last executing test programs: 1.035749396s ago: executing program 3 (id=5868): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0xff) 1.005439307s ago: executing program 3 (id=5872): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r1, 0x7f, 0x0) 979.664359ms ago: executing program 3 (id=5875): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth0_to_bridge\x00', &(0x7f0000000180)=@ethtool_eeprom={0xc, 0x5}}) 939.86932ms ago: executing program 3 (id=5878): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r0, &(0x7f0000000480)=""/177, 0xb1, 0xe0) 917.032241ms ago: executing program 3 (id=5881): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x8}, 0xfffffffffffffc57) 882.155563ms ago: executing program 3 (id=5884): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x1, 0x4, 0x0, 0x0, 0x0) 725.405749ms ago: executing program 0 (id=5898): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x590, 0x3f0, 0x0, 0x200, 0x200, 0x0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x118}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@unspec=@realm={{0x30}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@local}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) 710.16043ms ago: executing program 0 (id=5899): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) 697.44696ms ago: executing program 0 (id=5900): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x4000}}], 0x1, 0x801) 678.290391ms ago: executing program 0 (id=5903): munmap(&(0x7f0000005000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000005000/0x1000)=nil) 645.321482ms ago: executing program 0 (id=5905): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0x4e22, 0x5, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x2c, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x28}, 0x0) 644.965263ms ago: executing program 0 (id=5908): syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x8, 0x105b7, &(0x7f00000105c0)="$eJzs3E1vG1UXAOAzTtO37VtKhFiw60gIKZFqq04/RHcFUvEhUkV8LFiBYzuWW9sTxU5iihAVa8SyfwRW7NnzJ2CFWCCxqwTyzLg0CCTUujFJnkcan7nX12fOtbI5M5EDOLGW0t9+TeJCnI2IhYg4H5GfJ+WRu1mElyLiYkRUHjuScv7RxOmIOBcRFybJi5xJ+dbnD+6vPxyvf/bdg1/Wvmz8cGl+uwbm7ZWI6G8X5/v9ImadIt4p5xt73Tz2r+6VsXijf7ccZ0Xcb2/mGfYb03WNPF7pFOuz7d3hJG71Gs1J7HS38vntQXHB4V5nmif/wJ3GTj5utTfz2B1meezcK+oal/HecFTkaZX5Ps3Tx2g0jcV8e9wu9rN9N4/NwaicL/JmrfZ4EvfKWF4umlmvldex+cRf83/eu93B7jjda+8Mu9kgvVarv1qrX6/Wd7JWe9S+Wm30W9evpsud3mRZddRu9G92sqzTa9eaWX8lXe40m9V6PV1ea292G4O0Xq9dqV2uXlspzy6lb97+MO210uVJfL072B11e8N0K9tJi0+spKu1KzdW0pfr6fvrG+nGe7durW988PHaR7dfW3/7jXJRWdZP70zLSpdXL6+uVuuXq6v1lROz/z/LmuH+zzzdxznpkhvzrgDgyNH/A/Og/48k9P+z7X8rR6//PRb9/xdPvn/9P08lmXcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMy4+L37yVnywV4/+X88+VUy+U4yQiKhHx+99YiNMHci6UeRb/Yf3iX2r4Pok8w+Qa/yuPcxFxszwePv+svwUAAAA4vr69f/HrolsvXpbmXRCHqbhpUzn/yYzyJRGxuPTzjLJVJi8vzihZ/vd9KsYzypbfwDozo2TFLbdTs8r2rywcCGceC0kRKodaDgAAcCgOdgKH24UAAABwmL6adwHMRxLTR5nTZ8H5f94XTwIXIuLsoxEAAABwRCXzLgAAAAB45vL+3+//AQAAwPFW/P4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzBzt2kpg5FcQA/iebp++LJo/NupTNdRpfQYYfFBXQTLsFuoRtwDXbWJRQtJlfaFAuFfFH5/SC53iB/TySTcy8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjSU7FePNxd3jfN2e2baeduAAAAgFO2xXpRfphV89/p+t906X+aZxGRR8Sp3n0UP2qZo5RTfPL94kMNjxFlwuE3Jun4FRFX6Xj51/W/AAAAAOdrs1zNq269Os2GLog+VYs2+Z/rlvKyiChmzy2l5YfTxdt8P2mSdni+x3HbvKxSuYA1bSmsWnIbt5X2JaPaMH03ZNWQ91oOAADQi3on0G8XAgAAQJ9uhi6AYWRx3Mo87gVH2mNNG4I/azMAAADgG8qGLgAAAADoXNn/e/8fAAAAnLfq/X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0aVusF5vlat40Z7dvpp27AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADglf15R4EQCIMw2Lu+M5n7H1YaNDU1qQLh428MBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjzu7/8n5gaZ5K518bS80iydmpsnRp758bRH8bXrwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9uclBUIgCKJgzvjfSd//sJKgZxAhAhoeVdSiAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvuh3v/yfmBpnkrnTxtLxSLJ21di6auw9aBw9GG//BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAudu6fRY4yjgP4M7s7cyYoOU5ZiFXESEQxexv/IdikEA4LxUosl8teWN2oJFeYcIXXWAi+Axtt0whXSSx8BSmsTBmbCLJFBBGrk2f+eJPklBHN7Gbz+cAzz4/Nk5nnmYPjvvPMHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABUZmfDiaruxsNqUXfKz368vbMZ+xt39dGt0dXjscU6aXfaD5xevEf9ec8CAACAZdet8n0I4Wa6txH7zmqe/5+pxsTMv/NYUVd5/u7cX/VV9o/t2ndfv/PXhVaL66QhhK3JdLze2goXWPp2ONlw6LEGY/JnCcUTmm7+Zeu8ufv4LM3vevLF9etvZHm58t8mDQD8H05XfVlUPx/FfjjPiQGwtHplC7X8312d75wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2jDbDc9XdRJCeLJ3UEc3bu9sHtbfGl09XrVj7z3xWf2c8RRpCGFrMh2vt7iWRXay4bhLl698MJpOxxcVD2rxaFiIaSiWq7jP36AAAFgqadlirr+Z7m3Ez5K1EPa/ujP/n4pFdvD/muT/7yfXTtWvVc//w9ZWuNia5v/B9oWPB5cuX3lhcmF0fnx+/OGZ4UvDV9dfe3n4yiB/njLwVAUAAIC/l5Wtnv87a/fu/x+t1aFh/v/h53d/qV+rK//f45/y/0qtPtj0a2FSAAAAD5sjZX/it1+TQ/45ybJP90fb2xeHn+THJMtCXp0pji3P9l/4fb+qVspWz//dtblODgAAAGjJbDe5Y///XK0ODff/v33ujy/r5+yWj1S2JtPx6c2PpufaW87CWqTf/7/PSwUAAGCOjpStvv+f5u//d56qxnRCCM8+XdTlnwE8JP8Xb6vX8//rvc/P1q9Vf///xdZWuJg6/eJ+NMn/+dh+CL1+CxMDAABgKT1Stpj/f0r3Nt7/5uhbmff/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mR/7m0TBsI4Dr++JErcJiOkt/IxAw0VghH4kJAseQYGYCEaKlqLRWAFkMy5pjMUz9P8/sUV9wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy9y90XLxFRROpnijTefJ1eI+It0rZtR+/dLHbnY/Nxm7P9YZLnZ0y/y4gooxjiHACAwVV9q7Lral0vf3J/c/9y/3OreVMvHvprAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAruzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfBQAA//+ermNK") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101, 0x1) 225.98842ms ago: executing program 1 (id=5949): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0\x00', &(0x7f0000000080)=@ethtool_test={0x4e}}) 193.281362ms ago: executing program 1 (id=5952): setitimer(0x1, &(0x7f0000000100)={{0x0, 0xea60}, {0x77359400}}, 0x0) setitimer(0x1, &(0x7f0000000840)={{}, {0x77359400}}, 0x0) 128.978215ms ago: executing program 2 (id=5956): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') lseek(r0, 0xffffeffffffffffe, 0x0) 128.924225ms ago: executing program 1 (id=5957): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='coredump_filter\x00') write$cgroup_int(r0, &(0x7f0000000140)=0x200000000006, 0x12) 128.847525ms ago: executing program 4 (id=5958): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001500)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25df9bfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x20000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x40}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x40}}, 0x0) 128.554644ms ago: executing program 1 (id=5959): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x2}, [], {}, [], {0x10, 0x5}}, 0x24, 0x2) 102.606686ms ago: executing program 2 (id=5960): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f00000011c0)=""/4115, 0x1013}], 0x1, 0xde6, 0x4) 102.257536ms ago: executing program 4 (id=5961): r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={{0x14, 0x3f5}, [], {0x14, 0x3ed}}, 0x28}}, 0x4010) 96.686776ms ago: executing program 2 (id=5962): r0 = socket$inet(0x2, 0x1, 0x0) pwritev(r0, 0x0, 0x0, 0x101, 0x4) 76.088517ms ago: executing program 1 (id=5963): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000008c0)={'tunl0\x00', &(0x7f0000000d80)={'syztnl2\x00', 0x0, 0x700, 0x7, 0x1000, 0x20000008, {{0x5, 0x4, 0x2, 0x2f, 0x14, 0x67, 0x0, 0x12, 0x0, 0x0, @empty, @empty}}}}) 73.609287ms ago: executing program 2 (id=5964): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000010640)={'ip6_vti0\x00', 0x0}) 71.411457ms ago: executing program 4 (id=5965): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x70bd2d, 0x3, {0x7, 0x0, 0x0, 0x0, 0x80, 0x37, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 53.969768ms ago: executing program 2 (id=5966): unshare(0x22020600) fchmod(0xffffffffffffffff, 