last executing test programs: 3m15.04615113s ago: executing program 0 (id=594): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xe}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000003}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 3m14.795515477s ago: executing program 0 (id=596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xcb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 3m14.629091401s ago: executing program 0 (id=599): r0 = socket$kcm(0x10, 0x2, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000700440002005817d30461bc24eeb556a705251e618214000000003b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4040800) 3m14.419103797s ago: executing program 0 (id=602): syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000040)='./file0\x00', 0x1008408, &(0x7f0000000300)=ANY=[@ANYBLOB='nojoliet,dmode=0x000000007fffffff,dmode=0x0000000000000009,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,hide,nocompress,utf8,norock,overriderockperm,mode=0xffffffffffffffff,cruft,map=off,iocharset=macinuit,fund=BPRM_CHECK,\x00', @ANYRESHEX=0x0, @ANYBLOB="e03f9c0ce2afb796026bdd047770b0e3aeaa5f915c48e1dae1b58760633e809b40607e492079cc84baa304eb066115bef7120fde299b69babc025988054c40d35d919704678e238e3eb3efd893a8b4589ce7011b064cf613513f48c4f1b78a10e4e5364de7b013adc30eed3d7e73dca89f46c2d4f7be69818b5937e0d4547295fd8a2ab8df6b88967c5b", @ANYRES64, @ANYRESOCT, @ANYRESOCT, @ANYRES64, @ANYRESHEX, @ANYRESHEX], 0xff, 0x5ac, &(0x7f0000002940)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) 3m13.867995222s ago: executing program 0 (id=608): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3m13.244288908s ago: executing program 0 (id=614): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x6, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f00000008c0)="939e00000000", 0x0, 0xffffffff, 0x40, 0x2, 0x0}) 3m12.888839957s ago: executing program 32 (id=614): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x6, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f00000008c0)="939e00000000", 0x0, 0xffffffff, 0x40, 0x2, 0x0}) 1m20.288329656s ago: executing program 1 (id=1652): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000080)=""/152) mincore(&(0x7f0000efe000/0x11000)=nil, 0x11000, 0x0) 1m19.990055323s ago: executing program 1 (id=1656): r0 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, 0x0}) 1m19.72280509s ago: executing program 1 (id=1660): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='reno', 0x4) connect(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3, 0x4, {0xa, 0x4e22, 0xffff, @local, 0x31}}}, 0x80) 1m19.429393468s ago: executing program 1 (id=1663): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000900)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@test_dummy_encryption}, {@init_itable}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000400)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m18.5834327s ago: executing program 1 (id=1669): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x72}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r1}, 0xc) 1m18.023145055s ago: executing program 1 (id=1677): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f00000020c0)='smaps\x00') mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) 1m17.549893607s ago: executing program 33 (id=1677): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f00000020c0)='smaps\x00') mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) 1m8.323700188s ago: executing program 3 (id=1724): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") setresuid(0x0, 0xee00, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 1m8.136169763s ago: executing program 2 (id=1726): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000002380)=ANY=[@ANYBLOB="1802000000000000000000000d0000008500000053000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000120000850000007100000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0bd547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m7.888173099s ago: executing program 3 (id=1727): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200), 0x0, 0x0) 1m7.831102441s ago: executing program 2 (id=1728): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x9a}, @remote}, "001863714ab99043"}}}}}, 0x0) 1m4.952404986s ago: executing program 2 (id=1737): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='pagemap\x00') lseek(r0, 0x1, 0x3) 1m4.951711716s ago: executing program 3 (id=1738): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x44, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000680)="87", &(0x7f0000000340)=@udp6, 0x2}, 0x20) 1m4.756347781s ago: executing program 2 (id=1730): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000900)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@test_dummy_encryption}, {@init_itable}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000400)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m4.756270441s ago: executing program 3 (id=1731): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 1m4.467364048s ago: executing program 3 (id=1733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x20b, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0) 1m4.063675299s ago: executing program 2 (id=1739): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6500eae7288f7590af37bbbba40255e6b18cee5cf400aecbb8d84f2190279e322318a8fb04261aaff9e200622569b8e5549cd363def00c69d1825c7b06a0d352ba09169f15ad8081c865879b1c05656746eeee5aa2db0204aff28f4711861df602971bfffb", 0x65) 1m3.957833802s ago: executing program 3 (id=1741): memfd_secret(0x80000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) 1m3.315344168s ago: executing program 34 (id=1741): memfd_secret(0x80000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) 1m3.298587499s ago: executing program 2 (id=1745): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40044103, &(0x7f0000000080)) 1m2.583653457s ago: executing program 35 (id=1745): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40044103, &(0x7f0000000080)) 1m0.627514509s ago: executing program 4 (id=1755): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x48, &(0x7f0000009b00)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x30010000, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 1m0.494178582s ago: executing program 4 (id=1756): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = io_uring_setup(0x4143, &(0x7f0000000180)={0x0, 0xfffffffa, 0x40, 0x10040003, 0x6f}) sendmmsg$unix(r0, &(0x7f000000f500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x4c0e0}}], 0x1, 0x0) 1m0.275897518s ago: executing program 4 (id=1757): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000001c0)='./file2\x00', 0x800c08, &(0x7f0000000bc0)=ANY=[@ANYBLOB="2c756d61736b3d300004000000000000000000", @ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRES8=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRES8=0x0, @ANYBLOB="c49ecfdd8711048bea9eb55574810b5cbc454ccd5a63c7941ba393a86e5b7a8fdcf7b75e9bd7459f7e129fadabeef1e9b084a7568c9ce90014069121b0700a4f948941c59d1e8e3f80ffa601a20f979dd6e1fe150ba283f14999be8b6fe530f67dbac2443da65608409abd01602980fb5227c272180171dfa09978bf40bd650d5c4a54e6cecfcfd2e41e9ec85c6a274e668e7443cdd2c3cba6972ccffb41487a8202816ac3ba65bb5cb3d1323194c102f39aae52e46500849660e484f39210872d958d69f61e1311c51a34b64f81cb8a5cc30bf568185b0bb1f0d438777c833a9b362a10cace728b508eb7642244"], 0x21, 0x62b1, &(0x7f0000007880)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) 59.296365763s ago: executing program 4 (id=1761): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000900)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@test_dummy_encryption}, {@init_itable}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000400)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 58.65210834s ago: executing program 4 (id=1764): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 57.744060704s ago: executing program 4 (id=1768): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd27, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000) 57.372752064s ago: executing program 36 (id=1768): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd27, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000) 3.47450484s ago: executing program 5 (id=2099): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000004000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.125995209s ago: executing program 8 (id=2105): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x52004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 2.760347488s ago: executing program 8 (id=2107): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2.591256484s ago: executing program 8 (id=2109): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'pim6reg\x00', {0x2, 0x0, @loopback}}) socket$inet6(0xa, 0x4, 0x5) 1.95632506s ago: executing program 8 (id=2113): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10001, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}, {@noextend}]}}) 1.95614834s ago: executing program 7 (id=2114): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet6_tcp_buf(r0, 0x6, 0x8, 0x0, &(0x7f0000001040)) 1.824244773s ago: executing program 6 (id=2115): bpf$ENABLE_STATS(0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x61, 0xf3, 0x7ff08005}]}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) 1.800371613s ago: executing program 8 (id=2116): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000002000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1b}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r0}, 0xc) 1.734312566s ago: executing program 7 (id=2117): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=', @ANYRESOCT]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) 1.57692224s ago: executing program 7 (id=2118): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 1.5461535s ago: executing program 8 (id=2119): syz_mount_image$fuse(&(0x7f0000000000), 0x0, 0x400a8, 0x0, 0x5, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x82, &(0x7f00000006c0)=ANY=[@ANYBLOB='test_dummy_encryption=v1,checkpoint=disable,noacl,fsync_mode=strict,jqfmt=vfsold,noquota,fsync_mode=posix,usrjquota=ext4\x00,resuid=', @ANYRES64, @ANYRES32], 0x1, 0x105b3, &(0x7f0000016c80)="$eJzs3MtuG2UbB/DH7ZeevlIi1AOsGAkhxRK24iSNQEIoQCuoRKqIw4IVOLZjubU9Uewc6IpFu4JLYIuEUHdcA5veRsUCiRUSuyKQZyYogSwoceS2+f2k0X/m9bzPvOPO5vFUCeDYmk5++7UUF+JsRJyMiPMR2X6p2DJLebwYES9HxIk9W6kY/2vgVESci4gLo+J5zVLx0eLvDx99+9KNN7/6/mG59vN330zuroFJezUieuv5/nYvz7Sd561ivL7VybK3sFVk/kHvdnGc5rndWs0qbNd3z6tnOd/Oz0/XNwejXOvWG6Nsd9ay8fV+fsHBVnu3TjbhVn0jO262VrPsDNIs23fyde0UeWcwzOs0i3pfZOVjONzNfLy108rvZ/12lo3+sBjP66bN1s4ot4osLheNtNvM1rH6n7/mJ94Hnf7mTrLV2hh00n5ytVp7vVpbrNQ20mZr2Fqo1HvNxYVkpt0dnVYZtuq9pXaatrutaiPtlZOZdqNRqdWSmWut1U69n9Rq1fnqbOVqudh7LXnv5idJt5nMjPKdTn9z2OkOkrV0I8lnlJO56vwb5eSVWvLR8kqy8uH168srH3927dObby/feLc46R/LSmbmZufmKrXZylyt7P4Po3S46Rx3HiCAx6b/ByZB/6//j739b5w4lv2v/h8OwQMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBs/TT1w/vZznR+/P9i/Lli6IWIuBIRlyPiUkT8cYCTcWpfzYsRUSr2Dzp/6m9r+LEUWYXRnNPFdi4ilort0fNH/S0AAADAs+v+g7v39rbWbz3O5C/Hvx6OyomDBosfbc6M6yLZTz7/G1e1i1mxnTFVu7RbciwuR8TU9C9jqnZl9A90/vMxVftXTu6LM3uilMeBDwwAAPB0298JjK17AwAA4Inz9aQXwGRk72uL/4tfvAs+nUfxQvDsviMAAADgKVSa9AIAAACAI5f1//7+HwAAADzb7j+4e2/SawAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JOde8dNI4jjAPwHsoG8FBTxuApVlJKCQ+QIKVPakn0bd5zBEuIcuPMRLLDYHWMvhoplQfj7pGUewE8DEsXMsAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw6R6y6fhufnN7aM5y9ep6tUdcRex7CgAAADiaRTYd55Vu0f6W+n+krl8RMYyIQUT0Y/f0vRWfS5m9iGik+q7XZ1tjuI/IE9bvaafra0T8SdfTz2N/CwAAAHC55rPRJKK1ruYPvzc1PoC0aNOpKi9f8vlUVVovD/tfUVr/JbISg4jIuo8VpQ0jovn9b2rV8vtrlYrOm6JRFM06RgEAANSrPBOobPYGAADA2fl36gFwGvl+bfovftoLbhdF2hD8UmoBAAAA52v7bvuNRr3jAAAAAE4gn/+/O/8vrQo4/w8AAAAuQ3H+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMe0yKbj+Ww0OTRnuTpMNZ8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhmf85RKITBKIzevFH3FNz/suRCbG1tzoH8fGQoAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCdsVZeV7wbR8dYd74dM8mvu41/HzS2Hjf2JJ/55E8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA42Z+zEwyBIAiD/R9eYEiL+YclDRqDCFWw8LHDPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC81ed6+d7xaxxJ/v1tTEn2kWTuqLF01Fi70Ni6MJ6+BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJMdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirsz72JAkEYx+F39+64W7jorgTzxY8aTIxES/ADhIWtwQJsyMTIdLERbUFBRzAzkg18nuT3HyaZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhP5yf3v4+Hj4jIIx+t/4+fEfEV+aZpht/XmW1Ph/rnNqe7/TjNv5h0iogoInvtRwAAWlLem8ZyVS26qb3UfuogtZzV1bzNRwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBh545Vm4rCAACfJE20OjlaQQQHXWxsYjVCFodCd0HQLbSxFFOVNENbuvQJRCdXX8Fu+gq+gOCgBQeHDgougihJbtITDJIi3Bvq98F/7587nHtOhsB//3MDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMdyuBfODvJcCGFu5ijvev91d2Xc+e2zD3OD+HLnzcV4zO4QxRDCw/VW83qKa5l2m9s7jxqtVrMtkUgkwyTrXyYAAE6aYhLduv5TcX+5ey1XD+HXq9H6/0qUh7/U/59fnr8wiJ9b7zrxveL6fyG1FU6/cmfjaXlze+fa+kZjrbnWfFytVhZvLt64fatS7j0rKXtiAgAAwL8pJRHX//n6n/3/M1EeJqz/7y09uB/fq6D+H+uo6Zf1TAAAAP5v5y59/5Ybcz1XKoWtRqfTXugfh58r/WMGUz22U0nE9X+hnvWsAAAAgDQc7uVG+v+rUR4m7P/Pv949iMcshBBmk/7//MqT1mp6y5lqabxOnPUaAQAAyNZsEnH/v9jb/58fbnnIhxCuXu7nyd8ATlT/f3xxd+Sl9Xj/fzW9JU6lfK3/ffTOtRBmalnPCAAAgJPsdBLdYv+guL/c/vF8qWT/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/GbHjlEaCKIwAG92s1qJASu18gKinVXAQhAbDyEKgicQQTyA2Fp6B0vvkFrBxsIyhTeQN7ujkiZgsavk+2DyHmHIvEya/AsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHNN97/7Kl5GTV+27z1/XJ1EfZmp4f1+fTNW9IMuh/6HBnt9TwAAAMAiqHK+L4rirX48jFqOU/6v857I/A8rTZ/z/Gzuz/Xp7nUj5//r463Lr4NGzTnxoWfnF6c7nX3Dv2917o5huvn07KVKP0h5dLM2rdN9Dm4nk4Ol1C53MS0A8BvbubZN/j8UdbfPwQBYGMN2FT/yfzXudyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALnwGAAD//+gHXZc=") open(&(0x7f00000000c0)='./file2\x00', 0x109242, 0x9c) 1.321667896s ago: executing program 5 (id=2120): unshare(0x24060400) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) close_range(r0, r0, 0x6) 1.268415748s ago: executing program 7 (id=2121): mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f00000005c0)={@multicast1=0xe0000300, @local}, 0x8) 1.207809949s ago: executing program 6 (id=2122): setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) shutdown(r0, 0x0) 1.118075482s ago: executing program 7 (id=2123): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x2c, r1, 0x54d2b226a8e856d5, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c081}, 0x4004810) 1.008324254s ago: executing program 5 (id=2124): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0xfffffffd, 0xffffffff, 0x2}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000280)=""/232) 970.831826ms ago: executing program 6 (id=2125): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2818082, &(0x7f00000005c0)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c73686f72746e616d653d77696e6e742c726f6469722c73686f72746e616d653d77696e6e742c636f6465706167653d313235312c666d61736b3d303030300000000030303030303030303030303004000000646531215a670233c0116275672c756e080000006174653d302c6e6f7e756d7461696c3d302d757466383d312c73686f72746e616d653d6c6f7765722c7511695f786c6174653d302c756e695f786c6174653d312c757466383d312c00"], 0x7f, 0x2bd, &(0x7f0000000240)="$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") creat(&(0x7f00000000c0)='./file0\x00', 0x0) rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 902.250317ms ago: executing program 7 (id=2126): r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xd, 0x1, 0x1, 0x0, 0x7}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0xfffffffd, 0x80004005, 0x1, {0x1, @win={{0x0, 0xfff}, 0x0, 0xfffffff9, 0x0, 0x0, 0x0}}}) 821.660159ms ago: executing program 5 (id=2127): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) 468.263759ms ago: executing program 6 (id=2128): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 340.643152ms ago: executing program 5 (id=2129): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x16810, 0x0, 0x20, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@uid={'uid', 0x3d, 0xffffffffffffffff}}]}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) 194.507306ms ago: executing program 6 (id=2130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c000280140003000400110000000000020007116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 275.011µs ago: executing program 5 (id=2131): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_auto}]}) 0s ago: executing program 6 (id=2132): mlockall(0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0x5c}, [@ldst={0x6, 0x0, 0x6, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x46}, 0x48) kernel console output (not intermixed with test programs): tected capacity change from 0 to 256 [ 185.697524][ T8014] FAT-fs (loop1): Directory bread(block 64) failed [ 185.746178][ T8014] FAT-fs (loop1): Directory bread(block 65) failed [ 185.791060][ T8014] FAT-fs (loop1): Directory bread(block 66) failed [ 185.797762][ T8014] FAT-fs (loop1): Directory bread(block 67) failed [ 185.837454][ T8014] FAT-fs (loop1): Directory bread(block 68) failed [ 185.853453][ T8014] FAT-fs (loop1): Directory bread(block 69) failed [ 185.881198][ T8014] FAT-fs (loop1): Directory bread(block 70) failed [ 185.918437][ T8014] FAT-fs (loop1): Directory bread(block 71) failed [ 185.943985][ T8014] FAT-fs (loop1): Directory bread(block 72) failed [ 185.966186][ T8014] FAT-fs (loop1): Directory bread(block 73) failed [ 185.984663][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.861'. [ 186.580989][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.872'. [ 187.152889][ T8048] loop1: detected capacity change from 0 to 8192 [ 187.245367][ T8048] loop1: p1 < > p3 p4 < > [ 187.281784][ T8048] loop1: p3 size 218103808 extends beyond EOD, truncated [ 187.614538][ T8063] loop2: detected capacity change from 0 to 2048 [ 187.700084][ T8069] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 187.738787][ T5768] udevd[5768]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 187.756764][ T5767] udevd[5767]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 187.782499][ T5764] udevd[5764]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 187.815197][ T8063] syz.2.884: attempt to access beyond end of device [ 187.815197][ T8063] loop2: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 187.866818][ T8063] NILFS error (device loop2): nilfs_readdir: bad page in #2 [ 187.916788][ T8072] loop1: detected capacity change from 0 to 256 [ 187.951376][ T8063] Remounting filesystem read-only [ 188.150731][ T8076] loop3: detected capacity change from 0 to 256 [ 188.226924][ T8076] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 188.636862][ T8088] loop2: detected capacity change from 0 to 4096 [ 188.715237][ T8093] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 188.768973][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.898'. [ 188.842385][ T8088] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 2307 already freed [ 188.882324][ T8088] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean [ 188.940020][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.901'. [ 189.107361][ T8101] loop1: detected capacity change from 0 to 1024 [ 189.451495][ T8109] loop2: detected capacity change from 0 to 512 [ 189.460187][ T8109] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 189.537775][ T8109] EXT4-fs (loop2): 1 truncate cleaned up [ 189.592362][ T8109] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.671295][ T8109] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.2.906: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 189.794509][ T8109] EXT4-fs error (device loop2) in ext4_delete_entry:2800: Corrupt filesystem [ 189.842660][ T8109] EXT4-fs warning (device loop2): ext4_rename_delete:3778: inode #2: comm syz.2.906: Deleting old file: nlink 5, error=-117 [ 189.873104][ T8097] loop4: detected capacity change from 0 to 32768 [ 189.904006][ T8097] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop4 scanned by syz.4.900 (8097) [ 189.953188][ T8097] BTRFS info (device loop4): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 190.006262][ T8097] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 190.017889][ T8097] BTRFS info (device loop4): using free space tree [ 190.029735][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.201560][ T8097] BTRFS info (device loop4): enabling ssd optimizations [ 190.266269][ T8097] BTRFS info (device loop4): auto enabling async discard [ 190.346585][ T8137] loop1: detected capacity change from 0 to 4096 [ 190.420418][ T8145] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.586602][ T8137] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 2307 already freed [ 190.602860][ T8137] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean [ 190.674438][ T7387] BTRFS info (device loop4): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 191.016291][ T8156] genirq: Flags mismatch irq 2. 