50 RSI: 0000000000000008 RDI: 0000000000000007
[ 2363.298141][T22775] Kernel panic - not syncing: Fatal exception
[ 2363.300296][T16353] RBP: ffffc90000f37548 R08: ffffffff8199a795 R09: ffffed1021896279
[ 2363.337537][T16353] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffffff600000
[ 2363.345357][T16353] R13: 0000000000000000 R14: ffffc90000f375a8 R15: ffffc90000f375b0
[ 2363.353156][T16353] FS:  0000555556c3c480(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 2363.361921][T16353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2363.368346][T16353] CR2: ffffffffff600000 CR3: 0000000125e3a000 CR4: 00000000003506a0
[ 2363.376245][T16353] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 2363.384055][T16353] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 2363.391871][T16353] Call Trace:
[ 2363.394991][T16353]  <TASK>
[ 2363.397771][T16353]  ? __die_body+0x62/0xb0
[ 2363.401935][T16353]  ? __die+0x7e/0x90
[ 2363.405669][T16353]  ? page_fault_oops+0x7f9/0xa90
[ 2363.410555][T16353]  ? kernelmode_fixup_or_oops+0x270/0x270
[ 2363.416109][T16353]  ? ext4_has_metadata_csum+0x1f0/0x1f0
[ 2363.421490][T16353]  ? exc_page_fault+0x521/0x830
[ 2363.426186][T16353]  ? asm_exc_page_fault+0x27/0x30
[ 2363.431038][T16353]  ? copy_from_kernel_nofault+0x75/0x2e0
[ 2363.436501][T16353]  ? copy_from_kernel_nofault+0x86/0x2e0
[ 2363.441974][T16353]  bpf_probe_read_compat+0x112/0x180
[ 2363.447105][T16353]  bpf_prog_baa065642a502c00+0x64/0x324
[ 2363.452475][T16353]  bpf_trace_run6+0x18d/0x2c0
[ 2363.456988][T16353]  ? bpf_trace_run5+0x290/0x290
[ 2363.461677][T16353]  ? ext4_ext_check_inode+0x80/0x80
[ 2363.466707][T16353]  __bpf_trace_ext4_ext_remove_space_done+0x4a/0x60
[ 2363.473133][T16353]  ext4_ext_remove_space+0x48b4/0x4a60
[ 2363.478437][T16353]  ? ext4_ext_index_trans_blocks+0x120/0x120
[ 2363.484239][T16353]  ? ext4_es_remove_extent+0x297/0x460
[ 2363.489536][T16353]  ? ext4_es_lookup_extent+0x940/0x940
[ 2363.494834][T16353]  ext4_ext_truncate+0x19a/0x240
[ 2363.499602][T16353]  ext4_truncate+0x96c/0xfa0
[ 2363.504034][T16353]  ? __ext4_mark_inode_dirty+0x7a0/0x7a0
[ 2363.509498][T16353]  ? __kasan_check_read+0x11/0x20
[ 2363.514363][T16353]  ? ext4_inode_is_fast_symlink+0x322/0x3d0
[ 2363.520085][T16353]  ? ext4_evict_inode+0xb8d/0x14e0
[ 2363.525034][T16353]  ext4_evict_inode+0xcee/0x14e0
[ 2363.529809][T16353]  ? _raw_spin_unlock+0x4d/0x70
[ 2363.534498][T16353]  ? ext4_inode_is_fast_symlink+0x3d0/0x3d0
[ 2363.540342][T16353]  ? _raw_spin_unlock+0x4d/0x70
[ 2363.545034][T16353]  ? inode_io_list_del+0x18b/0x1a0
[ 2363.549974][T16353]  ? ext4_inode_is_fast_symlink+0x3d0/0x3d0
[ 2363.555702][T16353]  evict+0x2a3/0x630
[ 2363.559451][T16353]  iput+0x63b/0x7e0
[ 2363.563080][T16353]  vfs_rmdir+0x359/0x470
[ 2363.567163][T16353]  do_rmdir+0x3ab/0x630
[ 2363.571219][T16353]  ? d_delete_notify+0x160/0x160
[ 2363.575930][T16353]  __x64_sys_unlinkat+0xdf/0xf0
[ 2363.580612][T16353]  do_syscall_64+0x3d/0xb0
[ 2363.584865][T16353]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 2363.590595][T16353] RIP: 0033:0x7f36bf842747
[ 2363.594846][T16353] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2363.614342][T16353] RSP: 002b:00007ffe91548298 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[ 2363.622534][T16353] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f36bf842747
[ 2363.630429][T16353] RDX: 0000000000000200 RSI: 00007ffe91549400 RDI: 00000000ffffff9c
[ 2363.638242][T16353] RBP: 00007f36bf89f636 R08: 0000000000000000 R09: 0000000000000000
[ 2363.646052][T16353] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffe91549400
[ 2363.653866][T16353] R13: 00007f36bf89f636 R14: 0000000000240b42 R15: 0000000000000004
[ 2363.661684][T16353]  </TASK>
[ 2363.664541][T16353] Modules linked in:
[ 2363.668276][T16353] CR2: ffffffffff600000
[ 2363.672269][T16353] ---[ end trace a223a8a23116f895 ]---
[ 2363.677558][T16353] RIP: 0010:copy_from_kernel_nofault+0x86/0x2e0
[ 2363.683635][T16353] Code: 48 89 55 d0 0f 85 ea 01 00 00 ff 02 bf 07 00 00 00 4c 89 ee e8 cb 92 d6 ff 49 83 fd 07 76 5c 4d 89 fe 49 83 c5 f8 49 83 c7 08 <49> 8b 1c 24 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80
[ 2363.703079][T16353] RSP: 0018:ffffc90000c6f350 EFLAGS: 00010296
[ 2363.709064][T16353] RAX: 0000000000000002 RBX: 00007ffffffff000 RCX: ffff88812133cf00
[ 2363.716875][T16353] RDX: ffff88812133da90 RSI: 0000000000000008 RDI: 0000000000000007
[ 2363.724690][T16353] RBP: ffffc90000c6f388 R08: ffffffff8199a795 R09: ffffed10242679e1
[ 2363.732587][T16353] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffffff600000
[ 2363.740396][T16353] R13: 0000000000000000 R14: ffffc90000c6f3e8 R15: ffffc90000c6f3f0
[ 2363.748207][T16353] FS:  0000555556c3c480(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 2363.756976][T16353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2363.763400][T16353] CR2: ffffffffff600000 CR3: 0000000125e3a000 CR4: 00000000003506a0
[ 2363.771209][T16353] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 2363.779018][T16353] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 2364.501184][T22775] Shutting down cpus with NMI
[ 2364.506058][T22775] Kernel Offset: disabled
[ 2364.510189][T22775] Rebooting in 86400 seconds..