0x7) 43.944109ms ago: executing program 1 (id=5967): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x0) 40.484279ms ago: executing program 4 (id=5968): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd", 0x1}], 0x1, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x20000041}}], 0x1, 0xc004) 25.798999ms ago: executing program 2 (id=5969): syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) select(0x40, &(0x7f0000000580)={0xf, 0x6, 0x6, 0x8, 0x3ff, 0x1, 0xfff, 0xac}, 0x0, 0x0, 0x0) 476.51µs ago: executing program 4 (id=5970): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x12, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) 0s ago: executing program 4 (id=5971): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xf) kernel console output (not intermixed with test programs): ct=0101, bcdDevice= 0.40 [ 159.407847][ T60] usb 4-1: Using ep0 maxpacket: 8 [ 159.412955][ T833] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 159.420771][ T832] usb 2-1: SerialNumber: syz [ 159.425705][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.434448][ T19] usb 3-1: Product: syz [ 159.439013][ T60] usb 4-1: unable to get BOS descriptor or descriptor too short [ 159.446826][ T19] usb 3-1: Manufacturer: syz [ 159.451892][ T19] usb 3-1: SerialNumber: syz [ 159.456554][ T60] usb 4-1: config 0 has an invalid interface number: 244 but max is 0 [ 159.465384][ T60] usb 4-1: config 0 has no interface number 0 [ 159.471894][ T60] usb 4-1: config 0 interface 244 has no altsetting 0 [ 159.478842][ T6982] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 159.487738][ T60] usb 4-1: New USB device found, idVendor=0df6, idProduct=003d, bcdDevice=65.d5 [ 159.496865][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.504891][ T60] usb 4-1: Product: syz [ 159.509074][ T60] usb 4-1: SerialNumber: syz [ 159.514518][ T60] usb 4-1: config 0 descriptor?? [ 159.621063][ T833] usb 5-1: not running at top speed; connect to a high speed hub [ 159.629644][ T833] usb 5-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 159.639962][ T833] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 159.648989][ T833] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 159.668179][ T832] usb 2-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 159.677459][ T833] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.687286][ T833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.695301][ T527] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 159.703412][ T833] usb 5-1: Product: 縿胵䶭舡Ⴆ裲锿餃滗㏱㹯쫰컃萋뱤聤崮ᅋ쪕曅5켼ᄬ鹭㺙痤⤅䐡슷ࣜ᧒㮆嚨雗傤禆梘↷恴껤峮鹑い픑盋䞁胁㋴鶦䢾稽꧟벎퐃骋䌥袳䮋넷ペ徂謿り虙╓驀脊䮎㚈鬂ಥ浭䞎௑诗쫍Ɡꡢ㍉灪䪯猦ࢅ缜붴焥槳ꇣƻ兟㨝䯠֖埡 [ 159.737125][ T832] usb 2-1: USB disconnect, device number 80 [ 159.743917][ T833] usb 5-1: SerialNumber: п [ 159.751608][ T60] usb 4-1: USB disconnect, device number 74 [ 159.757701][ T19] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 159.766790][ T19] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 159.786874][ T19] usb 3-1: USB disconnect, device number 76 [ 159.890200][ T527] usb 1-1: Using ep0 maxpacket: 8 [ 159.897019][ T527] usb 1-1: unable to get BOS descriptor or descriptor too short [ 159.905656][ T527] usb 1-1: config 2 has an invalid interface number: 184 but max is 0 [ 159.913913][ T527] usb 1-1: config 2 has no interface number 0 [ 159.920015][ T527] usb 1-1: config 2 interface 184 altsetting 200 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 159.931230][ T527] usb 1-1: config 2 interface 184 has no altsetting 0 [ 159.939873][ T527] usb 1-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 2.2c [ 159.949045][ T527] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.957094][ T527] usb 1-1: Product: syz [ 159.961278][ T527] usb 1-1: Manufacturer: syz [ 159.965906][ T527] usb 1-1: SerialNumber: syz [ 159.994939][ T833] cdc_ncm 5-1:1.0: skipping garbage [ 160.000567][ T833] cdc_ncm 5-1:1.0: skipping garbage [ 160.000812][ T4193] udevd[4193]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 160.005893][ T833] cdc_ncm 5-1:1.0: invalid descriptor buffer length [ 160.028566][ T833] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 160.035624][ T833] cdc_ncm 5-1:1.0: bind() failure [ 160.036318][ T720] udevd[720]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 160.042621][ T833] usb 5-1: USB disconnect, device number 75 [ 160.191201][ T527] usb-storage 1-1:2.184: USB Mass Storage device detected [ 160.199145][ T527] usb-storage 1-1:2.184: Quirks match for vid 054c pid 002e: 1 [ 160.251905][ T7032] loop1: detected capacity change from 0 to 8192 [ 160.253264][ T527] usb 1-1: USB disconnect, device number 76 [ 160.262528][ T7032] FAT-fs (loop1): bogus logical sector size 0 [ 160.270907][ T7032] FAT-fs (loop1): Can't find a valid FAT filesystem [ 160.320934][ T7038] IPv6: addrconf: prefix option has invalid lifetime [ 160.572284][ T7076] incfs: Options parsing error. -22 [ 160.577651][ T7076] incfs: mount failed -22 [ 160.617579][ T340] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 160.637753][ T833] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 160.812129][ T340] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.822376][ T340] usb 4-1: too many endpoints for config 1 interface 0 altsetting 7: 255, using maximum allowed: 30 [ 160.833480][ T340] usb 4-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 160.845001][ T833] usb 2-1: unable to get BOS descriptor or descriptor too short [ 160.847085][ T340] usb 4-1: config 1 interface 0 has no altsetting 0 [ 160.868088][ T833] usb 2-1: config 16 has an invalid interface number: 168 but max is 0 [ 160.869783][ T340] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.876438][ T833] usb 2-1: config 16 has no interface number 0 [ 160.876466][ T833] usb 2-1: config 16 interface 168 has no altsetting 0 [ 160.898774][ T527] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 160.906972][ T340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 160.909390][ T833] usb 2-1: New USB device found, idVendor=0403, idProduct=da72, bcdDevice=d8.b8 [ 160.917875][ T340] usb 4-1: SerialNumber: syz [ 160.934969][ T833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.935953][ T340] cdc_acm 4-1:1.0: invalid descriptor buffer length [ 160.950127][ T340] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 160.950843][ T833] usb 2-1: Product: syz [ 160.958491][ T340] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 160.969231][ T340] cdc_acm: probe of 4-1:1.0 failed with error -22 [ 160.982567][ T833] usb 2-1: Manufacturer: syz [ 160.987346][ T833] usb 2-1: SerialNumber: syz [ 161.027702][ T832] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 161.068363][ T7132] syz.0.3259[7132] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.094112][ T527] usb 3-1: config 0 has an invalid interface number: 123 but max is 0 [ 161.113819][ T527] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.124287][ T527] usb 3-1: config 0 has no interface number 0 [ 161.132278][ T527] usb 3-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=97.6d [ 161.141692][ T527] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.149814][ T527] usb 3-1: Product: syz [ 161.154016][ T527] usb 3-1: Manufacturer: syz [ 161.158701][ T527] usb 3-1: SerialNumber: syz [ 161.164349][ T527] usb 3-1: config 0 descriptor?? [ 161.179689][ T527] cdc_acm 3-1:0.123: More than one union descriptor, skipping ... [ 161.182983][ T19] usb 4-1: USB disconnect, device number 75 [ 161.224568][ T833] usb 2-1: NDI device with a latency value of 1 [ 161.231622][ T833] ftdi_sio 2-1:16.168: FTDI USB Serial Device converter detected [ 161.239907][ T833] ftdi_sio ttyUSB0: unknown device type: 