00000000 (das16m1) vs. 00000000 (pcl812) [ 191.561414][ T8170] loop1: detected capacity change from 0 to 512 [ 191.593343][ T8170] EXT4-fs: Ignoring removed nobh option [ 191.633281][ T8170] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 191.666813][ T8170] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 191.681881][ T8170] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #13: comm syz.1.925: inode has both inline data and extents flags [ 191.713612][ T8175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.926'. [ 191.734633][ T8175] block nbd0: not configured, cannot reconfigure [ 191.742561][ T8178] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 191.764963][ T8170] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.925: couldn't read orphan inode 13 (err -117) [ 191.794913][ T8178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.817976][ T8170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.908376][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.948797][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.423211][ T8194] set_capacity_and_notify: 1 callbacks suppressed [ 192.423229][ T8194] loop3: detected capacity change from 0 to 4096 [ 192.495723][ T8199] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 192.570320][ T8194] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 2307 already freed [ 192.588304][ T8194] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean [ 193.826563][ T8228] loop3: detected capacity change from 0 to 1024 [ 193.845255][ T8228] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 193.890663][ T8232] loop2: detected capacity change from 0 to 512 [ 193.899611][ T8232] EXT4-fs: Ignoring removed mblk_io_submit option [ 193.951515][ T8232] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 194.019839][ T8205] loop1: detected capacity change from 0 to 40427 [ 194.055254][ T8232] EXT4-fs (loop2): 1 truncate cleaned up [ 194.103940][ T8205] F2FS-fs (loop1): invalid crc value [ 194.112217][ T8232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.145855][ T8205] F2FS-fs (loop1): Found nat_bits in checkpoint [ 194.232649][ T8232] EXT4-fs error (device loop2): __ext4_expand_extra_isize:5960: inode #12: comm syz.2.949: bad extra_isize 62 (inode size 256) [ 194.320114][ T8205] F2FS-fs (loop1): Start checkpoint disabled! [ 194.420237][ T8205] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 194.433987][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.471110][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.550508][ T8245] netlink: 'syz.4.954': attribute type 49 has an invalid length. [ 194.796985][ T8253] loop4: detected capacity change from 0 to 128 [ 194.845647][ T8253] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 194.872579][ T8253] hpfs: filesystem error: improperly stopped [ 194.889087][ T8253] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 194.911326][ T8253] hpfs: You really don't want any checks? You are crazy... [ 194.919092][ T8253] hpfs: hpfs_map_sector(): read error [ 194.921131][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 194.944966][ T3424] kworker/u4:9: attempt to access beyond end of device [ 194.944966][ T3424] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 194.971778][ T8253] hpfs: code page support is disabled [ 194.978256][ T8253] hpfs: hpfs_map_4sectors(): unaligned read [ 194.987647][ T3424] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 194.995966][ T8253] hpfs: hpfs_map_4sectors(): unaligned read [ 195.002836][ T8253] hpfs: filesystem error: unable to find root dir [ 195.010567][ T3424] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 195.141431][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.163119][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.191037][ T8] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 195.205733][ T8257] netlink: 40 bytes leftover after parsing attributes in process `syz.3.960'. [ 195.224398][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.241811][ T8] usb 3-1: config 0 descriptor?? [ 195.437671][ T8261] loop3: detected capacity change from 0 to 1024 [ 195.736208][ T8] hid-led 0003:27B8:01ED.0010: ignoring exceeding usage max [ 195.918369][ T8] hid-led: probe of 0003:27B8:01ED.0010 failed with error -71 [ 195.967748][ T8] usb 3-1: USB disconnect, device number 8 [ 196.178120][ T8280] loop1: detected capacity change from 0 to 128 [ 196.189334][ T8280] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 196.227473][ T28] audit: type=1800 audit(1786044910.778:13): pid=8280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.971" name="file2" dev="loop1" ino=95 res=0 errno=0 [ 196.335204][ T8284] netlink: 48 bytes leftover after parsing attributes in process `syz.1.972'. [ 196.713927][ T8290] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.975'. [ 196.868032][ T8286] loop1: detected capacity change from 0 to 32768 [ 196.905548][ T8286] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 196.999616][ T8286] XFS (loop1): Ending clean mount [ 197.071765][ T8286] XFS (loop1): Quotacheck needed: Please wait. [ 197.182584][ T8286] XFS (loop1): Quotacheck: Done. [ 197.335860][ T5776] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 197.391523][ T8306] loop3: detected capacity change from 0 to 4096 [ 197.511575][ T8306] NILFS (loop3): invalid segment: Checksum error in segment payload [ 197.519679][ T8306] NILFS (loop3): trying rollback from an earlier position [ 197.645411][ T8306] NILFS (loop3): recovery complete [ 197.678338][ T8311] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 197.776221][ T8315] loop2: detected capacity change from 0 to 1024 [ 198.000956][ T5832] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 198.024548][ T8318] loop1: detected capacity change from 0 to 512 [ 198.044948][ T8318] EXT4-fs: Ignoring removed nomblk_io_submit option [ 198.075864][ T8318] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 198.113938][ T8318] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 198.141296][ T8318] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 198.185326][ T8320] loop3: detected capacity change from 0 to 4096 [ 198.195153][ T8318] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 198.198218][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 198.216349][ T5832] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 198.223475][ T8320] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 198.230749][ T5832] usb 5-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 198.247595][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.255725][ T8318] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 198.263319][ T5832] usb 5-1: config 0 descriptor?? [ 198.269532][ T8314] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 198.301329][ T5781] Bluetooth: hci2: command tx timeout [ 198.311305][ T8318] EXT4-fs (loop1): orphan cleanup on readonly fs [ 198.374074][ T8318] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.982: bg 0: block 34: padding at end of block bitmap is not set [ 198.453628][ T8318] Quota error (device loop1): write_blk: dquota write failed [ 198.504140][ T8318] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 198.560025][ T8318] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.982: Failed to acquire dquot type 1 [ 198.599245][ T8318] EXT4-fs (loop1): 1 truncate cleaned up [ 198.613064][ T8318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 198.720044][ T5832] waltop 0003:172F:0501.0011: hidraw0: USB HID v0.00 Device [HID 172f:0501] on usb-dummy_hcd.4-1/input0 [ 198.759826][ T8328] netlink: 20 bytes leftover after parsing attributes in process `syz.3.989'. [ 198.798857][ T8318] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 198.811148][ T8328] netlink: 'syz.3.989': attribute type 4 has an invalid length. [ 198.834318][ T8318] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 198.906115][ T5832] usb 5-1: USB disconnect, device number 2 [ 199.035975][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.057426][ T8334] loop3: detected capacity change from 0 to 128 [ 199.077418][ T8334] FAT-fs (loop3): bogus number of reserved sectors [ 199.084639][ T8334] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 199.129996][ T8334] FAT-fs (loop3): Can't find a valid FAT filesystem [ 199.573952][ T8344] loop2: detected capacity change from 0 to 512 [ 199.583469][ T8344] EXT4-fs: Ignoring removed mblk_io_submit option [ 199.604737][ T8344] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 199.651835][ T8344] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=885ec129, mo2=0006] [ 199.679956][ T8344] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.997: Invalid inode bitmap blk 4 in block_group 0 [ 199.747882][ T8344] EXT4-fs (loop2): Remounting filesystem read-only [ 199.782639][ T8344] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.005132][ T8344] EXT4-fs: Ignoring removed i_version option [ 200.020893][ T8344] EXT4-fs: old and new quota format mixing [ 200.083182][ T8334] loop3: detected capacity change from 0 to 32768 [ 200.149203][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.220058][ T8334] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 200.408182][ T8371] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 200.435493][ T8373] loop4: detected capacity change from 0 to 128 [ 200.526508][ T8334] XFS (loop3): Ending clean mount [ 200.731945][ T5773] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 201.373974][ T8393] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1010'. [ 201.399897][ T8393] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 201.419451][ T8395] loop4: detected capacity change from 0 to 1024 [ 201.919906][ T8409] loop1: detected capacity change from 0 to 64 [ 202.005114][ T8409] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 202.057823][ T8409] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 202.248076][ T8420] loop3: detected capacity change from 0 to 256 [ 202.280964][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 202.304382][ T8420] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 202.461171][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 202.473673][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 202.499023][ T9] usb 5-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 202.530134][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.544852][ T9] usb 5-1: config 0 descriptor?? [ 202.898004][ T8433] loop3: detected capacity change from 0 to 512 [ 202.913070][ T8433] EXT4-fs: Ignoring removed nobh option [ 202.977549][ T9] uclogic 0003:28BD:0074.0012: interface is invalid, ignoring [ 202.995660][ T8433] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 203.016220][ T8433] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 203.080720][ T8433] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #13: comm syz.3.1034: inode has both inline data and extents flags [ 203.127247][ T8433] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1034: couldn't read orphan inode 13 (err -117) [ 203.175947][ T8433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.204518][ T5832] usb 5-1: USB disconnect, device number 3 [ 203.374563][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.539704][ T8443] loop3: detected capacity change from 0 to 512 [ 203.767534][ T8431] loop1: detected capacity change from 0 to 40427 [ 203.824851][ T8431] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 203.839884][ T8431] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 203.903758][ T8450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'. [ 203.929672][ T8431] F2FS-fs (loop1): Found nat_bits in checkpoint [ 204.168388][ T8431] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 204.202729][ T8431] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 205.593450][ T8464] loop2: detected capacity change from 0 to 40427 [ 205.629519][ T8487] ALSA: seq fatal error: cannot create timer (-22) [ 205.637038][ T8464] F2FS-fs (loop2): invalid crc value [ 205.648479][ T8485] netlink: 'syz.3.1055': attribute type 1 has an invalid length. [ 205.670310][ T8464] F2FS-fs (loop2): Found nat_bits in checkpoint [ 205.883529][ T8464] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 206.467535][ T8483] loop1: detected capacity change from 0 to 32768 [ 206.544504][ T8483] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 206.718589][ T8483] XFS (loop1): Ending clean mount [ 206.781561][ T5777] Bluetooth: hci0: command 0x0406 tx timeout [ 206.789154][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 206.796964][ T5777] Bluetooth: hci1: command 0x0406 tx timeout [ 206.922544][ T5776] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 207.033472][ T8522] loop3: detected capacity change from 0 to 64 [ 207.159605][ T8522] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 207.761412][ T8541] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1075'. [ 207.787375][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1075'. [ 207.803843][ T8543] loop4: detected capacity change from 0 to 512 [ 207.852412][ T8539] loop3: detected capacity change from 0 to 4096 [ 207.880342][ T8543] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.1076: dx entry: limit 1024 != root limit 124 [ 207.978650][ T8543] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1076: Corrupt directory, running e2fsck is recommended [ 208.060475][ T8543] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 208.093475][ T8539] ntfs: volume version 3.1. [ 208.115066][ T8543] EXT4-fs error (device loop4): ext4_iget_extra_inode:4740: inode #15: comm syz.4.1076: corrupted in-inode xattr: invalid ea_ino [ 208.164014][ T8543] EXT4-fs (loop4): Remounting filesystem read-only [ 208.175446][ T8543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.229259][ T8543] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.1076: dx entry: limit 1024 != root limit 124 [ 208.265757][ T8543] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1076: Corrupt directory, running e2fsck is recommended [ 208.364246][ T7387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.910378][ T8545] loop1: detected capacity change from 0 to 40427 [ 208.968675][ T8545] F2FS-fs (loop1): Wrong segment_count / block_count (64 > 16384) [ 208.991098][ T8545] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 209.078646][ T8545] F2FS-fs (loop1): Found nat_bits in checkpoint [ 209.223660][ T8545] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 209.246619][ T8545] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 209.398922][ T5776] syz-executor: attempt to access beyond end of device [ 209.398922][ T5776] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 209.432559][ T8574] @ÿ: renamed from veth0_vlan (while UP) [ 209.455393][ T5776] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 210.047728][ T8562] loop2: detected capacity change from 0 to 32768 [ 210.191217][ T8562] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 210.481402][ T8562] XFS (loop2): Ending clean mount [ 210.565424][ T8598] scsi_nl_rcv_msg: discarding partial skb [ 210.695881][ T5780] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 211.355185][ T8616] loop1: detected capacity change from 0 to 512 [ 211.448260][ T8616] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.1104: corrupted in-inode xattr: invalid ea_ino [ 211.551362][ T8616] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1104: couldn't read orphan inode 15 (err -117) [ 211.597747][ T8616] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.656752][ T8616] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.1104: bg 0: block 376: padding at end of block bitmap is not set [ 211.715497][ T8616] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 211.833434][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.946942][ T8608] loop3: detected capacity change from 0 to 32768 [ 212.011866][ T8629] loop2: detected capacity change from 0 to 256 [ 212.019552][ T8629] exfat: Deprecated parameter 'namecase' [ 212.080982][ T8608] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 212.119801][ T8629] exfat: Deprecated parameter 'namecase' [ 212.132068][ T8629] exfat: Deprecated parameter 'utf8' [ 212.178572][ T8629] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 212.261158][ T8608] XFS (loop3): Ending clean mount [ 212.356814][ T9] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 212.404944][ T9] XFS (loop3): Unmount and run xfs_repair [ 212.420159][ T9] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 212.455462][ T9] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 212.492456][ T9] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 212.528246][ T9] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 212.567958][ T9] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 212.594555][ T9] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 212.623837][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 212.648391][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 212.677751][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 212.703220][ T8650] loop4: detected capacity change from 0 to 256 [ 212.708477][ T8608] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 212.732341][ T8608] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 212.763411][ T8608] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 