0xd8b8 [ 161.246528][ T832] usb 5-1: Using ep0 maxpacket: 8 [ 161.253312][ T833] usb 2-1: USB disconnect, device number 81 [ 161.260682][ T833] ftdi_sio 2-1:16.168: device disconnected [ 161.266701][ T832] usb 5-1: unable to get BOS descriptor or descriptor too short [ 161.276285][ T832] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 161.285326][ T832] usb 5-1: config 1 has no interface number 1 [ 161.291441][ T832] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 161.306139][ T832] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 161.315246][ T832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.323349][ T832] usb 5-1: Product: syz [ 161.327526][ T832] usb 5-1: Manufacturer: syz [ 161.332156][ T832] usb 5-1: SerialNumber: syz [ 161.363519][ T340] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 161.392616][ T527] usb 3-1: USB disconnect, device number 77 [ 161.558465][ T340] usb 1-1: Using ep0 maxpacket: 8 [ 161.564826][ T340] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.570532][ T832] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 161.575284][ T340] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 161.583666][ T832] usb 5-1: 2:1 : sample bitwidth 104 in over sample bytes 6 [ 161.596723][ T340] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 161.604114][ T832] usb 5-1: 2:1 : unsupported sample bitwidth 104 in 6 bytes [ 161.616477][ T340] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.624575][ T832] usb 5-1: USB disconnect, device number 76 [ 161.637154][ T340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.645373][ T340] usb 1-1: Product: syz [ 161.649601][ T340] usb 1-1: Manufacturer: syz [ 161.654192][ T340] usb 1-1: SerialNumber: syz [ 161.660523][ T340] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 161.668085][ T340] cdc_ncm 1-1:1.0: bind() failure [ 161.674397][ T340] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 161.681453][ T340] cdc_ncm 1-1:1.1: bind() failure [ 161.753578][ T7136] SELinux: Context system_u:object_r:man_t:s0 is not valid (left unmapped). [ 161.762695][ T28] audit: type=1400 audit(1764689147.165:258): avc: denied { relabelto } for pid=7135 comm="syz.3.3261" name="554" dev="tmpfs" ino=2833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 161.790018][ T28] audit: type=1400 audit(1764689147.165:259): avc: denied { associate } for pid=7135 comm="syz.3.3261" name="554" dev="tmpfs" ino=2833 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:man_t:s0" [ 161.822609][ T28] audit: type=1400 audit(1764689147.174:260): avc: denied { write } for pid=286 comm="syz-executor" name="554" dev="tmpfs" ino=2833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 161.854244][ T28] audit: type=1400 audit(1764689147.174:261): avc: denied { remove_name } for pid=286 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 161.916778][ T527] usb 1-1: USB disconnect, device number 77 [ 161.939177][ T28] audit: type=1400 audit(1764689147.174:262): avc: denied { rmdir } for pid=286 comm="syz-executor" name="554" dev="tmpfs" ino=2833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 161.968692][ T7160] loop3: detected capacity change from 0 to 512 [ 161.990546][ T7160] EXT4-fs: journaled quota format not specified [ 162.045635][ T28] audit: type=1326 audit(1764691725.425:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7167 comm="syz.3.3277" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f697138f749 code=0x0 [ 162.256863][ T7159] loop1: detected capacity change from 0 to 40427 [ 162.269530][ T7159] F2FS-fs (loop1): fault_injection options not supported [ 162.306040][ T7159] F2FS-fs (loop1): invalid crc value [ 162.322002][ T7159] F2FS-fs (loop1): Found nat_bits in checkpoint [ 162.370394][ T7159] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 162.537329][ T527] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 162.648644][ T7221] IPv6: addrconf: prefix option has invalid lifetime [ 162.655578][ T832] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 162.688927][ T28] audit: type=1400 audit(1764691726.025:264): avc: denied { read } for pid=7223 comm="syz.1.3304" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 162.720613][ T28] audit: type=1400 audit(1764691726.025:265): avc: denied { open } for pid=7223 comm="syz.1.3304" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 162.750031][ T7230] loop1: detected capacity change from 0 to 256 [ 162.755769][ T527] usb 5-1: Using ep0 maxpacket: 16 [ 162.782623][ T527] usb 5-1: config index 0 descriptor too short (expected 1051, got 27) [ 162.791040][ T527] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 162.794349][ T7230] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x368b264c, utbl_chksum : 0xe619d30d) [ 162.813524][ T527] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 162.825551][ T527] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 162.837938][ T7230] exFAT-fs (loop1): IO charset B not found [ 162.844338][ T527] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.863479][ T527] usb 5-1: Product: syz [ 162.867690][ T527] usb 5-1: Manufacturer: syz [ 162.875645][ T527] usb 5-1: SerialNumber: syz [ 162.881368][ T832] usb 4-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 162.894234][ T527] usb 5-1: config 0 descriptor?? [ 162.910202][ T832] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 162.931823][ T832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.952137][ T832] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 163.118664][ T832] usb 5-1: USB disconnect, device number 77 [ 163.171847][ T291] usb 4-1: USB disconnect, device number 76 [ 163.237576][ T19] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 163.280901][ T340] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 163.324231][ T527] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 163.432563][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 163.438831][ T19] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 163.450545][ T19] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 163.460267][ T19] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 163.472721][ T19] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 163.481873][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.489910][ T19] usb 1-1: Product: syz [ 163.494086][ T19] usb 1-1: Manufacturer: syz [ 163.497531][ T340] usb 2-1: Using ep0 maxpacket: 8 [ 163.498724][ T19] usb 1-1: SerialNumber: syz [ 163.505167][ T340] usb 2-1: config 0 has an invalid interface number: 96 but max is 0 [ 163.518803][ T340] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.529075][ T340] usb 2-1: config 0 has no interface number 0 [ 163.535248][ T527] usb 3-1: Using ep0 maxpacket: 8 [ 163.540428][ T340] usb 2-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 163.551986][ T340] usb 2-1: config 0 interface 96 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.565068][ T340] usb 2-1: config 0 interface 96 has no altsetting 0 [ 163.572962][ T527] usb 3-1: unable to get BOS descriptor or descriptor too short [ 163.581276][ T340] usb 2-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 163.590549][ T527] usb 3-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid maxpacket 29440, setting to 1024 [ 163.601783][ T340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.609937][ T527] usb 3-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 1024 [ 163.620004][ T340] usb 2-1: Product: syz [ 163.624205][ T340] usb 2-1: Manufacturer: syz [ 163.628904][ T527] usb 3-1: config 8 interface 0 has no altsetting 0 [ 163.635582][ T340] usb 2-1: SerialNumber: syz [ 163.641357][ T340] usb 2-1: config 0 