212.788668][ T8650] FAT-fs (loop4): Directory bread(block 64) failed [ 212.820941][ T8650] FAT-fs (loop4): Directory bread(block 65) failed [ 212.828691][ T8650] FAT-fs (loop4): Directory bread(block 66) failed [ 212.850243][ T8650] FAT-fs (loop4): Directory bread(block 67) failed [ 212.879873][ T8650] FAT-fs (loop4): Directory bread(block 68) failed [ 212.889910][ T8650] FAT-fs (loop4): Directory bread(block 69) failed [ 212.911131][ T8650] FAT-fs (loop4): Directory bread(block 70) failed [ 212.917804][ T8650] FAT-fs (loop4): Directory bread(block 71) failed [ 212.931549][ T8650] FAT-fs (loop4): Directory bread(block 72) failed [ 212.938180][ T8650] FAT-fs (loop4): Directory bread(block 73) failed [ 213.364584][ T5773] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 213.475161][ T8644] loop1: detected capacity change from 0 to 32768 [ 213.553194][ T8644] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 213.608242][ T8644] XFS (loop1): Ending clean mount [ 213.661152][ T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 213.712557][ T8644] XFS (loop1): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 213.819686][ T5776] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 213.871266][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 213.901451][ T23] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 213.941477][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.984057][ T23] usb 3-1: Product: syz [ 213.988373][ T23] usb 3-1: Manufacturer: syz [ 214.015541][ T23] usb 3-1: SerialNumber: syz [ 214.038445][ T23] usb 3-1: config 0 descriptor?? [ 214.059844][ T23] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 214.073735][ T23] pctv452e: pctv452e_power_ctrl: 1 [ 214.073735][ T23] [ 214.084015][ T23] usb 3-1: selecting invalid altsetting 3 [ 214.089866][ T23] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 214.089866][ T23] [ 214.104705][ T23] dvb-usb: bulk message failed: -22 (5/0) [ 214.135346][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 214.181892][ T23] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 214.190463][ T23] usb 3-1: media controller created [ 214.209215][ T23] dvb-usb: bulk message failed: -22 (8/0) [ 214.230365][ T23] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 214.283777][ T23] dvb-usb: MAC address reading failed. [ 214.284247][ T8662] pctv452e: I2C error -22; AA 02 00 00 EA -> 00 00 00 00 00 00 00 [ 214.339767][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 214.424478][ T23] DVB: Unable to find symbol stb0899_attach() [ 214.430704][ T23] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 214.583722][ T23] rc_core: IR keymap rc-tt-1500 not found [ 214.589556][ T23] Registered IR keymap rc-empty [ 214.617127][ T23] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 214.652328][ T23] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input10 [ 214.691370][ T23] dvb-usb: schedule remote query interval to 100 msecs. [ 214.698465][ T23] pctv452e: pctv452e_power_ctrl: 0 [ 214.698465][ T23] [ 214.719472][ T23] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 214.757803][ T23] usb 3-1: USB disconnect, device number 9 [ 214.956952][ T23] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 215.139182][ T8696] loop2: detected capacity change from 0 to 256 [ 215.190411][ T8696] exfat: Deprecated parameter 'utf8' [ 215.212154][ T8696] exfat: Deprecated parameter 'namecase' [ 215.229191][ T8696] exfat: Deprecated parameter 'namecase' [ 215.258882][ T8696] exfat: Deprecated parameter 'utf8' [ 215.346406][ T8696] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 215.436673][ T8705] loop1: detected capacity change from 0 to 256 [ 215.550944][ T8705] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 215.658905][ T28] audit: type=1800 audit(1786044930.208:14): pid=8705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1135" name="bus" dev="loop1" ino=1048690 res=0 errno=0 [ 215.966170][ T8719] loop2: detected capacity change from 0 to 256 [ 216.275620][ T8726] loop2: detected capacity change from 0 to 64 [ 216.614795][ T8738] loop1: detected capacity change from 0 to 128 [ 217.161542][ T8755] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1158'. [ 217.199374][ T8755] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1158'. [ 217.334044][ T8761] loop4: detected capacity change from 0 to 512 [ 217.386995][ T8761] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.401217][ T8761] ext4 filesystem being mounted at /147/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 217.433155][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.498626][ T8761] EXT4-fs error (device loop4): ext4_readdir:223: inode #12: comm syz.4.1161: path (unknown): directory fails checksum at offset 0 [ 217.753978][ T7387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.828728][ T8771] tipc: Enabling of bearer rejected, failed to enable media [ 217.851227][ T8773] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1166'. [ 217.993969][ T8777] team0: Device vlan2 is already an upper device of the team interface [ 218.935004][ T8804] loop3: detected capacity change from 0 to 1024 [ 219.115527][ T8804] hfsplus: request for non-existent node 33554434 in B*Tree [ 219.133204][ T8804] hfsplus: request for non-existent node 33554434 in B*Tree [ 219.149542][ T8804] hfsplus: request for non-existent node 33554434 in B*Tree [ 219.159000][ T8804] hfsplus: request for non-existent node 33554434 in B*Tree [ 219.178921][ T8810] hfsplus: request for non-existent node 33554434 in B*Tree [ 219.216915][ T8810] hfsplus: request for non-existent node 33554434 in B*Tree [ 219.227577][ T8813] loop2: detected capacity change from 0 to 128 [ 219.239022][ T8813] ufs: Unable to do repair on error, will lock lock instead [ 219.324013][ T43] hfsplus: request for non-existent node 33554434 in B*Tree [ 219.359631][ T43] hfsplus: request for non-existent node 33554434 in B*Tree [ 219.586798][ T8820] loop2: detected capacity change from 0 to 256 [ 219.789954][ T8827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1191'. [ 219.979839][ T8833] xt_CT: You must specify a L4 protocol and not use inversions on it [ 219.981810][ T8832] tipc: Invalid UDP bearer configuration [ 219.988031][ T8832] tipc: Enabling of bearer rejected, failed to enable media [ 220.339664][ T8840] loop1: detected capacity change from 0 to 4096 [ 220.367935][ T8840] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 220.462587][ T8840] ntfs: volume version 3.1. [ 221.340471][ T8844] loop3: detected capacity change from 0 to 32768 [ 221.419369][ T8844] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 221.488593][ T8844] XFS (loop3): Ending clean mount [ 221.607146][ T5773] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 221.944119][ T8883] loop3: detected capacity change from 0 to 512 [ 221.974074][ T8883] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1215: dx entry: limit 1024 != root limit 124 [ 221.988082][ T8883] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1215: Corrupt directory, running e2fsck is recommended [ 222.018311][ T8883] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 222.048717][ T8883] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.1215: corrupted in-inode xattr: invalid ea_ino [ 222.066612][ T8883] EXT4-fs (loop3): Remounting filesystem read-only [ 222.079909][ T8883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.117315][ T8883] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1215: dx entry: limit 1024 != root limit 124 [ 222.129671][ T8883] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1215: Corrupt directory, running e2fsck is recommended [ 222.220280][ T8878] loop2: detected capacity change from 0 to 40427 [ 222.277723][ T8878] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 222.292828][ T8878] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 222.311546][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.370957][ T8878] F2FS-fs (loop2): Found nat_bits in checkpoint [ 222.622603][ T8878] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 222.670954][ T8878] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 222.996773][ T8907] loop1: detected capacity change from 0 to 512 [ 223.081427][ T8907] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.1225: iget: bad i_size value: 38620345925642 [ 223.188865][ T8907] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1225: couldn't read orphan inode 15 (err -117) [ 223.255958][ T8907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.450303][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.635109][ T8916] loop1: detected capacity change from 0 to 512 [ 223.676358][ T8901] loop4: detected capacity change from 0 to 40427 [ 223.690137][ T8901] F2FS-fs (loop4): inline encryption not supported [ 223.699824][ T8901] F2FS-fs (loop4): invalid crc value [ 223.722209][ T8916] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.1227: dx entry: limit 1024 != root limit 124 [ 223.745763][ T8916] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1227: Corrupt directory, running e2fsck is recommended [ 223.787729][ T8901] F2FS-fs (loop4): Found nat_bits in checkpoint [ 223.818244][ T8916] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 223.878224][ T8916] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.1227: corrupted in-inode xattr: invalid ea_ino [ 223.966552][ T8916] EXT4-fs (loop1): Remounting filesystem read-only [ 223.989020][ T8916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.026918][ T8901] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 224.082560][ T8916] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.1227: dx entry: limit 1024 != root limit 124 [ 224.140991][ T8916] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1227: Corrupt directory, running e2fsck is recommended [ 224.259368][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.273290][ T8924] loop3: detected capacity change from 0 to 256 [ 224.553051][ T8917] loop2: detected capacity change from 0 to 40427 [ 224.603608][ T8917] F2FS-fs (loop2): invalid crc value [ 224.620632][ T8917] F2FS-fs (loop2): Found nat_bits in checkpoint [ 224.716185][ T8917] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 224.750956][ T8] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 224.800660][ T8917] F2FS-fs (loop2): Start checkpoint disabled! [ 224.842591][ T8917] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 224.988020][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.020935][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 225.033924][ T8932] loop4: detected capacity change from 0 to 4096 [ 225.049835][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 225.079605][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.132607][ T8] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 225.169285][ T8932] ntfs: volume version 3.1. [ 225.174023][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.369825][ T2944] kworker/u4:8: attempt to access beyond end of device [ 225.369825][ T2944] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 225.410865][ T2944] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 225.765354][ T8928] loop3: detected capacity change from 0 to 40427 [ 225.780370][ T8928] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 225.796377][ T8928] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 225.832645][ T8928] F2FS-fs (loop3): Found nat_bits in checkpoint [ 225.852442][ T8] gud 2-1:1.0: Failed to get properties (error=-71) [ 225.859154][ T8] gud: probe of 2-1:1.0 failed with error -71 [ 225.953422][ T8] usb 2-1: USB disconnect, device number 12 [ 226.079044][ T8928] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 226.090250][ T8928] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 226.434596][ T8948] loop2: detected capacity change from 0 to 512 [ 226.503479][ T8948] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.1239: dx entry: limit 1024 != root limit 124 [ 226.521030][ T8948] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1239: Corrupt directory, running e2fsck is recommended [ 226.591571][ T8948] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 226.599957][ T8948] EXT4-fs error (device loop2): ext4_iget_extra_inode:4740: inode #15: comm syz.2.1239: corrupted in-inode xattr: invalid ea_ino [ 226.680072][ T8948] EXT4-fs (loop2): Remounting filesystem read-only [ 226.689871][ T8948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.747056][ T8948] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.1239: dx entry: limit 1024 != root limit 124 [ 226.783270][ T8948] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1239: Corrupt directory, running e2fsck is recommended [ 226.902670][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.043147][ T8957] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 227.054146][ T8961] loop4: detected capacity change from 0 to 512 [ 227.094394][ T8961] EXT4-fs error (device loop4): ext4_iget_extra_inode:4740: inode #15: comm syz.4.1241: corrupted in-inode xattr: invalid ea_ino [ 227.191183][ T8961] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1241: couldn't read orphan inode 15 (err -117) [ 227.278396][ T8963] loop2: detected capacity change from 0 to 4096 [ 227.292711][ T8961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.400988][ T8961] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1241: bg 0: block 376: padding at end of block bitmap is not set [ 227.422547][ T8961] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 227.485126][ T8963] ntfs: volume version 3.1. [ 227.592428][ T7387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.821080][ T8976] kernel profiling enabled (shift: 9) [ 228.177857][ T8983] loop2: detected capacity change from 0 to 4096 [ 228.227963][ T8983] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 228.247007][ T8983] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 228.262988][ T8983] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 228.274674][ T8983] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 228.289739][ T8] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 228.307853][ T8983] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 228.322579][ T8983] ntfs: volume version 3.1. [ 228.344139][ T8983] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 228.365690][ T8983] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 228.398770][ T8983] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 228.456479][ T8983] ntfs: (device loop2): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 228.491637][ T8983] ntfs: (device loop2): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 228.513860][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 228.533098][ T8] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 228.569515][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.602043][ T8] usb 5-1: config 0 descriptor?? [ 228.909863][ T8994] loop3: detected capacity change from 0 to 4096 [ 228.946859][ T8994] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 229.009583][ T8994] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 229.030017][ T8] hid (null): invalid report_size 29396 [ 229.046773][ T8] hid (null): invalid report_count 165044534 [ 229.066676][ T8] hid-led 0003:0FC5:B080.0013: unexpected long global item [ 229.075549][ T8] hid-led: probe of 0003:0FC5:B080.0013 failed with error -22 [ 229.153869][ T8994] overlayfs: upper fs does not support tmpfile. [ 229.163158][ T8986] loop1: detected capacity change from 0 to 40427 [ 229.194952][ T8986] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 229.217234][ T8994] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 229.237894][ T8986] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 229.267227][ T8986] F2FS-fs (loop1): invalid crc value [ 229.294556][ T8986] F2FS-fs (loop1): Found nat_bits in checkpoint [ 229.318966][ T8] usb 5-1: USB disconnect, device number 4 [ 229.505916][ T8986] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 229.514627][ T8986] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 229.711511][ T8996] loop2: detected capacity change from 0 to 32768 [ 229.734928][ T8996] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 229.750715][ T5776] syz-executor: attempt to access beyond end of device [ 229.750715][ T5776] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 229.798895][ T5776] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 230.073531][ T6096] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 230.091399][ T9006] ip_tables: iptables: counters copy to user failed while replacing table [ 230.528378][ T9016] loop2: detected capacity change from 0 to 512 [ 230.550883][ T9016] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 230.645740][ T9016] EXT4-fs (loop2): 1 truncate cleaned up [ 230.674939][ T9016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.969435][ T8] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 230.997992][ T8] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz0 [ 231.135061][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.163313][ T9030] fido_id[9030]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 231.215892][ T9027] loop1: detected capacity change from 0 to 4096 [ 231.378241][ T9027] ntfs: volume version 3.1. [ 231.406770][ T9033] loop4: detected capacity change from 0 to 2048 [ 231.498377][ T9033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.547183][ T9039] loop3: detected capacity change from 0 to 256 [ 231.605247][ T9033] ext4 filesystem being mounted at /176/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 231.636855][ C0] vkms_vblank_simulate: vblank timer overrun [ 231.866650][ T7387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.705365][ T9072] netlink: 'syz.2.1292': attribute type 8 has an invalid length. [ 233.062264][ T9080] netlink: set zone limit has 8 unknown bytes [ 233.233317][ T9083] ALSA: mixer_oss: invalid OSS volume '' [ 233.283653][ T9062] loop3: detected capacity change from 0 to 32768 [ 233.331242][ T9062] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1287 (9062) [ 233.400424][ T9062] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 233.441448][ T9062] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 233.471124][ T9062] BTRFS info (device loop3): setting nodatasum [ 233.477497][ T9062] BTRFS info (device loop3): force zlib compression, level 3 [ 233.496378][ T9062] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 233.518934][ T9062] BTRFS info (device loop3): use lzo compression, level 0 [ 233.531700][ T9062] BTRFS info (device loop3): turning on flush-on-commit [ 233.539265][ T9062] BTRFS info (device loop3): enabling auto defrag [ 233.547011][ T9062] BTRFS info (device loop3): max_inline at 4096 [ 233.554209][ T9062] BTRFS info (device loop3): using free space tree [ 233.675445][ T9062] BTRFS info (device loop3): enabling ssd optimizations [ 233.700945][ T8] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 233.803514][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 233.803530][ T28] audit: type=1800 audit(1786044948.358:15): pid=9062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1287" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 233.830169][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.960887][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 233.978933][ T5773] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 233.988209][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.038473][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 234.071882][ T8] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 234.081244][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.092118][ T8] usb 2-1: config 0 descriptor?? [ 234.361283][ T9123] loop3: detected capacity change from 0 to 1024 [ 234.548742][ T8] megaworld 0003:07B5:0312.0015: unknown main item tag 0x7 [ 234.579066][ T8] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 234.611140][ T8] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 234.625537][ T8] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 234.653590][ T8] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 234.661285][ T8] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 234.668635][ T8] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 234.676169][ T8] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 234.684381][ T8] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 234.724654][ T8] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 234.754887][ T8] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 234.796262][ T8] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 234.831684][ T8] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 234.863663][ T8] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 234.912553][ T8] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 234.931839][ T8] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 234.953703][ T8] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 234.973059][ T9132] 9pnet_fd: p9_fd_create_unix (9132): problem connecting socket: éq‰Y’3aK: -111 [ 234.983292][ T8] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 234.990609][ T8] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 235.004718][ T9133] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1314'. [ 235.021020][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1314'. [ 235.041150][ T8] megaworld 0003:07B5:0312.0015: hidraw0: USB HID v0.81 Device [HID 07b5:0312] on usb-dummy_hcd.1-1/input0 [ 235.105625][ T8] megaworld 0003:07B5:0312.0015: no inputs found [ 235.173562][ T8] usb 2-1: USB disconnect, device number 13 [ 235.232577][ T9134] fido_id[9134]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 235.455800][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1318'. [ 235.464413][ T9144] netlink: 860 bytes leftover after parsing attributes in process `syz.1.1319'. [ 235.510884][ T9142] netlink: 'syz.2.1318': attribute type 1 has an invalid length. [ 235.676230][ T9148] loop4: detected capacity change from 0 to 1024 [ 235.713856][ T9151] loop1: detected capacity change from 0 to 256 [ 235.739253][ T9148] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 235.765700][ T9153] loop2: detected capacity change from 0 to 256 [ 235.774155][ T9153] exfat: Deprecated parameter 'utf8' [ 235.781624][ T9148] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 235.812803][ T9148] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.887867][ T9153] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5a1fe699, utbl_chksum : 0xe619d30d) [ 235.921464][ T9151] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 236.092776][ T7387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.376496][ T9165] loop2: detected capacity change from 0 to 1024 [ 236.642858][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1332'. [ 236.649061][ T9174] loop2: detected capacity change from 0 to 256 [ 236.687655][ T9177] loop4: detected capacity change from 0 to 512 [ 236.742161][ T9174] FAT-fs (loop2): Directory bread(block 64) failed [ 236.755614][ T9174] FAT-fs (loop2): Directory bread(block 65) failed [ 236.762614][ T8] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 236.771720][ T9174] FAT-fs (loop2): Directory bread(block 66) failed [ 236.778309][ T9174] FAT-fs (loop2): Directory bread(block 67) failed [ 236.791654][ T9174] FAT-fs (loop2): Directory bread(block 68) failed [ 236.798416][ T9177] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.1334: inode has both inline data and extents flags [ 236.841083][ T9174] FAT-fs (loop2): Directory bread(block 69) failed [ 236.847846][ T9174] FAT-fs (loop2): Directory bread(block 70) failed [ 236.868796][ T9177] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1334: couldn't read orphan inode 15 (err -117) [ 236.904443][ T9174] FAT-fs (loop2): Directory bread(block 71) failed [ 236.915518][ T9180] netlink: 'syz.3.1335': attribute type 2 has an invalid length. [ 236.931376][ T9174] FAT-fs (loop2): Directory bread(block 72) failed [ 236.938431][ T9174] FAT-fs (loop2): Directory bread(block 73) failed [ 236.954704][ T9177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.978248][ T8] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 236.996219][ T8] usb 2-1: config 0 has no interface number 0 [ 237.011195][ T8] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 237.031827][ T8] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 237.051046][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.080851][ T8] usb 2-1: Product: syz [ 237.090886][ T8] usb 2-1: Manufacturer: syz [ 237.118090][ T8] usb 2-1: SerialNumber: syz [ 237.146370][ T8] usb 2-1: config 0 descriptor?? [ 237.168902][ T7387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.192910][ T8] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 237.288746][ T9182] loop3: detected capacity change from 0 to 1024 [ 237.411233][ T9184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1337'. [ 237.445925][ T23] usb 2-1: USB disconnect, device number 14 [ 237.452045][ T9184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1337'. [ 237.464168][ T23] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 237.489555][ T9184] netlink: 'syz.4.1337': attribute type 14 has an invalid length. [ 237.503850][ T12] hfsplus: b-tree write err: -5, ino 25 [ 237.509820][ T12] hfsplus: b-tree write err: -5, ino 4 [ 237.529315][ T9184] netlink: 'syz.4.1337': attribute type 13 has an invalid length. [ 237.537725][ T12] hfsplus: b-tree write err: -5, ino 2 [ 237.646561][ T9188] loop3: detected capacity change from 0 to 128 [ 237.725177][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 238.496080][ T9219] [U] „ [ 238.759019][ T5085] Bluetooth: hci0: Malformed LE Event: 0x0b [ 238.999728][ T9238] loop4: detected capacity change from 0 to 128 [ 239.063442][ T9234] loop2: detected capacity change from 0 to 4096 [ 239.119201][ T9241] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 239.533485][ T9248] loop2: detected capacity change from 0 to 2048 [ 239.611124][ T9248] loop2: p1 < > p4 [ 239.615040][ T9248] loop2: partition table partially beyond EOD, truncated [ 239.655681][ T9248] loop2: p4 start 4096 is beyond EOD, truncated [ 239.726098][ T9256] loop1: detected capacity change from 0 to 512 [ 239.850377][ T9256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.913738][ T9262] loop4: detected capacity change from 0 to 4096 [ 239.925818][ T9256] ext4 filesystem being mounted at /309/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 239.958872][ T9262] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 240.014344][ T9256] EXT4-fs error (device loop1): ext4_xattr_block_find:1881: inode #15: comm syz.1.1372: corrupted xattr block 33: invalid ea_ino [ 240.078106][ T9256] EXT4-fs (loop1): Remounting filesystem read-only [ 240.168449][ T9262] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 240.193736][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.215694][ T1089] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 240.253294][ T1089] Quota error (device loop1): write_blk: dquota write failed [ 240.260763][ T1089] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 240.303568][ T9262] overlayfs: upper fs does not support tmpfile. [ 240.313283][ T9262] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 240.318725][ T1089] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 240.359653][ T1089] Quota error (device loop1): write_blk: dquota write failed [ 240.367203][ T1089] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 240.410854][ T1089] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 240.455610][ T1089] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 240.731947][ T9273] syz.1.1377: attempt to access beyond end of device [ 240.731947][ T9273] loop1: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 240.783491][ T9273] Buffer I/O error on dev loop1, logical block 134217734, lost async page write [ 240.902778][ T9280] hfs: filesystem is marked locked, mounting read-only. [ 240.947665][ T9280] hfs: filesystem is marked locked, leaving read-only. [ 241.122275][ T9282] EXT4-fs: inline encryption not supported [ 241.133726][ T9284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1383'. [ 241.158723][ T9284] tipc: Started in network mode [ 241.164170][ T9284] tipc: Node identity ac14140f, cluster identity 4711 [ 241.176223][ T9282] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 241.189195][ T9284] tipc: New replicast peer: 172.30.1.0 [ 241.212492][ T9282] EXT4-fs (loop4): Test dummy encryption mode enabled [ 241.224821][ T9284] tipc: Enabled bearer , priority 10 [ 241.249332][ T9282] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 241.258491][ T9282] System zones: 0-5 [ 241.273624][ T9282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.301514][ T9264] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 241.317193][ T9282] EXT4-fs (loop4): Online resizing not supported with bigalloc [ 241.356628][ T9286] FAT-fs (loop3): Directory bread(block 64) failed [ 241.396373][ T9286] FAT-fs (loop3): Directory bread(block 65) failed [ 241.403141][ T9286] FAT-fs (loop3): Directory bread(block 66) failed [ 241.455910][ T9286] FAT-fs (loop3): Directory bread(block 67) failed [ 241.472172][ T7387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.510991][ T9286] FAT-fs (loop3): Directory bread(block 68) failed [ 241.551493][ T9286] FAT-fs (loop3): Directory bread(block 69) failed [ 241.606985][ T9264] XFS (loop2): Ending clean mount [ 241.612352][ T9286] FAT-fs (loop3): Directory bread(block 70) failed [ 241.618973][ T9286] FAT-fs (loop3): Directory bread(block 71) failed [ 241.643048][ T9286] FAT-fs (loop3): Directory bread(block 72) failed [ 241.656308][ T9286] FAT-fs (loop3): Directory bread(block 73) failed [ 241.681517][ T28] audit: type=1800 audit(1786044956.085:16): pid=9264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1373" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 241.817172][ T5780] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 242.414262][ T176] tipc: Node number set to 2886997007 [ 242.541753][ T9299] set_capacity_and_notify: 5 callbacks suppressed [ 242.541772][ T9299] loop1: detected capacity change from 0 to 32768 [ 242.812276][ T9319] loop2: detected capacity change from 0 to 512 [ 242.851956][ T9319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.881388][ T9319] ext4 filesystem being mounted at /345/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.916996][ T9322] loop4: detected capacity change from 0 to 512 [ 242.938812][ T9322] FAT-fs (loop4): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1) [ 243.047310][ T9319] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:106: comm syz.2.1395: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 243.115649][ T9319] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 243.165779][ T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1) [ 243.274911][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.370851][ T9324] loop4: detected capacity change from 0 to 128 [ 243.437936][ T9324] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 243.467561][ T9324] hpfs: filesystem error: improperly stopped [ 243.474157][ T9324] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 243.486671][ T9324] hpfs: You really don't want any checks? You are crazy... [ 243.499408][ T9324] hpfs: Code page index out of array [ 243.532240][ T9324] hpfs: code page support is disabled [ 243.559250][ T9324] hpfs: hpfs_map_4sectors(): unaligned read [ 243.565367][ T9324] hpfs: hpfs_map_4sectors(): unaligned read [ 243.596173][ T9324] hpfs: filesystem error: unable to find root dir [ 243.682514][ T9334] loop2: detected capacity change from 0 to 256 [ 243.811355][ T9334] FAT-fs (loop2): Directory bread(block 64) failed [ 243.833887][ T9334] FAT-fs (loop2): Directory bread(block 65) failed [ 243.840608][ T9334] FAT-fs (loop2): Directory bread(block 66) failed [ 243.880604][ T9334] FAT-fs (loop2): Directory bread(block 67) failed [ 243.899617][ T9334] FAT-fs (loop2): Directory bread(block 68) failed [ 243.906232][ T9334] FAT-fs (loop2): Directory bread(block 69) failed [ 243.951811][ T9334] FAT-fs (loop2): Directory bread(block 70) failed [ 243.969808][ T9334] FAT-fs (loop2): Directory bread(block 71) failed [ 243.991522][ T9334] FAT-fs (loop2): Directory bread(block 72) failed [ 244.002230][ T9334] FAT-fs (loop2): Directory bread(block 73) failed [ 244.030753][ T9340] loop1: detected capacity change from 0 to 256 [ 244.069456][ T9342] netlink: 'syz.3.1406': attribute type 8 has an invalid length. [ 244.086238][ T9340] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 244.164168][ T28] audit: type=1326 audit(1786044958.405:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9343 comm="syz.4.1407" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee859e0d9 code=0x7ffc0000 [ 244.232193][ T9344] loop4: detected capacity change from 0 to 256 [ 244.267525][ T28] audit: type=1326 audit(1786044958.461:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9343 comm="syz.4.1407" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee859e0d9 code=0x7ffc0000 [ 244.357286][ T28] audit: type=1326 audit(1786044958.461:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9343 comm="syz.4.1407" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee859e0d9 code=0x7ffc0000 [ 244.398977][ T9344] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 244.480559][ T28] audit: type=1326 audit(1786044958.461:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9343 comm="syz.4.1407" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee859e0d9 code=0x7ffc0000 [ 244.951081][ T9361] loop2: detected capacity change from 0 to 1024 [ 245.069428][ T9365] loop3: detected capacity change from 0 to 256 [ 245.090122][ T9367] loop1: detected capacity change from 0 to 24 [ 245.117191][ T9361] hfsplus: bad catalog entry type [ 245.288804][ T2944] hfsplus: b-tree write err: -5, ino 25 [ 245.294651][ T2944] hfsplus: b-tree write err: -5, ino 4 [ 245.328757][ T2944] hfsplus: b-tree write err: -5, ino 2 [ 245.525850][ T9377] netlink: 'syz.1.1422': attribute type 2 has an invalid length. [ 245.625810][ T9378] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 245.661970][ T9378] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 245.670119][ T9378] System zones: 0-1, 15-15, 18-18, 34-34 [ 245.686930][ T9378] EXT4-fs (loop2): orphan cleanup on readonly fs [ 245.693775][ T9378] __quota_error: 24 callbacks suppressed [ 245.693790][ T9378] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 245.708971][ T9378] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 245.723609][ T9378] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 245.732861][ T9378] EXT4-fs (loop2): 1 truncate cleaned up [ 245.758275][ T9382] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1423'. [ 245.762477][ T9378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 245.950419][ T9378] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 245.985385][ T9378] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 246.127134][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.810876][ T9409] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.1436: corrupted inode contents [ 246.851241][ T9409] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 246.919011][ T9409] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.1436: corrupted inode contents [ 246.983631][ T9416] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 246.992293][ T9415] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 247.018461][ T9409] EXT4-fs error (device loop2): ext4_evict_inode:302: inode #15: comm syz.2.1436: mark_inode_dirty error [ 247.064891][ T9409] EXT4-fs (loop2): 1 orphan inode deleted [ 247.095230][ T9409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.272133][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.730412][ T9434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1447'. [ 247.767836][ T9434] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 247.919973][ T9438] set_capacity_and_notify: 3 callbacks suppressed [ 247.919990][ T9438] loop3: detected capacity change from 0 to 4096 [ 247.950627][ T9438] EXT4-fs: inline encryption not supported [ 247.988056][ T9438] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 248.007623][ T9438] EXT4-fs (loop3): Test dummy encryption mode enabled [ 248.045197][ T9438] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 248.053525][ T9438] System zones: 0-5 [ 248.102539][ T9438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.110570][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1452'. [ 248.124267][ T9448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1452'. [ 248.133916][ T9448] netlink: 'syz.2.1452': attribute type 14 has an invalid length. [ 248.142883][ T9448] netlink: 'syz.2.1452': attribute type 13 has an invalid length. [ 248.237550][ T9438] EXT4-fs (loop3): Online resizing not supported with bigalloc [ 248.374555][ T9455] loop2: detected capacity change from 0 to 128 [ 248.417803][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.438870][ T9455] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 248.511032][ T9455] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 248.884691][ T9468] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1461'. [ 249.604689][ T9497] loop2: detected capacity change from 0 to 128 [ 249.624713][ T9497] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 249.798194][ T3424] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 249.901561][ T9504] loop2: detected capacity change from 0 to 64 [ 250.228833][ T9508] loop2: detected capacity change from 0 to 4096 [ 250.253985][ T9508] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 250.316666][ T9508] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 250.383231][ T9508] overlayfs: upper fs does not support tmpfile. [ 250.404594][ T9508] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 250.495952][ T9494] loop4: detected capacity change from 0 to 32768 [ 250.562279][ T9494] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 250.672247][ T9512] loop3: detected capacity change from 0 to 4096 [ 250.760920][ T9494] XFS (loop4): Ending clean mount [ 250.911386][ T9512] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 251.010003][ T9526] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 251.017398][ T9526] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 251.030735][ T7387] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 251.059817][ T9526] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 251.090066][ T9526] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 251.614897][ T9536] loop3: detected capacity change from 0 to 256 [ 251.648620][ T9536] exfat: Deprecated parameter 'utf8' [ 251.715027][ T9536] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 251.854517][ T9538] loop1: detected capacity change from 0 to 4096 [ 251.968861][ T9541] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 252.056655][ T9528] loop2: detected capacity change from 0 to 32768 [ 252.165444][ T28] audit: type=1800 audit(1786044965.889:45): pid=9528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1485" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 252.351978][ T112] ERROR: (device loop2): diFree: numfree > numinos [ 252.351978][ T112] [ 252.396540][ T112] ERROR: (device loop2): remounting filesystem as read-only [ 252.818628][ T9556] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 253.299814][ T9549] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 253.351282][ T9551] UFO tlock:0xffffc9000289a048 [ 253.405568][ T9564] set_capacity_and_notify: 3 callbacks suppressed [ 253.405584][ T9564] loop2: detected capacity change from 0 to 2048 [ 253.509209][ T9564] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.580966][ T5773] ocfs2: Unmounting device (7,3) on (node local) [ 253.680138][ T28] audit: type=1800 audit(1786044967.311:46): pid=9564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1501" name="file1" dev="loop2" ino=1367 res=0 errno=0 [ 254.458191][ T9581] loop3: detected capacity change from 0 to 8192 [ 254.468048][ T9581] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 254.481975][ T9581] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 254.498093][ T9581] REISERFS (device loop3): using journaled data mode [ 254.505385][ T9581] reiserfs: using flush barriers [ 254.538633][ T9581] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 254.584600][ T9590] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1513'. [ 254.618344][ T9581] REISERFS (device loop3): checking transaction log (loop3) [ 254.677722][ T9581] REISERFS (device loop3): Using r5 hash to sort names [ 254.717532][ T9581] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 254.765271][ T9581] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 255.190271][ T9599] loop2: detected capacity change from 0 to 8192 [ 255.335159][ T9599] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 255.454849][ T9599] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 255.484297][ T9611] loop1: detected capacity change from 0 to 1764 [ 255.495869][ T9599] REISERFS (device loop2): using ordered data mode [ 255.502469][ T9599] reiserfs: using flush barriers [ 255.530410][ T9599] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 255.614036][ T9599] REISERFS (device loop2): checking transaction log (loop2) [ 255.641276][ T9611] smb3: Unknown parameter 'overriderockperm' [ 255.657149][ T9599] REISERFS (device loop2): Using r5 hash to sort names [ 255.707150][ T9599] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 255.885078][ T9617] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1525'. [ 256.840875][ T9650] loop3: detected capacity change from 0 to 256 [ 256.984753][ T9650] FAT-fs (loop3): Directory bread(block 64) failed [ 256.991500][ T9650] FAT-fs (loop3): Directory bread(block 65) failed [ 257.021469][ T9650] FAT-fs (loop3): Directory bread(block 66) failed [ 257.037280][ T9650] FAT-fs (loop3): Directory bread(block 67) failed [ 257.044305][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.070696][ T9655] loop1: detected capacity change from 0 to 1024 [ 257.095031][ T9650] FAT-fs (loop3): Directory bread(block 68) failed [ 257.109597][ T9650] FAT-fs (loop3): Directory bread(block 69) failed [ 257.159632][ T9650] FAT-fs (loop3): Directory bread(block 70) failed [ 257.171997][ T9650] FAT-fs (loop3): Directory bread(block 71) failed [ 257.185524][ T9655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.191565][ T9650] FAT-fs (loop3): Directory bread(block 72) failed [ 257.244273][ T9650] FAT-fs (loop3): Directory bread(block 73) failed [ 257.482343][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.599079][ T9668] gretap0: entered promiscuous mode [ 257.611052][ T9668] vlan3: entered promiscuous mode [ 257.692652][ T9670] loop1: detected capacity change from 0 to 1024 [ 257.794652][ T9674] netlink: set zone limit has 8 unknown bytes [ 258.051342][ T9678] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1552'. [ 258.094747][ T9678] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 258.885926][ T9711] netlink: 'syz.1.1568': attribute type 8 has an invalid length. [ 258.909532][ T9712] loop2: detected capacity change from 0 to 128 [ 258.950204][ T9712] EXT4-fs (loop2): Test dummy encryption mode enabled [ 259.042531][ T9712] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 259.106654][ T9717] loop1: detected capacity change from 0 to 4096 [ 259.120225][ T9717] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 259.132989][ T9717] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 259.147152][ T9717] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 259.160929][ T9712] ext4 filesystem being mounted at /382/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.163336][ T9717] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 259.197142][ T9717] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 259.257166][ T9717] ntfs: volume version 3.1. [ 259.305767][ T9717] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 259.360585][ T9717] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 259.390127][ T9717] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 259.427655][ T9717] ntfs: (device loop1): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 259.445009][ T9717] ntfs: (device loop1): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 259.647564][ T9712] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 259.746241][ T5780] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 260.266750][ T9750] loop4: detected capacity change from 0 to 1024 [ 260.450708][ T9750] hfsplus: invalid catalog entry type [ 260.952003][ T9769] hsr0: entered promiscuous mode [ 260.959667][ T9769] macvtap1: entered promiscuous mode [ 261.030397][ T9770] loop4: detected capacity change from 0 to 4096 [ 261.084925][ T9770] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 261.223088][ T9774] loop3: detected capacity change from 0 to 256 [ 261.365436][ T9774] exFAT-fs (loop3): failed to read sector(0x100) [ 261.371948][ T9774] exFAT-fs (loop3): failed to load upcase table [ 261.384726][ T9774] exFAT-fs (loop3): failed to recognize exfat type [ 261.621883][ T9780] loop4: detected capacity change from 0 to 64 [ 262.168314][ T9794] rdma_op ffff8880210ce1f0 conn xmit_rdma 0000000000000000 [ 262.355084][ T9799] loop1: detected capacity change from 0 to 256 [ 262.592827][ T9805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1609'. [ 262.628994][ T9805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1609'. [ 262.657741][ T9805] netlink: 'syz.4.1609': attribute type 18 has an invalid length. [ 262.903091][ T176] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 263.094159][ T9799] loop1: detected capacity change from 0 to 32768 [ 263.120037][ T9799] (syz.1.1606,9799,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "/file0" or missing value [ 263.131909][ T176] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 263.158442][ T9799] (syz.1.1606,9799,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 263.165062][ T176] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.204801][ T176] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 263.217410][ T176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.228669][ T9817] loop4: detected capacity change from 0 to 128 [ 263.229841][ T176] usb 4-1: config 0 descriptor?? [ 263.296177][ T176] hub 4-1:0.0: USB hub found [ 263.419302][ T9819] use of bytesused == 0 is deprecated and will be removed in the future, [ 263.445519][ T9819] use the actual size instead. [ 263.539835][ T176] hub 4-1:0.0: 7 ports detected [ 263.554247][ T176] hub 4-1:0.0: insufficient power available to use all downstream ports [ 263.747783][ T9827] netlink: 'syz.2.1620': attribute type 5 has an invalid length. [ 263.996563][ T176] usb 4-1: USB disconnect, device number 7 [ 264.328962][ T9840] loop2: detected capacity change from 0 to 1024 [ 264.899251][ T9855] loop3: detected capacity change from 0 to 128 [ 264.965044][ T9858] vivid-004: disconnect [ 264.981424][ T9857] vivid-004: reconnect [ 265.407040][ T5085] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 266.262551][ T9894] loop1: detected capacity change from 0 to 1024 [ 266.272525][ T9894] EXT4-fs: Ignoring removed bh option [ 266.338633][ T9894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.457637][ T9901] loop2: detected capacity change from 0 to 4096 [ 266.487622][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 266.487641][ T28] audit: type=1800 audit(1786044979.276:60): pid=9894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1648" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 266.571553][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.604929][ T9901] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 266.716799][ T9901] ntfs3: loop2: Failed to load $Extend (-22). [ 266.730404][ T9901] ntfs3: loop2: Failed to initialize $Extend. [ 266.814736][ T9909] loop4: detected capacity change from 0 to 64 [ 267.267023][ T9917] loop2: detected capacity change from 0 to 512 [ 267.327630][ T9917] EXT4-fs error (device loop2): ext4_iget_extra_inode:4740: inode #15: comm syz.2.1657: corrupted in-inode xattr: invalid ea_ino [ 267.408100][ T9917] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1657: couldn't read orphan inode 15 (err -117) [ 267.422275][ T9917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.512528][ T9928] loop1: detected capacity change from 0 to 512 [ 267.538732][ T9917] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #2: comm syz.2.1657: invalid size [ 267.551077][ T9928] EXT4-fs (loop1): Test dummy encryption mode enabled [ 267.569184][ T9928] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 267.597425][ T9928] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.1663: bad orphan inode 131083 [ 267.643239][ T9928] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.760731][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.945293][ T9933] gretap0: entered promiscuous mode [ 267.960538][ T9933] vlan2: entered promiscuous mode [ 268.038497][ T9928] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 268.075485][ T9931] overlayfs: upper fs needs to support d_type. [ 268.151846][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.181154][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.258417][ T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 268.304968][ T5776] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /387/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 268.488362][ T8] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 268.507547][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.548726][ T9951] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1672'. [ 268.566460][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 268.577716][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.602811][ T8] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 268.618851][ T8] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 268.627066][ T8] usb 3-1: Product: syz [ 268.631288][ T8] usb 3-1: Manufacturer: syz [ 268.649987][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 268.686059][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 268.706956][ T8] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 268.728004][ T8] cdc_wdm 3-1:1.0: Unknown control protocol [ 268.779561][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.052994][ T43] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.078595][ T43] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.225262][ T43] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.237714][ T43] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.268747][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.326289][ T43] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.347535][ T43] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.479586][ T43] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.505347][ T43] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.883247][ T23] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 269.912524][ T43] tipc: Disabling bearer [ 269.950309][ T43] tipc: Left network mode [ 270.097045][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 270.130894][ T23] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 270.159471][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.185103][ T23] usb 4-1: Product: syz [ 270.189364][ T23] usb 4-1: Manufacturer: syz [ 270.205522][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 270.207497][ T23] usb 4-1: SerialNumber: syz [ 270.235660][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 270.242581][ T23] usb 4-1: config 0 descriptor?? [ 270.251172][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 270.287886][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 270.312074][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 270.321473][ T23] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 270.330479][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 270.375110][ T176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.564999][ T9980] netlink: 'syz.4.1684': attribute type 1 has an invalid length. [ 270.920337][ T9987] loop4: detected capacity change from 0 to 64 [ 270.962475][ T23] ssu100: probe of 4-1:0.0 failed with error -71 [ 271.002193][ T23] usb 4-1: USB disconnect, device number 8 [ 271.036234][ T28] audit: type=1800 audit(1786044983.552:61): pid=9987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1686" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 271.168258][ T8] usb 3-1: USB disconnect, device number 10 [ 271.401258][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.497551][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.661127][T10001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.204361][ T9970] chnl_net:caif_netlink_parms(): no params data found [ 272.512838][ T5085] Bluetooth: hci1: command tx timeout [ 272.599643][ T176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.742162][ T9970] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.784871][ T9970] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.802586][ T9970] bridge_slave_0: entered allmulticast mode [ 272.813511][ T9970] bridge_slave_0: entered promiscuous mode [ 272.860141][ T43] hsr_slave_0: left promiscuous mode [ 272.930464][ T43] hsr_slave_1: left promiscuous mode [ 272.943795][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.971717][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.027807][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.043985][T10038] loop3: detected capacity change from 0 to 2048 [ 273.047422][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.071400][T10038] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 273.106242][ T43] bridge_slave_1: left allmulticast mode [ 273.114483][T10038] NILFS (loop3): mounting unchecked fs [ 273.133188][ T43] bridge_slave_1: left promiscuous mode [ 273.146982][T10041] loop4: detected capacity change from 0 to 2048 [ 273.157741][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.188553][T10038] NILFS (loop3): recovery complete [ 273.210537][T10041] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 273.251500][T10042] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 273.265342][T10041] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 273.287357][ T43] bridge_slave_0: left allmulticast mode [ 273.303893][T10041] UDF-fs: Scanning with blocksize 512 failed [ 273.310178][ T43] bridge_slave_0: left promiscuous mode [ 273.316793][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.349379][T10041] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 273.633686][ T43] veth1_macvtap: left promiscuous mode [ 273.657237][ T43] veth0_macvtap: left promiscuous mode [ 273.664531][ T43] veth1_vlan: left promiscuous mode [ 273.699598][ T43] veth0_vlan: left promiscuous mode [ 273.710168][ T176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.067855][T10016] loop2: detected capacity change from 0 to 65536 [ 274.102701][T10016] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 274.158906][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.251281][T10016] XFS (loop2): Ending clean mount [ 274.348068][T10016] XFS (loop2): Quotacheck needed: Please wait. [ 274.506993][T10016] XFS (loop2): Quotacheck: Done. [ 274.661621][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.736910][ T5085] Bluetooth: hci1: command tx timeout [ 274.754283][ T5780] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 274.824687][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.080846][T10066] loop4: detected capacity change from 0 to 256 [ 275.089296][T10066] exfat: Deprecated parameter 'utf8' [ 275.162234][T10066] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 275.564687][T10075] loop3: detected capacity change from 0 to 512 [ 275.575886][T10075] EXT4-fs: Ignoring removed nobh option [ 275.674964][T10075] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #3: comm syz.3.1711: corrupted inode contents [ 275.712806][T10075] EXT4-fs (loop3): Remounting filesystem read-only [ 275.744753][T10075] Quota error (device loop3): write_blk: dquota write failed [ 275.784360][T10075] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 275.858699][T10075] EXT4-fs (loop3): 1 truncate cleaned up [ 275.878034][T10075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.903930][T10075] ext4 filesystem being mounted at /455/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.934636][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.985981][T10084] loop2: detected capacity change from 0 to 8192 [ 276.040687][T10084] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 276.072443][T10084] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 276.097844][T10084] REISERFS (device loop2): using journaled data mode [ 276.116417][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.138786][T10084] reiserfs: using flush barriers [ 276.153072][T10084] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 276.170296][T10084] REISERFS (device loop2): checking transaction log (loop2) [ 