descriptor?? [ 163.647219][ T527] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 163.656360][ T527] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.664556][ T527] usb 3-1: Product: syz [ 163.668751][ T527] usb 3-1: Manufacturer: syz [ 163.673505][ T527] usb 3-1: SerialNumber: syz [ 163.679404][ T7248] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 163.733206][ T19] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 163.746827][ T19] usb 1-1: unit 8 not found! [ 163.759323][ T19] usb 1-1: USB disconnect, device number 78 [ 163.785444][ T7260] loop3: detected capacity change from 0 to 512 [ 163.793183][ T7260] FAT-fs (loop3): bogus number of FAT sectors [ 163.799372][ T7260] FAT-fs (loop3): Can't find a valid FAT filesystem [ 163.860371][ T28] audit: type=1400 audit(1764691727.105:266): avc: denied { mount } for pid=7265 comm="syz.3.3325" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 163.884599][ T28] audit: type=1400 audit(1764691727.133:267): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 163.898482][ T340] usb 2-1: USB disconnect, device number 82 [ 163.914405][ T527] usb 3-1: selecting invalid altsetting 0 [ 163.935409][ T527] usb 3-1: USB disconnect, device number 78 [ 164.007495][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 164.104155][ T24] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 164.212509][ T833] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 164.302621][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 164.309002][ T24] usb 5-1: config 2 has an invalid interface number: 163 but max is 0 [ 164.317442][ T24] usb 5-1: config 2 has no interface number 0 [ 164.323780][ T24] usb 5-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=55.44 [ 164.333223][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.364376][ T7278] futex_wake_op: syz.0.3331 tries to shift op by -1; fix this program [ 164.407445][ T833] usb 4-1: Using ep0 maxpacket: 16 [ 164.422966][ T833] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.458086][ T833] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 164.469567][ T833] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 164.493361][ T833] usb 4-1: config 1 interface 2 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 46 [ 164.538002][ T833] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 164.547124][ T833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.564738][ T24] usb 5-1: string descriptor 0 read error: -71 [ 164.572448][ T833] usb 4-1: Product: syz [ 164.576657][ T833] usb 4-1: Manufacturer: syz [ 164.582323][ T833] usb 4-1: SerialNumber: syz [ 164.585409][ T24] aiptek 5-1:2.163: Aiptek using 400 ms programming speed [ 164.595563][ T24] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:2.163/input/input19 [ 164.624759][ T24] usb 5-1: USB disconnect, device number 78 [ 164.630764][ C1] aiptek 5-1:2.163: aiptek_irq - usb_submit_urb failed with result -19 [ 164.775800][ T527] usb 1-1: new low-speed USB device number 79 using dummy_hcd [ 164.819194][ T833] usb 4-1: USB disconnect, device number 77 [ 164.877638][ T334] udevd[334]: Error opening device "/dev/input/event3": No such file or directory [ 164.887462][ T334] udevd[334]: Unable to EVIOCGABS device "/dev/input/event3" [ 164.896304][ T334] udevd[334]: Unable to EVIOCGABS device "/dev/input/event3" [ 164.982596][ T527] usb 1-1: No LPM exit latency info found, disabling LPM. [ 164.990520][ T527] usb 1-1: config 1 interface 0 altsetting 248 endpoint 0x82 is Bulk; changing to Interrupt [ 165.000779][ T527] usb 1-1: config 1 interface 0 altsetting 248 endpoint 0x3 is Bulk; changing to Interrupt [ 165.010853][ T527] usb 1-1: config 1 interface 0 has no altsetting 0 [ 165.017917][ T340] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 165.027571][ T527] usb 1-1: string descriptor 0 read error: -22 [ 165.033781][ T527] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 165.042870][ T527] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.051805][ T7288] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 165.059062][ T7288] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 165.066981][ T527] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 165.232128][ T340] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.260430][ T340] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 165.280435][ T340] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 165.308833][ T527] usb 1-1: USB disconnect, device number 79 [ 165.330927][ T340] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 165.342395][ T340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.364647][ T340] usb 2-1: Product: syz [ 165.368878][ T340] usb 2-1: Manufacturer: syz [ 165.396803][ T340] usb 2-1: SerialNumber: syz [ 165.449275][ T7389] loop4: detected capacity change from 0 to 512 [ 165.496436][ T7389] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #2: comm syz.4.3386: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 255, max 4(4), depth 0(0) [ 165.514589][ T7389] EXT4-fs (loop4): get root inode failed [ 165.520382][ T7389] EXT4-fs (loop4): mount failed [ 165.633206][ T340] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 165.645883][ T340] cdc_ncm 2-1:1.0: bind() failure [ 165.658527][ T340] usb 2-1: USB disconnect, device number 83 [ 165.684843][ T7423] loop3: detected capacity change from 0 to 1024 [ 165.694732][ T7423] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 165.704964][ T7423] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 165.713392][ T7423] EXT4-fs (loop3): orphan cleanup on readonly fs [ 165.720267][ T7423] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.3402: Inode bitmap for bg 0 marked uninitialized [ 165.733239][ T7423] EXT4-fs (loop3): Remounting filesystem read-only [ 165.740063][ T7423] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 165.758852][ T286] EXT4-fs (loop3): unmounting filesystem. [ 165.869773][ T527] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 165.956432][ T24] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 165.980146][ T7462] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 166.077734][ T527] usb 3-1: Using ep0 maxpacket: 32 [ 166.086727][ T527] usb 3-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 166.106851][ T527] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.122162][ T527] usb 3-1: config 0 descriptor?? [ 166.163386][ T24] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 166.176643][ T24] usb 5-1: config 0 has no interface number 0 [ 166.199915][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 166.209690][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.223480][ T24] usb 5-1: Product: syz [ 166.227859][ T24] usb 5-1: Manufacturer: syz [ 166.237156][ T24] usb 5-1: SerialNumber: syz [ 166.252316][ T24] usb 5-1: config 0 descriptor?? [ 166.350203][ T39] usb 3-1: USB disconnect, device number 79 [ 166.422385][ T340] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 166.486427][ T24] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 166.492918][ T24] usb 5-1: No valid video chain found. [ 166.499300][ T24] usb 5-1: USB disconnect, device number 79 [ 166.552251][ T833] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 166.617998][ T340] usb 1-1: not running at top speed; connect to a high speed hub [ 166.626571][ T340] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.636859][ T340] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 166.645867][ T340] usb 1-1: config 1 has no interface number 1 [ 166.649706][ T19] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 166.651993][ T340] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 