276.238984][T10084] REISERFS (device loop2): Using r5 hash to sort names [ 276.260873][T10084] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 276.303216][T10084] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 276.419019][T10091] loop4: detected capacity change from 0 to 256 [ 276.468254][T10091] exfat: Deprecated parameter 'utf8' [ 276.538858][T10091] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 276.926721][ T43] team0 (unregistering): Port device team_slave_1 removed [ 276.960539][ T5085] Bluetooth: hci1: command tx timeout [ 277.029770][ T43] team0 (unregistering): Port device team_slave_0 removed [ 277.041649][ T176] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 277.055023][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.116882][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.233629][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.245848][ T176] usb 3-1: Using ep0 maxpacket: 32 [ 277.262371][ T176] usb 3-1: unable to get BOS descriptor or descriptor too short [ 277.287534][ T176] usb 3-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 277.307728][ T176] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.328186][ T176] usb 3-1: Product: syz [ 277.332581][ T176] usb 3-1: Manufacturer: syz [ 277.337359][ T176] usb 3-1: SerialNumber: syz [ 277.921552][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.052426][ T176] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 278.091009][ T43] bond0 (unregistering): Released all slaves [ 278.157736][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.187213][ T176] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 278.231123][ T176] usb 3-1: USB disconnect, device number 11 [ 278.286215][ T5764] udevd[5764]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 278.322209][T10109] loop4: detected capacity change from 0 to 32768 [ 278.384022][ T9970] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.391276][ T9970] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.401873][ T9970] bridge_slave_1: entered allmulticast mode [ 278.404122][ T28] audit: type=1800 audit(1786044990.446:62): pid=10109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1723" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 278.440842][ T9970] bridge_slave_1: entered promiscuous mode [ 278.566067][ T9970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.627817][ T9970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.713532][T10112] loop3: detected capacity change from 0 to 512 [ 278.776584][T10112] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 278.884950][T10112] EXT4-fs (loop3): 1 truncate cleaned up [ 278.892191][T10112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.930339][ T9970] team0: Port device team_slave_0 added [ 278.972073][ T9970] team0: Port device team_slave_1 added [ 279.096956][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.144271][ T9970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.191168][ T9970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.256300][ T5085] Bluetooth: hci1: command tx timeout [ 279.268971][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.328305][ T9970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.423637][ T9970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.444603][ T9970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.521542][ T9970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.684390][ T9970] hsr_slave_0: entered promiscuous mode [ 279.692851][ T9970] hsr_slave_1: entered promiscuous mode [ 279.700015][ T9970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.708024][ T9970] Cannot create hsr debugfs directory [ 280.045277][ T9970] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 280.058360][ T9970] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 280.077089][ T9970] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 280.093393][ T9970] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 280.206506][ T9970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.238688][ T9970] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.270998][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.278284][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.291463][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.299842][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.382527][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.685545][ T9970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.115091][ T9970] veth0_vlan: entered promiscuous mode [ 281.143371][ T9970] veth1_vlan: entered promiscuous mode [ 281.150685][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.193173][ T9970] veth0_macvtap: entered promiscuous mode [ 281.211658][ T9970] veth1_macvtap: entered promiscuous mode [ 281.254010][ T9970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.266952][ T9970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.277557][ T9970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.296127][ T9970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.306136][ T9970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.325810][ T9970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.336320][ T9970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.352601][ T9970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.366238][ T9970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.379824][ T9970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.391322][ T9970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.401522][ T9970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.413656][ T9970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.417346][ T5085] Bluetooth: hci1: command tx timeout [ 281.424865][ T9970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.448773][ T9970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.461857][ T9970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.492201][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.500505][ T9970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.513351][ T9970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.532717][ T9970] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.543124][ T9970] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.560824][ T9970] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.573248][ T9970] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.738440][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.746352][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.836293][ T2944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.848739][ T2944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.255080][T10186] loop2: detected capacity change from 0 to 512 [ 282.307437][T10186] EXT4-fs (loop2): Test dummy encryption mode enabled [ 282.314325][T10186] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 282.417895][T10186] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.1730: bad orphan inode 131083 [ 282.469898][T10186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.603875][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.648676][T10186] overlayfs: upper fs needs to support d_type. [ 282.822909][ T5780] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /413/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 283.390044][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.469931][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.715712][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.750950][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.791011][T10207] loop4: detected capacity change from 0 to 32768 [ 283.812604][T10207] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.1735 (10207) [ 283.877725][T10207] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 283.928772][T10207] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 283.938342][T10207] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 283.972273][T10207] BTRFS info (device loop4): use zstd compression, level 3 [ 284.003183][T10207] BTRFS info (device loop4): use no compression [ 284.015216][T10207] BTRFS info (device loop4): using free space tree [ 284.169853][T10207] BTRFS info (device loop4): enabling ssd optimizations [ 284.206713][T10207] BTRFS info (device loop4): auto enabling async discard [ 284.277229][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.399821][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.411818][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.449967][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.556487][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.596202][ T7387] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 284.690312][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 284.714761][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 284.741631][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 284.769587][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 284.788567][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 284.806002][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 284.826963][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.047843][T10248] loop5: detected capacity change from 0 to 1024 [ 285.120258][T10248] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 285.384740][T10248] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #3: block 2: comm syz.5.1749: lblock 2 mapped to illegal pblock 2 (length 1) [ 285.522003][T10248] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 285.555162][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 285.567715][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 285.580473][T10248] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #3: block 48: comm syz.5.1749: lblock 0 mapped to illegal pblock 48 (length 1) [ 285.590645][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 285.642904][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 285.677554][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 285.685981][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 285.695395][T10248] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 285.711001][T10248] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.1749: Failed to acquire dquot type 0 [ 285.722992][T10248] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 285.793930][T10248] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.1749: mark_inode_dirty error [ 285.825865][T10248] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 285.917410][T10248] EXT4-fs (loop5): 1 orphan inode deleted [ 285.924587][T10248] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.949566][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.961594][ T1073] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 286.044346][ T1073] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 286.071793][ T1073] EXT4-fs error (device loop5): ext4_release_dquot:6989: comm kworker/u4:5: Failed to release dquot type 0 [ 286.188754][T10268] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 286.301609][ T9970] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.324775][ T43] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 286.346308][ T43] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 286.365411][ T43] EXT4-fs error (device loop5): ext4_release_dquot:6989: comm kworker/u4:3: Failed to release dquot type 0 [ 286.433825][ T9970] EXT4-fs error (device loop5): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 286.490452][ T9970] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 286.517409][ T9970] EXT4-fs error (device loop5): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 286.973992][T10240] chnl_net:caif_netlink_parms(): no params data found [ 287.050642][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.062518][ T5781] Bluetooth: hci0: command tx timeout [ 287.367577][T10280] loop4: detected capacity change from 0 to 32768 [ 287.728998][T10255] chnl_net:caif_netlink_parms(): no params data found [ 287.745175][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.844510][T10308] loop4: detected capacity change from 0 to 512 [ 287.873078][T10308] EXT4-fs (loop4): Test dummy encryption mode enabled [ 287.879912][T10308] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 287.905663][T10309] Bluetooth: MGMT ver 1.22 [ 287.916086][ T5781] Bluetooth: hci3: command tx timeout [ 287.926509][T10308] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.1761: bad orphan inode 131083 [ 287.940810][T10308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.043725][T10308] overlayfs: upper fs needs to support d_type. [ 288.163016][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.228849][ T7387] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /327/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 288.397234][T10240] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.404457][T10240] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.420889][ T11] IPVS: stopping backup sync thread 7843 ... [ 288.440913][T10240] bridge_slave_0: entered allmulticast mode [ 288.467175][T10240] bridge_slave_0: entered promiscuous mode [ 288.506050][T10240] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.513257][T10240] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.534560][T10240] bridge_slave_1: entered allmulticast mode [ 288.542757][T10240] bridge_slave_1: entered promiscuous mode [ 288.671596][T10319] loop5: detected capacity change from 0 to 512 [ 288.732174][T10319] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 288.843051][T10240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.896872][ T9970] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.913305][T10240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.917512][ T7387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.154326][T10255] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.185285][T10255] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.201626][T10255] bridge_slave_0: entered allmulticast mode [ 289.240725][T10255] bridge_slave_0: entered promiscuous mode [ 289.273698][ T5781] Bluetooth: hci0: command tx timeout [ 289.279540][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.394054][T10240] team0: Port device team_slave_0 added [ 289.414187][T10255] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.421502][T10255] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.446238][T10255] bridge_slave_1: entered allmulticast mode [ 289.453820][T10255] bridge_slave_1: entered promiscuous mode [ 289.551067][T10240] team0: Port device team_slave_1 added [ 289.635653][ T11] hsr_slave_0: left promiscuous mode [ 289.653126][ T11] hsr_slave_1: left promiscuous mode [ 289.664406][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.674138][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.682790][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.701523][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.710461][ T11] bridge_slave_1: left allmulticast mode [ 289.722845][ T11] bridge_slave_1: left promiscuous mode [ 289.729999][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.766931][ T11] bridge_slave_0: left allmulticast mode [ 289.772857][ T11] bridge_slave_0: left promiscuous mode [ 289.794836][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.875344][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.893449][ T11] veth1_macvtap: left promiscuous mode [ 289.899233][ T11] veth0_macvtap: left promiscuous mode [ 289.905093][ T11] veth1_vlan: left promiscuous mode [ 289.923023][ T11] @ÿ: left promiscuous mode [ 290.128719][ T5781] Bluetooth: hci3: command tx timeout [ 290.188641][ T11] bond1 (unregistering): Released all slaves [ 290.270095][ T5085] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 290.297859][ T5085] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 290.314820][ T5085] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 290.356376][ T5085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 290.364657][ T5085] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 290.384003][ T5085] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 290.400482][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.984294][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.050264][ T11] team0 (unregistering): Port device team_slave_1 removed [ 291.115317][ T11] team0 (unregistering): Port device team_slave_0 removed [ 291.190915][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.256785][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.505815][ T5781] Bluetooth: hci0: command tx timeout [ 291.506142][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.799518][ T11] bond0 (unregistering): Released all slaves [ 291.936775][T10255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.959302][T10255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.037951][T10240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.045838][T10240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.073222][T10240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.203017][T10240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.245052][T10240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.311009][T10240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.336593][T10255] team0: Port device team_slave_0 added [ 292.357250][ T5781] Bluetooth: hci3: command tx timeout [ 292.378429][T10255] team0: Port device team_slave_1 added [ 292.619875][ T5781] Bluetooth: hci2: command tx timeout [ 292.629550][T10255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.638733][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.652330][T10255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.727664][T10255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.801237][T10255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.808272][T10255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.861019][T10255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.927760][T10240] hsr_slave_0: entered promiscuous mode [ 292.946725][T10240] hsr_slave_1: entered promiscuous mode [ 293.307387][T10255] hsr_slave_0: entered promiscuous mode [ 293.334591][T10255] hsr_slave_1: entered promiscuous mode [ 293.352999][T10255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.371724][T10255] Cannot create hsr debugfs directory [ 293.720662][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.731020][ T5781] Bluetooth: hci0: command tx timeout [ 294.005950][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.037687][T10343] chnl_net:caif_netlink_parms(): no params data found [ 294.083344][T10374] loop5: detected capacity change from 0 to 32768 [ 294.149171][ T28] audit: type=1800 audit(1786045005.181:63): pid=10374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1779" name="file3" dev="loop5" ino=5 res=0 errno=0 [ 294.193678][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.410118][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.532785][T10240] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 294.549623][T10240] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 294.575373][ T5781] Bluetooth: hci3: command tx timeout [ 294.630802][T10240] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 294.710425][T10240] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 294.822770][T10392] tmpfs: Cannot change global quota limit on remount [ 294.833654][ T5781] Bluetooth: hci2: command tx timeout [ 294.846024][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.145457][T10343] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.160910][T10343] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.171731][T10343] bridge_slave_0: entered allmulticast mode [ 295.193332][T10343] bridge_slave_0: entered promiscuous mode [ 295.240681][T10343] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.247963][T10343] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.263138][T10403] loop5: detected capacity change from 0 to 4096 [ 295.282422][T10343] bridge_slave_1: entered allmulticast mode [ 295.292802][T10403] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 295.304546][T10343] bridge_slave_1: entered promiscuous mode [ 295.351201][T10403] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 295.419075][T10255] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 295.443358][T10403] ntfs: volume version 3.1. [ 295.467411][T10403] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Directory index record with vcn 0x0 is corrupt. Corrupt inode 0x5. Run chkdsk. [ 295.516056][T10403] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 295.544051][T10403] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 295.554541][T10255] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 295.571889][T10255] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 295.625908][T10343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.681075][T10343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.726174][T10255] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 295.948968][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.007391][T10343] team0: Port device team_slave_0 added [ 296.024659][T10343] team0: Port device team_slave_1 added [ 296.100228][T10343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.131017][T10343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.160549][T10343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.212171][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.247730][T10343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.263274][T10343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.290791][T10343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.382150][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.418396][T10343] hsr_slave_0: entered promiscuous mode [ 296.425434][T10343] hsr_slave_1: entered promiscuous mode [ 296.432079][T10343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.445574][T10343] Cannot create hsr debugfs directory [ 296.488149][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.593338][T10240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.748256][T10240] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.844567][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.851831][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.967343][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.974587][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.055244][ T5781] Bluetooth: hci2: command tx timeout [ 297.114871][T10255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.264894][ T11] tipc: Left network mode [ 297.716976][T10255] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.864759][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.872021][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.936486][ T1073] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.943890][ T1073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.057065][T10343] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 298.078120][T10343] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 298.098681][T10343] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 298.189475][T10343] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 298.805805][T10240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.267003][T10343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.279555][ T5781] Bluetooth: hci2: command tx timeout [ 299.317948][T10255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.597577][T10343] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.762613][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.769861][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.815668][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.822936][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.164312][ T11] hsr_slave_0: left promiscuous mode [ 300.188445][ T11] hsr_slave_1: left promiscuous mode [ 300.196025][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.212155][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.220059][T10464] loop5: detected capacity change from 0 to 32768 [ 300.243731][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.274036][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.284664][ T11] bridge_slave_1: left allmulticast mode [ 300.293171][ T11] bridge_slave_1: left promiscuous mode [ 300.297413][T10464] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 300.307986][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.317620][ T11] bridge_slave_0: left allmulticast mode [ 300.323329][ T11] bridge_slave_0: left promiscuous mode [ 300.331010][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.350455][ T11] hsr_slave_0: left promiscuous mode [ 300.356638][ T11] hsr_slave_1: left promiscuous mode [ 300.363351][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.372242][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.384909][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.395818][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.404819][ T11] dummy0: left allmulticast mode [ 300.410035][ T11] bridge0: port 3(dummy0) entered disabled state [ 300.420434][ T11] bridge_slave_1: left allmulticast mode [ 300.426442][ T11] bridge_slave_1: left promiscuous mode [ 300.432386][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.448324][ T11] bridge_slave_0: left allmulticast mode [ 300.454078][ T11] bridge_slave_0: left promiscuous mode [ 300.460340][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.494921][T10464] XFS (loop5): Ending clean mount [ 300.556689][ T11] veth1_macvtap: left promiscuous mode [ 300.562654][ T11] veth0_macvtap: left promiscuous mode [ 300.568757][ T11] veth1_vlan: left promiscuous mode [ 300.574662][ T11] veth0_vlan: left promiscuous mode [ 300.585148][ T11] veth1_macvtap: left promiscuous mode [ 300.590768][ T11] veth0_macvtap: left promiscuous mode [ 300.597748][ T11] veth1_vlan: left promiscuous mode [ 300.603165][ T11] veth0_vlan: left promiscuous mode [ 300.690526][ T9970] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 302.323104][ T11] team0 (unregistering): Port device team_slave_1 removed [ 302.386716][ T11] team0 (unregistering): Port device team_slave_0 removed [ 302.447758][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.516845][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.019220][ T11] bond0 (unregistering): Released all slaves [ 303.077395][T10505] slcan: can't register candev [ 303.084480][T10505] Falling back ldisc for ptm0. [ 303.958661][ T11] team0 (unregistering): Port device team_slave_1 removed [ 304.017129][ T11] team0 (unregistering): Port device team_slave_0 removed [ 304.082363][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.148577][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.630610][ T11] bond0 (unregistering): Released all slaves [ 304.854973][T10240] veth0_vlan: entered promiscuous mode [ 304.940973][T10255] veth0_vlan: entered promiscuous mode [ 304.979770][T10240] veth1_vlan: entered promiscuous mode [ 305.023357][T10255] veth1_vlan: entered promiscuous mode [ 305.189434][T10240] veth0_macvtap: entered promiscuous mode [ 305.236272][T10240] veth1_macvtap: entered promiscuous mode [ 305.289527][T10255] veth0_macvtap: entered promiscuous mode [ 305.327676][T10240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.338519][T10240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.351834][T10240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.362737][T10240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.394338][T10240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.410557][T10240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.421687][T10240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.436155][T10240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.467487][T10240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.493662][T10240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.541982][T10255] veth1_macvtap: entered promiscuous mode [ 305.592837][T10255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.623000][T10255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.639899][T10255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.660776][T10255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.672336][T10255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.683271][T10255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.710078][T10255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.755887][T10343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.791420][T10240] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.810016][T10240] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.818800][T10240] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.843005][T10240] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.880634][T10255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.905734][T10255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.915626][T10255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.933306][T10255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.959235][T10255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.969735][T10255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.986434][T10255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.026107][T10255] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.045356][T10255] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.054187][T10255] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.063723][T10255] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.381779][ T1073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.401448][ T1073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.529311][ T1082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.538743][ T1082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.634232][T10343] veth0_vlan: entered promiscuous mode [ 306.663942][T10343] veth1_vlan: entered promiscuous mode [ 306.681860][ T1082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.727128][ T1082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.830795][ T1073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.847090][ T1073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.887710][T10343] veth0_macvtap: entered promiscuous mode [ 306.919716][T10343] veth1_macvtap: entered promiscuous mode [ 306.978329][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.004840][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.016763][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.030478][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.040824][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.060559][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.073979][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.093476][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.116284][T10343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.170319][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.210128][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.220390][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.293465][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.331444][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.386903][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.414530][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.461164][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.480259][T10343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.503634][T10343] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.541233][T10343] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.550007][T10343] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.616012][T10343] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.844109][T10540] loop6: detected capacity change from 0 to 32768 [ 307.871005][ T1082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.930702][ T1082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.950751][T10540] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 scanned by syz.6.1743 (10540) [ 308.014412][T10540] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 308.056126][T10540] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 308.083466][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.085232][T10540] BTRFS info (device loop6): enabling auto defrag [ 308.102524][T10540] BTRFS info (device loop6): force clearing of disk cache [ 308.111742][T10540] BTRFS info (device loop6): ignoring data csums [ 308.123743][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.138149][T10540] BTRFS info (device loop6): turning on async discard [ 308.154034][T10540] BTRFS info (device loop6): setting nodatacow, compression disabled [ 308.197100][T10540] BTRFS info (device loop6): turning off async discard [ 308.243530][T10540] BTRFS info (device loop6): disabling free space tree [ 308.663835][T10240] BTRFS info (device loop6: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 308.712061][T10589] loop8: detected capacity change from 0 to 736 [ 308.973700][ T788] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 309.231972][ T788] usb 6-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 309.252125][ T788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.306779][ T788] usb 6-1: config 0 descriptor?? [ 309.637400][T10605] loop7: detected capacity change from 0 to 512 [ 309.648600][T10604] loop8: detected capacity change from 0 to 1024 [ 309.776412][T10605] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.793486][ T788] samsung 0003:0419:0001.0016: unknown main item tag 0x0 [ 309.887311][ T788] samsung 0003:0419:0001.0016: unknown main item tag 0x0 [ 309.905001][T10605] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.944114][ T788] samsung 0003:0419:0001.0016: unknown main item tag 0x0 [ 309.978438][ T788] samsung 0003:0419:0001.0016: unknown main item tag 0x0 [ 309.985607][ T788] samsung 0003:0419:0001.0016: unknown main item tag 0x0 [ 310.083527][ T788] samsung 0003:0419:0001.0016: unknown main item tag 0x0 [ 310.106696][ T788] samsung 0003:0419:0001.0016: unknown main item tag 0x0 [ 310.128030][ T788] samsung 0003:0419:0001.0016: unknown main item tag 0x0 [ 310.188358][ T788] samsung 0003:0419:0001.0016: hidraw0: USB HID vf0.00 Device [HID 0419:0001] on usb-dummy_hcd.5-1/input0 [ 310.271094][ T788] usb 6-1: USB disconnect, device number 2 [ 310.348126][T10255] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.473137][T10622] fido_id[10622]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 310.696073][T10632] loop6: detected capacity change from 0 to 2048 [ 310.777140][T10632] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 311.283159][T10653] netlink: 54775 bytes leftover after parsing attributes in process `syz.8.1834'. [ 311.520835][T10659] loop7: detected capacity change from 0 to 256 [ 311.559248][T10659] exfat: Bad value for 'time_offset' [ 311.568226][T10661] 9pnet_fd: p9_fd_create_tcp (10661): problem binding to privport [ 311.812194][T10664] loop8: detected capacity change from 0 to 4096 [ 311.958334][T10673] loop7: detected capacity change from 0 to 128 [ 312.069811][T10673] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 312.124290][T10673] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.293829][T10682] loop5: detected capacity change from 0 to 128 [ 312.336943][T10673] EXT4-fs warning (device loop7): ext4_group_extend:1892: will only finish group (8193 blocks, 8129 new) [ 312.386843][T10673] EXT4-fs warning (device loop7): ext4_group_extend:1897: can't read last block, resize aborted [ 312.439601][ T5813] kernel write not supported for file /sg0 (pid: 5813 comm: kworker/1:5) [ 312.510452][T10255] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 312.841184][T10699] vivid-001: disconnect [ 312.875950][T10698] vivid-001: reconnect [ 313.752488][T10726] sit0: entered promiscuous mode [ 313.810489][T10726] netlink: 'syz.6.1861': attribute type 1 has an invalid length. [ 313.905910][T10726] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1861'. [ 313.955480][T10728] loop5: detected capacity change from 0 to 2048 [ 314.011586][T10728] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 314.039516][T10728] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 314.058556][T10728] UDF-fs: Scanning with blocksize 512 failed [ 314.098925][T10731] loop7: detected capacity change from 0 to 8192 [ 314.177502][T10728] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 314.223744][T10737] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 315.051326][T10761] loop7: detected capacity change from 0 to 256 [ 315.138078][T10761] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d) [ 315.216441][ T5809] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 315.291214][T10764] netlink: 'syz.6.1874': attribute type 3 has an invalid length. [ 315.308074][T10764] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1874'. [ 315.404247][T10735] loop8: detected capacity change from 0 to 40427 [ 315.452241][T10735] F2FS-fs (loop8): Fix alignment : internally, start(4096) end(16896) block(12288) [ 315.465898][ T5809] usb 6-1: config 0 interface 0 has no altsetting 0 [ 315.472962][ T5809] usb 6-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 315.484005][ T5809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.507672][ T5809] usb 6-1: config 0 descriptor?? [ 315.513194][T10735] F2FS-fs (loop8): invalid crc value [ 315.544137][T10735] F2FS-fs (loop8): invalid crc value [ 315.581185][T10735] F2FS-fs (loop8): Failed to get valid F2FS checkpoint [ 315.665104][T10771] syz.7.1876 (10771): /proc/10770/oom_adj is deprecated, please use /proc/10770/oom_score_adj instead. [ 316.012143][ T5809] logitech 0003:046D:C219.0017: unknown main item tag 0x1 [ 316.049847][ T5809] logitech 0003:046D:C219.0017: unknown main item tag 0x6 [ 316.068018][ T5809] logitech 0003:046D:C219.0017: unknown main item tag 0x4 [ 316.129129][ T5809] logitech 0003:046D:C219.0017: hidraw0: USB HID v10.00 Device [HID 046d:c219] on usb-dummy_hcd.5-1/input0 [ 316.165206][ T5809] logitech 0003:046D:C219.0017: no inputs found [ 316.173416][T10780] loop7: detected capacity change from 0 to 1024 [ 316.228051][T10780] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 