166.672523][ T340] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 166.684996][ T340] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 166.694084][ T340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.702077][ T340] usb 1-1: Product: syz [ 166.706283][ T340] usb 1-1: Manufacturer: syz [ 166.710900][ T340] usb 1-1: SerialNumber: syz [ 166.758125][ T833] usb 2-1: Using ep0 maxpacket: 16 [ 166.764612][ T833] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 166.774580][ T833] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 166.785512][ T833] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 166.796856][ T833] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 166.806037][ T833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.814238][ T833] usb 2-1: Product: syz [ 166.818576][ T833] usb 2-1: Manufacturer: syz [ 166.823306][ T833] usb 2-1: SerialNumber: syz [ 166.845844][ T19] usb 4-1: config 0 has an invalid interface number: 239 but max is 0 [ 166.854074][ T19] usb 4-1: config 0 has no interface number 0 [ 166.860291][ T19] usb 4-1: config 0 interface 239 altsetting 0 endpoint 0x1 has invalid maxpacket 991, setting to 64 [ 166.871280][ T19] usb 4-1: config 0 interface 239 altsetting 0 endpoint 0x82 has invalid maxpacket 511, setting to 64 [ 166.883907][ T19] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 166.893102][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.901251][ T19] usb 4-1: Product: syz [ 166.905513][ T19] usb 4-1: Manufacturer: syz [ 166.910636][ T19] usb 4-1: SerialNumber: syz [ 166.944552][ T19] usb 4-1: config 0 descriptor?? [ 166.979406][ T7526] futex_wake_op: syz.2.3453 tries to shift op by 36; fix this program [ 167.050959][ T340] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 167.052026][ T833] usb 2-1: USB disconnect, device number 84 [ 167.080241][ T340] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 167.093544][ T7536] loop4: detected capacity change from 0 to 1024 [ 167.109904][ T7536] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 167.150496][ T340] usb 1-1: USB disconnect, device number 80 [ 167.169015][ T7536] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 167.179270][ T19] asix 4-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 167.180521][ T7536] EXT4-fs (loop4): orphan cleanup on readonly fs [ 167.196844][ T19] asix: probe of 4-1:0.239 failed with error -71 [ 167.206931][ T7536] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.3457: Inode bitmap for bg 0 marked uninitialized [ 167.221746][ T19] usb 4-1: USB disconnect, device number 78 [ 167.226806][ T7536] EXT4-fs (loop4): Remounting filesystem read-only [ 167.234780][ T7536] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 167.257296][ T284] EXT4-fs (loop4): unmounting filesystem. [ 167.294601][ T7551] futex_wake_op: syz.4.3465 tries to shift op by 32; fix this program [ 167.344065][ T958] udevd[958]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 167.443065][ T7563] loop4: detected capacity change from 0 to 1024 [ 167.456036][ T7563] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3471: bg 0: block 10: padding at end of block bitmap is not set [ 167.470500][ T7563] __quota_error: 6 callbacks suppressed [ 167.470514][ T7563] Quota error (device loop4): write_blk: dquota write failed [ 167.484258][ T7563] Quota error (device loop4): find_free_dqentry: Can't write quota data block 2 [ 167.493449][ T7563] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 167.503465][ T7563] EXT4-fs error (device loop4): ext4_acquire_dquot:6803: comm syz.4.3471: Failed to acquire dquot type 0 [ 167.514969][ T7563] Quota error (device loop4): write_blk: dquota write failed [ 167.516290][ T832] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 167.522431][ T7563] Quota error (device loop4): find_free_dqentry: Can't write quota data block 2 [ 167.539252][ T7563] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 167.549191][ T7563] EXT4-fs error (device loop4): ext4_acquire_dquot:6803: comm syz.4.3471: Failed to acquire dquot type 0 [ 167.560806][ T7563] EXT4-fs error (device loop4): ext4_free_blocks:6205: comm syz.4.3471: Freeing blocks not in datazone - block = 0, count = 4096 [ 167.574621][ T7563] Quota error (device loop4): write_blk: dquota write failed [ 167.582159][ T7563] Quota error (device loop4): find_free_dqentry: Can't write quota data block 2 [ 167.591349][ T7563] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 167.601329][ T7563] EXT4-fs error (device loop4): ext4_acquire_dquot:6803: comm syz.4.3471: Failed to acquire dquot type 0 [ 167.612904][ T7563] EXT4-fs (loop4): 1 orphan inode deleted [ 167.618737][ T7563] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 167.639105][ T7563] syz.4.3471 (7563) used greatest stack depth: 20544 bytes left [ 167.649423][ T284] EXT4-fs (loop4): unmounting filesystem. [ 167.734164][ T832] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 167.742747][ T832] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 167.753258][ T832] usb 3-1: config 220 has no interface number 2 [ 167.760763][ T832] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 167.786274][ T832] usb 3-1: config 220 interface 0 has no altsetting 0 [ 167.798257][ T832] usb 3-1: config 220 interface 76 has no altsetting 0 [ 167.806815][ T832] usb 3-1: config 220 interface 1 has no altsetting 0 [ 167.820675][ T832] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 167.835589][ T832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.849844][ T832] usb 3-1: Product: syz [ 167.854311][ T19] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 167.867285][ T832] usb 3-1: Manufacturer: syz [ 167.872752][ T832] usb 3-1: SerialNumber: syz [ 167.971277][ T24] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 168.060065][ T19] usb 1-1: unable to get BOS descriptor or descriptor too short [ 168.077671][ T19] usb 1-1: not running at top speed; connect to a high speed hub [ 168.095480][ T19] usb 1-1: config 3 has an invalid interface number: 190 but max is 0 [ 168.104031][ T19] usb 1-1: config 3 has no interface number 0 [ 168.110230][ T19] usb 1-1: config 3 interface 190 altsetting 127 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 168.125645][ T19] usb 1-1: config 3 interface 190 has no altsetting 0 [ 168.139582][ T832] usb 3-1: selecting invalid altsetting 0 [ 168.151207][ T832] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 168.158933][ T19] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0801, bcdDevice=7f.62 [ 168.175017][ T832] usb 3-1: No valid video chain found. [ 168.177102][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 168.180861][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.196864][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 168.202198][ T832] usb 3-1: USB disconnect, device number 80 [ 168.220349][ T19] usb 1-1: Product: syz [ 168.225392][ T24] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 83, changing to 7 [ 168.246246][ T19] usb 1-1: Manufacturer: syz [ 168.255642][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.261900][ T19] usb 1-1: SerialNumber: syz [ 168.264895][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.283371][ T24] usb 5-1: Product: syz [ 168.287920][ T24] usb 5-1: Manufacturer: syz [ 168.292634][ T24] usb 5-1: SerialNumber: syz [ 168.307783][ T7645] loop1: detected capacity change from 0 to 512 [ 168.499563][ T19] usb 1-1: USB disconnect, device number 81 [ 168.525863][ T24] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 168.533847][ T24] usb 5-1: 2:1: invalid format type 0x607 is detected, processed as PCM [ 168.542422][ T24] usb 5-1: 2:1 : sample bitwidth 173 in over sample bytes 1 [ 168.549857][ T39] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 168.557520][ T24] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 168.566475][ T24] usb 5-1: USB disconnect, device number 80 [ 168.686162][ T291] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 168.754396][ T39] usb 4-1: config 0 has an invalid interface number: 127 but max is 1 [ 168.762794][ T39] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 225 [ 168.775611][ T39] usb 4-1: config 0 has no interface number 1 [ 168.781754][ T39] usb 4-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 168.795863][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 168.811903][ T39] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 168.835423][ T39] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 168.847436][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.855858][ T39] usb 4-1: Product: syz [ 168.860551][ T39] usb 4-1: Manufacturer: syz [ 168.865287][ T39] usb 4-1: SerialNumber: syz [ 168.873980][ T39] usb 4-1: config 0 descriptor?? [ 168.880170][ T39] usb-storage 4-1:0.127: USB Mass Storage device detected [ 168.891960][ T291] usb 2-1: Using ep0 maxpacket: 16 [ 168.898411][ T291] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.909023][ T291] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 168.922436][ T39] usb-storage 4-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 168.934970][ T291] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 168.944831][ T291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 168.953569][ T39] usb-storage 4-1:0.0: USB Mass Storage device detected [ 168.960955][ T291] usb 2-1: SerialNumber: syz [ 168.966491][ T39] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 168.975437][ T291] cdc_acm 2-1:1.0: skipping garbage [ 169.105866][ T291] usb 4-1: USB disconnect, device number 79 [ 169.191345][ T19] usb 2-1: USB disconnect, device number 85 [ 169.243261][ T7695] loop4: detected capacity change from 0 to 256 [ 169.255910][ T641] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 169.265073][ T7695] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 169.277689][ T7695] exFAT-fs (loop4): failed to load alloc-bitmap [ 169.283979][ T7695] exFAT-fs (loop4): failed to recognize exfat type [ 169.460188][ T641] usb 3-1: config 0 has an invalid interface number: 82 but max is 0 [ 169.470352][ T641] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.482763][ T641] usb 3-1: config 0 has no interface number 0 [ 169.489253][ T641] usb 3-1: config 0 interface 82 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 169.507245][ T641] usb 3-1: config 0 interface 82 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 169.520982][ T641] usb 3-1: config 0 interface 82 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 169.538331][ T641] usb 3-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=11.9e [ 169.547755][ T641] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.556348][ T641] usb 3-1: Product: syz [ 169.560669][ T641] usb 3-1: Manufacturer: syz [ 169.565293][ T641] usb 3-1: SerialNumber: syz [ 169.570950][ T641] usb 3-1: config 0 descriptor?? [ 169.576500][ T7682] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 169.584466][ T641] cdc_ether 3-1:0.82: skipping garbage [ 169.590189][ T641] usb 3-1: bad CDC descriptors [ 169.603153][ T641] usb 3-1: unsupported MDLM descriptors [ 169.609276][ T641] cdc_acm 3-1:0.82: skipping garbage [ 169.820946][ T291] usb 3-1: USB disconnect, device number 81 [ 169.823073][ T19] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 169.901378][ T7711] loop3: detected capacity change from 0 to 40427 [ 169.924123][ T7711] F2FS-fs (loop3): heap/no_heap options were deprecated [ 169.951650][ T7711] F2FS-fs (loop3): invalid crc value [ 169.957160][ T7711] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root and reserve_node [ 169.981587][ T7711] F2FS-fs (loop3): Found nat_bits in checkpoint [ 170.035757][ T19] usb 5-1: Using ep0 maxpacket: 8 [ 170.045942][ T19] usb 5-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 170.072817][ T19] usb 5-1: config 0 has an invalid interface number: 150 but max is 64 [ 170.082239][ T19] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.092477][ T7711] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 170.119055][ T19] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 65 [ 170.139728][ T19] usb 5-1: config 0 has no interface number 0 [ 170.146320][ T19] usb 5-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.161498][ T19] usb 5-1: config 0 interface 150 has no altsetting 0 [ 170.168531][ T19] usb 5-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 170.186091][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.198499][ T19] usb 5-1: config 0 descriptor?? [ 170.435105][ T19] usb 5-1: USB disconnect, device number 81 [ 170.623614][ T291] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 170.751899][ T24] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 170.767647][ T833] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 170.826717][ T291] usb 4-1: Using ep0 maxpacket: 32 [ 170.833338][ T291] usb 4-1: unable to get BOS descriptor or descriptor too short [ 170.848813][ T291] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 170.867956][ T291] usb 4-1: config 4 has no interface number 0 [ 170.878743][ T291] usb 4-1: config 4 interface 147 altsetting 5 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 170.900910][ T291] usb 4-1: config 4 interface 147 has no altsetting 0 [ 170.924133][ T291] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 9.d1 [ 170.944152][ T291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.954984][ T291] usb 4-1: Product: syz [ 170.959250][ T291] usb 4-1: Manufacturer: syz [ 170.963870][ T291] usb 4-1: SerialNumber: syz [ 170.968809][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 170.977204][ T24] usb 1-1: config 3 has an invalid interface number: 71 but max is 0 [ 170.977431][ T833] usb 3-1: config 1 has an invalid interface number: 140 but max is 0 [ 170.996261][ T24] usb 1-1: config 3 has no interface number 0 [ 171.021572][ T24] usb 1-1: config 3 interface 71 has no altsetting 0 [ 171.033018][ T833] usb 3-1: config 1 has no interface number 0 [ 171.039167][ T833] usb 3-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88 [ 171.040885][ T24] usb 1-1: New USB device found, idVendor=5b44, idProduct=d65a, bcdDevice= e.bf [ 171.063903][ T833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.074690][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.088505][ T7767] loop4: detected capacity change from 0 to 1024 [ 171.095237][ T833] usb 3-1: Invalid descriptor size=18. [ 171.100873][ T24] usb 1-1: Product: syz [ 171.106194][ T24] usb 1-1: Manufacturer: syz [ 171.110944][ T24] usb 1-1: SerialNumber: syz [ 171.128114][ T7767] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 171.144704][ T7767] EXT4-fs (loop4): orphan cleanup on readonly fs [ 171.151698][ T7767] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 171.160467][ T7767] EXT4-fs warning (device loop4): ext4_enable_quotas:7055: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 171.175102][ T7767] EXT4-fs (loop4): Cannot turn on quotas: error -5 [ 171.182427][ T7767] EXT4-fs (loop4): 1 truncate cleaned up [ 171.188173][ T7767] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 171.221387][ T284] EXT4-fs (loop4): unmounting filesystem. [ 171.253513][ T291] usb 4-1: USB disconnect, device number 80 [ 171.316470][ T641] usb 3-1: USB disconnect, device number 82 [ 171.333402][ T7784] loop1: detected