316.302368][ T5809] usb 6-1: USB disconnect, device number 3 [ 316.430341][T10785] fido_id[10785]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 317.207165][T10813] loop8: detected capacity change from 0 to 256 [ 317.610191][T10820] loop8: detected capacity change from 0 to 4096 [ 317.672881][T10827] loop5: detected capacity change from 0 to 64 [ 317.730286][T10829] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 317.742797][T10820] NILFS error (device loop8): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 317.799601][T10820] NILFS (loop8): mounting fs with errors [ 317.883303][ T9970] hfs: node 4:3 still has 1 user(s)! [ 318.385162][T10841] loop5: detected capacity change from 0 to 8192 [ 318.483611][T10841] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 318.883310][T10857] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1899'. [ 318.906976][T10857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1899'. [ 318.928376][T10857] netlink: 'syz.5.1899': attribute type 6 has an invalid length. [ 318.936494][T10857] netlink: 'syz.5.1899': attribute type 5 has an invalid length. [ 319.383164][T10872] loop8: detected capacity change from 0 to 256 [ 319.393967][T10874] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 319.533550][ T28] audit: type=1800 audit(1786045028.915:64): pid=10872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1905" name="bus" dev="loop8" ino=1048780 res=0 errno=0 [ 319.717569][T10882] mkiss: ax0: crc mode is auto. [ 319.814006][T10886] overlayfs: workdir and upperdir must be separate subtrees [ 320.816918][T10879] loop7: detected capacity change from 0 to 32768 [ 320.973711][T10919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.553712][T10942] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1930'. [ 321.595031][T10942] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1930'. [ 321.607207][T10942] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1930'. [ 321.695286][T10942] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1930'. [ 322.005966][T10953] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1934'. [ 322.353328][T10962] loop7: detected capacity change from 0 to 256 [ 322.718558][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.938066][T10946] loop6: detected capacity change from 0 to 40427 [ 322.981296][T10946] F2FS-fs (loop6): invalid crc value [ 323.006362][T10946] F2FS-fs (loop6): Found nat_bits in checkpoint [ 323.019278][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 323.179811][T10946] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 323.254431][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 323.282222][ T9] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 323.329310][ T9] usb 8-1: config 0 has no interface number 0 [ 323.335521][ T9] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 576 [ 323.382634][ T9] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 323.427050][ T9] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 323.441892][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.468424][ T9] usb 8-1: Product: syz [ 323.473011][ T9] usb 8-1: Manufacturer: syz [ 323.477673][ T9] usb 8-1: SerialNumber: syz [ 323.501768][ T9] usb 8-1: config 0 descriptor?? [ 323.507722][T10970] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 323.526954][T10970] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 323.778584][T10970] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 323.810331][T10970] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 324.055418][T10240] syz-executor: attempt to access beyond end of device [ 324.055418][T10240] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 324.128804][T10240] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 324.289255][ T9] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 324.334958][ T9] asix: probe of 8-1:0.188 failed with error -71 [ 324.367076][ T9] usb 8-1: USB disconnect, device number 2 [ 324.390168][ T5764] udevd[5764]: setting owner of /dev/bus/usb/008/002 to uid=0, gid=0 failed: No such file or directory [ 324.597234][T11007] loop8: detected capacity change from 0 to 1024 [ 325.407855][T11003] loop5: detected capacity change from 0 to 32768 [ 325.472680][T11003] jfs_lookup: dtSearch returned -5 [ 325.487581][T11023] loop7: detected capacity change from 0 to 4096 [ 325.576947][T11030] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 325.983301][T11035] netem: change failed [ 326.124739][T11038] loop6: detected capacity change from 0 to 64 [ 326.297933][T11041] loop7: detected capacity change from 0 to 512 [ 326.354591][T11041] EXT4-fs warning (device loop7): dx_probe:869: inode #2: comm syz.7.1959: Unimplemented hash flags: 0x0001 [ 326.474771][T11041] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.1959: Corrupt directory, running e2fsck is recommended [ 326.562218][T11041] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 326.609918][T11041] EXT4-fs error (device loop7): ext4_iget_extra_inode:4740: inode #15: comm syz.7.1959: corrupted in-inode xattr: invalid ea_ino [ 326.654392][T11041] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.1959: couldn't read orphan inode 15 (err -117) [ 326.688978][T11041] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.716808][T11026] loop8: detected capacity change from 0 to 32768 [ 326.755407][T11041] EXT4-fs warning (device loop7): dx_probe:869: inode #2: comm syz.7.1959: Unimplemented hash flags: 0x0001 [ 326.783787][T11026] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.1954 (11026) [ 326.801651][T11041] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.1959: Corrupt directory, running e2fsck is recommended [ 326.875041][T11041] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 3: comm syz.7.1959: path /37/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 326.906533][T11026] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 326.955171][T11041] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 2: comm syz.7.1959: path /37/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=4, size=1024 fake=0 [ 326.961461][T11026] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 327.026036][T11026] BTRFS info (device loop8): setting nodatasum [ 327.044178][T11026] BTRFS info (device loop8): force zlib compression, level 3 [ 327.067276][T11041] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 8: comm syz.7.1959: path /37/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33261, rec_len=1050, size=1024 fake=0 [ 327.085048][T11026] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_LZO (0x8) [ 327.118332][T11026] BTRFS info (device loop8): use lzo compression, level 0 [ 327.157588][T11026] BTRFS info (device loop8): turning on flush-on-commit [ 327.210389][T11026] BTRFS info (device loop8): enabling auto defrag [ 327.216969][T11026] BTRFS info (device loop8): max_inline at 4096 [ 327.267588][T11026] BTRFS info (device loop8): using free space tree [ 327.296700][T10255] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.605107][T11026] BTRFS info (device loop8): enabling ssd optimizations [ 327.754813][T11026] BTRFS info (device loop8): Snapshot src from another FS [ 327.883060][T10343] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 328.131621][ T5764] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop8 scanned by udevd (5764) [ 328.350633][T11056] loop5: detected capacity change from 0 to 32768 [ 328.599174][T11056] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 328.762454][T11056] XFS (loop5): Ending clean mount [ 329.300020][T11122] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1973'. [ 329.395047][ T9970] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 330.155545][T11142] IPVS: stopping backup sync thread 11140 ... [ 330.164187][T11140] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan1, syncid = 4, id = 0 [ 330.189137][T11139] loop7: detected capacity change from 0 to 1024 [ 330.300527][T11139] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 330.591833][T11150] loop8: detected capacity change from 0 to 128 [ 330.673230][T11150] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 330.730118][T11150] hpfs: filesystem error: improperly stopped [ 330.768072][T11150] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 330.812266][T11150] hpfs: You really don't want any checks? You are crazy... [ 330.820034][T11150] hpfs: hpfs_map_sector(): read error [ 330.904390][T11150] hpfs: code page support is disabled [ 330.921183][T11150] hpfs: hpfs_map_4sectors(): unaligned read [ 330.987800][T11150] hpfs: hpfs_map_4sectors(): unaligned read [ 331.025642][T11150] hpfs: filesystem error: unable to find root dir [ 331.058023][T11160] netlink: 'syz.6.1985': attribute type 1 has an invalid length. Stopping sshd: stopped /usr/sbin/sshd (pid 5530) OK Stopping crond: [ 331.936560][T11143] loop5: detected capacity change from 0 to 40427 [ 331.987233][T11184] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 331.993883][T11184] [U] J"—e:ÀÆ" [ 332.025399][T11143] F2FS-fs (loop5): invalid crc value [ 332.130718][T11143] F2FS-fs (loop5): Found nat_bits in checkpoint stopped /usr/sbin/crond (pid 5513) OK [ 332.511870][T11143] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 332.740806][T11204] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() Stopping dhcpcd... [ 332.995728][ T9970] syz-executor: attempt to access beyond end of device [ 332.995728][ T9970] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 333.063230][ T9970] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 333.091473][ T9970] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 333.156026][T11214] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2004'. stopped /sbin/dhcpcd (pid 5434) Stopping network: [ 335.445829][T11281] loop6: detected capacity change from 0 to 2048 [ 335.454434][T11283] loop7: detected capacity change from 0 to 512 [ 335.495042][T11283] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 335.529385][T11281] NILFS (loop6): invalid segment: Magic number mismatch [ 335.552721][T11281] NILFS (loop6): trying rollback from an earlier position [ 335.603969][T11281] NILFS (loop6): recovery complete [ 335.660367][T11285] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds OK [ 335.777805][T11281] NILFS (loop6): nilfs_ioctl_move_inode_block: invalid virtual block address (data): ino=3, cno=3, offset=234, blocknr=0, vblocknr=107374182 [ 335.842939][T11281] NILFS (loop6): error -2 preparing GC: cannot read source blocks Stopping iptables: OK [ 336.337246][T11303] fuse: Unknown parameter '01777777777777777777777ÿÿÿÿÿÿÿÿ' Stopping system message bus: [ 336.464838][T11266] loop8: detected capacity change from 0 to 32768 [ 337.514277][ T23] usb 6-1: new full-speed USB device number 4 using dummy_hcd done [ 337.752596][ T23] usb 6-1: config 0 interface 0 has no altsetting 0 [ 337.759336][ T23] usb 6-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 337.797477][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.855208][ T23] usb 6-1: config 0 descriptor?? [ 338.319044][ T23] hid (null): unknown global tag 0xe [ 338.348746][ T23] uclogic 0003:5543:0781.0018: unknown global tag 0xe [ 338.379629][ T23] uclogic 0003:5543:0781.0018: item 0 4 1 14 parsing failed [ 338.403327][ T23] uclogic 0003:5543:0781.0018: parse failed [ 338.409435][ T23] uclogic: probe of 0003:5543:0781.0018 failed with error -22 [ 338.537874][ T23] usb 6-1: USB disconnect, device number 4 [ 338.728462][T11351] loop8: detected capacity change from 0 to 4096 [ 338.755128][T11351] ntfs: (device loop8): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 338.775594][ C0] vkms_vblank_simulate: vblank timer overrun [ 338.817679][T11351] ntfs: (device loop8): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 338.900667][T11351] ntfs: (device loop8): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 338.927400][T11351] ntfs: (device loop8): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 338.989384][T11351] ntfs: (device loop8): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 338.998200][T11351] ntfs: (device loop8): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 339.055603][T11351] ntfs: (device loop8): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 339.074808][T11351] ntfs: (device loop8): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 339.139545][T11351] ntfs: (device loop8): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 339.170273][T11351] ntfs: (device loop8): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 339.245748][T11351] ntfs: volume version 3.1. Stopping klogd: [ 340.101371][T11384] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2053'. OK Stopping acpid: [ 340.819752][T11408] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 341.189242][T11422] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 341.724964][T11431] loop8: detected capacity change from 0 to 8192 [ 341.773277][T11431] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 341.834761][T11431] REISERFS (device loop8): found reiserfs format "3.6" with non-standard journal [ 341.876484][T11431] REISERFS (device loop8): using ordered data mode [ 341.883127][T11431] reiserfs: using flush barriers [ 341.937308][T11441] loop7: detected capacity change from 0 to 512 [ 341.957429][T11431] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 341.988339][T11441] EXT4-fs (loop7): Test dummy encryption mode enabled [ 341.994576][T11431] REISERFS (device loop8): checking transaction log (loop8) [ 342.022887][T11441] EXT4-fs error (device loop7): ext4_orphan_get:1404: inode #15: comm syz.7.2079: inode has both inline data and extents flags [ 342.031051][T11431] REISERFS (device loop8): Using r5 hash to sort names [ 342.043677][T11441] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.2079: couldn't read orphan inode 15 (err -117) [ 342.057551][T11441] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.079010][T11431] REISERFS warning (device loop8): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 342.121079][T11431] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. OK [ 342.188075][T10255] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. Stopping syslogd: stopped /sbin/syslogd (pid 5122) OK [ 342.814134][T11470] loop6: detected capacity change from 0 to 512 [ 342.938666][T11470] EXT4-fs (loop6): 1 orphan inode deleted [ 342.958316][T11470] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.976940][ T1073] EXT4-fs error (device loop6): ext4_release_dquot:6989: comm kworker/u4:5: Failed to release dquot type 1 [ 342.988674][T11470] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) umount: can't remount debugfs read-only [ 343.256105][T10240] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.616172][T11498] loop6: detected capacity change from 0 to 16 [ 343.634068][T11498] erofs: (device loop6): mounted with root inode @ nid 36. [ 343.810225][ T5813] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 344.030502][ T5813] usb 6-1: Using ep0 maxpacket: 32 [ 344.092415][ T5813] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 344.109129][ T5813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.147340][ T5813] usb 6-1: config 0 descriptor?? [ 344.165233][ T5813] gspca_main: sq930x-2.14.0 probing 041e:403c [ 344.565293][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 344.565310][ T28] audit: type=1326 audit(1786045052.340:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11500 comm="syz.7.2103" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83a39e0d9 code=0x7fc00000 [ 344.631791][ T28] audit: type=1326 audit(1786045052.340:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11500 comm="syz.7.2103" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff83a39e0d9 code=0x7fc00000 [ 344.777173][ T28] audit: type=1326 audit(1786045052.340:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11500 comm="syz.7.2103" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83a39e0d9 code=0x7fc00000 [ 344.889784][ T5813] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 344.895813][ T5813] sq930x: probe of 6-1:0.0 failed with error -71 [ 344.931063][ T5813] usb 6-1: USB disconnect, device number 5 [ 344.998506][T11530] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 345.186598][ T28] audit: type=1326 audit(1786045052.920:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11531 comm="syz.6.2115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a899e0d9 code=0x7ff00000 [ 345.271107][ T28] audit: type=1326 audit(1786045052.920:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11531 comm="syz.6.2115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a899e0d9 code=0x7ff00000 [ 345.309537][ T28] audit: type=1326 audit(1786045052.920:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11531 comm="syz.6.2115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a899e0d9 code=0x7ff00000 [ 345.341774][ T28] audit: type=1326 audit(1786045052.920:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11531 comm="syz.6.2115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a899e0d9 code=0x7ff00000 [ 345.409956][ T28] audit: type=1326 audit(1786045052.920:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11531 comm="syz.6.2115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a899e0d9 code=0x7ff00000 [ 345.453577][ T28] audit: type=1326 audit(1786045052.920:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11531 comm="syz.6.2115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a899e0d9 code=0x7ff00000 [ 345.537622][ T28] audit: type=1326 audit(1786045052.920:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11531 comm="syz.6.2115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a899e0d9 code=0x7ff00000 [ 346.068514][T11552] loop6: detected capacity change from 0 to 256 [ 346.190060][T11557] loop5: detected capacity change from 0 to 1024 [ 346.227582][T11557] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 346.235839][T11557] System zones: 0-1, 3-36 [ 346.336806][T11557] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.2127: bad orphan inode 134217728 [ 346.409540][T11557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.534590][ T9970] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.727827][T11563] autofs4:pid:11563:autofs_fill_super: called with bogus options [ 346.783147][T11565] xt_l2tp: v2 tid > 0xffff: 1114116 umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.72 closed by remote host. [ 348.133870][ T1073] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Sent SIGKILL to all processes [ 348.241371][ T1073] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Requesting system poweroff [ 348.364778][ T1073] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.503690][ T1073] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.355683][T11566] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 349.367277][T11566] ACPI: PM: Preparing to enter system sleep state S5 [ 349.376890][T11566] kvm: exiting hardware virtualization [ 349.384427][T11566] reboot: Power down serialport: VM disconnected.