capacity change from 0 to 512 [ 171.353606][ T24] usb-storage 1-1:3.71: USB Mass Storage device detected [ 171.377470][ T7784] EXT4-fs warning (device loop1): ext4_enable_quotas:7055: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 171.392936][ T7784] EXT4-fs (loop1): mount failed [ 171.400198][ T24] usb 1-1: USB disconnect, device number 82 [ 171.671114][ T340] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 171.799364][ T833] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 171.851141][ T7813] IPv6: addrconf: prefix option has invalid lifetime [ 171.863612][ T340] usb 5-1: Using ep0 maxpacket: 16 [ 171.870046][ T340] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 171.880629][ T340] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.890903][ T340] usb 5-1: config 0 has no interface number 0 [ 171.910260][ T340] usb 5-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 171.927807][ T340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.949035][ T340] usb 5-1: Product: syz [ 171.962947][ T340] usb 5-1: Manufacturer: syz [ 171.967724][ T340] usb 5-1: SerialNumber: syz [ 171.972514][ T7823] loop3: detected capacity change from 0 to 512 [ 171.988342][ T340] usb 5-1: config 0 descriptor?? [ 172.002434][ T833] usb 2-1: Using ep0 maxpacket: 32 [ 172.003784][ T340] usb 5-1: Found UVC 0.00 device syz (046c:14e8) [ 172.009600][ T833] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 172.022813][ T7823] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 172.030936][ T340] usb 5-1: No valid video chain found. [ 172.036628][ T7823] System zones: 1-12 [ 172.041110][ T7823] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.3593: Directory hole found for htree index block 0 [ 172.060310][ T7823] EXT4-fs (loop3): Remounting filesystem read-only [ 172.068822][ T7823] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 172.076369][ T833] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 172.079049][ T7823] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.3593: Directory hole found for htree index block 0 [ 172.098424][ T7823] EXT4-fs (loop3): Remounting filesystem read-only [ 172.105663][ T7823] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 172.106394][ T833] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.113982][ T7823] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 172.142426][ T286] EXT4-fs (loop3): unmounting filesystem. [ 172.181653][ T833] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 172.203671][ T833] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 172.220125][ T833] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 172.229411][ T833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.240328][ T24] usb 5-1: USB disconnect, device number 82 [ 172.242584][ T833] usb 2-1: config 0 descriptor?? [ 172.284155][ T7846] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 172.332318][ T7854] loop3: detected capacity change from 0 to 256 [ 172.390593][ T7862] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 172.462077][ T527] usb 1-1: new low-speed USB device number 83 using dummy_hcd [ 172.484489][ T340] usb 2-1: USB disconnect, device number 86 [ 172.509437][ T7876] loop3: detected capacity change from 0 to 2048 [ 172.643819][ T24] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 172.677032][ T527] usb 1-1: config 0 has an invalid interface number: 65 but max is 5 [ 172.685160][ T527] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.695270][ T527] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 6 [ 172.704169][ T527] usb 1-1: config 0 has no interface number 0 [ 172.710459][ T527] usb 1-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 4 [ 172.721391][ T527] usb 1-1: config 0 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 172.734534][ T527] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 172.743799][ T527] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.753479][ T527] usb 1-1: config 0 descriptor?? [ 172.813067][ T7886] loop4: detected capacity change from 0 to 512 [ 172.822450][ T7886] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 172.831029][ T7886] EXT4-fs (loop4): invalid journal inode [ 172.836858][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 172.836914][ T7886] EXT4-fs (loop4): can't get journal size [ 172.844010][ T24] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 172.850852][ T7886] EXT4-fs (loop4): 1 truncate cleaned up [ 172.859131][ T24] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 172.865143][ T7886] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 172.873838][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.891251][ T641] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 172.908275][ T284] EXT4-fs (loop4): unmounting filesystem. [ 172.979014][ T19] usb 1-1: USB disconnect, device number 83 [ 173.093844][ T641] usb 4-1: New USB device found, idVendor=1457, idProduct=5118, bcdDevice=cf.91 [ 173.096914][ T24] usb 3-1: string descriptor 0 read error: -71 [ 173.105686][ T641] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.114594][ T24] hub 3-1:32.0: USB hub found [ 173.127888][ T641] usb 4-1: config 0 descriptor?? [ 173.130807][ T24] hub 3-1:32.0: config failed, can't read hub descriptor (err -22) [ 173.135634][ T641] ftdi_sio 4-1:0.0: Ignoring interface reserved for JTAG [ 173.189600][ T24] usb 3-1: USB disconnect, device number 83 [ 173.210301][ T527] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 173.353229][ T340] usb 4-1: USB disconnect, device number 81 [ 173.403541][ T527] usb 5-1: not running at top speed; connect to a high speed hub [ 173.412023][ T527] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.422277][ T527] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 173.431307][ T527] usb 5-1: config 1 has no interface number 1 [ 173.437505][ T527] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 173.450467][ T527] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 173.462827][ T527] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 173.471970][ T527] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.479991][ T527] usb 5-1: Product: syz [ 173.484167][ T527] usb 5-1: Manufacturer: syz [ 173.488787][ T527] usb 5-1: SerialNumber: syz [ 173.520302][ T779] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 173.712662][ T779] usb 2-1: Using ep0 maxpacket: 8 [ 173.719937][ T527] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 173.728175][ T527] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 173.737013][ T779] usb 2-1: config index 0 descriptor too short (expected 546, got 34) [ 173.749185][ T779] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 173.757727][ T779] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.770812][ T779] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 173.782455][ T527] usb 5-1: USB disconnect, device number 83 [ 173.791185][ T779] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 173.804240][ T779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.813235][ T779] usb 2-1: config 0 descriptor?? [ 173.969185][ T340] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 174.001576][ T4195] udevd[4195]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 174.038570][ T527] usb 2-1: USB disconnect, device number 87 [ 174.129525][ T641] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 174.173480][ T340] usb 3-1: config index 0 descriptor too short (expected 7768, got 18) [ 174.181859][ T340] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 174.190983][ T340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.199856][ T340] usb 3-1: config 0 descriptor?? [ 174.204939][ T291] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 174.213561][ T340] ftdi_sio 3-1:0.0: Ignoring interface reserved for JTAG [ 174.332561][ T641] usb 1-1: Using ep0 maxpacket: 16 [ 174.339068][ T641] usb 1-1: config 0 has an invalid interface number: 236 but max is 1 [ 174.350972][ T641] usb 1-1: config 0 has an invalid interface number: 129 but max is 1 [ 174.359406][ T641] usb 1-1: config 0 has no interface number 0 [ 174.366753][ T641] usb 1-1: config 0 has no interface number 1 [ 174.372944][ T641] usb 1-1: config 0 interface 236 has no altsetting 0 [ 174.380162][ T641] usb 1-1: config 0 interface 129 has no altsetting 0 [ 174.393624][ T641] usb 1-1: New USB device found, idVendor=1ace, idProduct=e9b2, bcdDevice=5c.3d [ 174.407367][ T641] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.415450][ T641] usb 1-1: Product: syz [ 174.419871][ T641] usb 1-1: Manufacturer: syz [ 174.424503][ T641] usb 1-1: SerialNumber: syz [ 174.428837][ T291] usb 4-1: Using ep0 maxpacket: 16 [ 174.437253][ T19] usb 3-1: USB disconnect, device number 84 [ 174.437450][ T291] usb 4-1: unable to get BOS descriptor or descriptor too short [ 174.452317][ T641] usb 1-1: config 0 descriptor?? [ 174.470847][ T291] usb 4-1: config 0 has an invalid interface number: 130 but max is 1 [ 174.484229][ T291] usb 4-1: config 0 has an invalid interface number: 130 but max is 1 [ 174.497421][ T291] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 174.506926][ T291] usb 4-1: config 0 has no interface number 0 [ 174.514280][ T291] usb 4-1: config 0 interface 130 has no altsetting 0 [ 174.535714][ T291] usb 4-1: New USB device found, idVendor=369d, idProduct=1a01, bcdDevice=b2.c3 [ 174.550182][ T291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.563270][ T291] usb 4-1: Product: syz [ 174.567488][ T291] usb 4-1: Manufacturer: syz [ 174.572533][ T291] usb 4-1: SerialNumber: syz [ 174.581541][ T291] usb 4-1: config 0 descriptor?? [ 174.677456][ T641] usb 1-1: selecting invalid altsetting 0 [ 174.678414][ T7983] loop4: detected capacity change from 0 to 8192 [ 174.683453][ T641] usb 1-1: Found UVC 2.26 device syz (1ace:e9b2) [ 174.696419][ T641] usb 1-1: No valid video chain found. [ 174.706595][ T641] usb 1-1: USB disconnect, device number 84 [ 174.803676][ T291] usb-storage 4-1:0.130: USB Mass Storage device detected [ 174.824896][ T8005] loop4: detected capacity change from 0 to 128 [ 174.833045][ T8005] FAT-fs (loop4): bogus sectors per cluster 0 [ 174.839262][ T8005] FAT-fs (loop4): Can't find a valid FAT filesystem [ 174.882258][ T291] usb 4-1: USB disconnect, device number 82 [ 175.016098][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 175.016116][ T28] audit: type=1326 audit(1764691737.474:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8030 comm="syz.2.3695" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d72d8f749 code=0x0 [ 175.100648][ T8041] futex_wake_op: syz.4.3700 tries to shift op by -1; fix this program [ 175.321425][ T8075] IPv6: addrconf: prefix option has invalid lifetime [ 175.341902][ T8077] cgroup: Name too long [ 175.419507][ T8083] loop3: detected capacity change from 0 to 1024 [ 175.439249][ T8083] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 175.457003][ T8083] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 175.465437][ T8083] System zones: 0-1, 4-36, 102-102 [ 175.471448][ T8083] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 175.504427][ T286] EXT4-fs (loop3): unmounting filesystem. [ 175.510380][ T291] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 175.657955][ T641] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 175.712855][ T291] usb 3-1: unable to get BOS descriptor or descriptor too short [ 175.721189][ T291] usb 3-1: not running at top speed; connect to a high speed hub [ 175.730071][ T291] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.740522][ T291] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 175.749636][ T291] usb 3-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 175.762907][ T291] usb 3-1: config 1 interface 0 has no altsetting 0 [ 175.772070][ T291] usb 3-1: string descriptor 0 read error: -22 [ 175.778609][ T291] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 175.787901][ T291] usb 3-1: New USB device strings: Mfr=15, Product=2, SerialNumber=11 [ 175.861744][ T641] usb 1-1: not running at top speed; connect to a high speed hub [ 175.882419][ T641] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.892558][ T641] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 175.901691][ T641] usb 1-1: config 1 has no interface number 1 [ 175.907949][ T19] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 175.915619][ T641] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 175.928763][ T641] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 175.940146][ T641] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.949324][ T641] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.957533][ T641] usb 1-1: Product: syz [ 175.961922][ T641] usb 1-1: Manufacturer: syz [ 175.966640][ T641] usb 1-1: SerialNumber: syz [ 176.023639][ T291] usb 3-1: USB disconnect, device number 85 [ 176.112772][ T8104] loop1: detected capacity change from 0 to 512 [ 176.118152][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 176.127760][ T19] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 176.134861][ T8104] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 176.149661][ T19] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 176.149988][ T8104] EXT4-fs (loop1): group descriptors corrupted! [ 176.271094][ T19] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 176.281278][ T641] usb 1-1: USB disconnect, device number 85 [ 176.300614][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.309200][ T19] usb 4-1: Product: syz [ 176.313526][ T19] usb 4-1: Manufacturer: syz [ 176.318630][ T19] usb 4-1: SerialNumber: syz [ 176.524386][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 176.551105][ T19] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 176.564874][ T19] usb 4-1: USB disconnect, device number 83 [ 176.575129][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 176.662715][ T291] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 176.867154][ T291] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 176.881382][ T291] usb 2-1: config 0 has no interface number 0 [ 176.899092][ T291] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 176.908765][ T291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.920404][ T291] usb 2-1: Product: syz [ 176.924610][ T291] usb 2-1: Manufacturer: syz [ 176.939832][ T291] usb 2-1: SerialNumber: syz [ 176.956302][ T291] usb 2-1: config 0 descriptor?? [ 176.965410][ T8150] loop4: detected capacity change from 0 to 16 [ 176.983417][ T641] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 176.991460][ T8150] erofs: (device loop4): z_erofs_parse_cfgs: algorithm 1 isn't enabled on this kernel [ 177.045803][ T8160] 9pnet_fd: p9_fd_create_unix (8160): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 177.160841][ T8176] loop4: detected capacity change from 0 to 128 [ 177.222304][ T291] usb 2-1: Found UVC 0.08 device syz (046d:0823) [ 177.252359][ T641] usb 3-1: config 0 has an invalid interface number: 151 but max is 1 [ 177.280638][ T641] usb 3-1: config 0 has no interface number 1 [ 177.289852][ T641] usb 3-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 177.303237][ T641] usb 3-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0xA3, skipping [ 177.311852][ T291] uvcvideo 2-1:0.64: Entity type for entity Output 3 was not initialized! [ 177.316082][ T641] usb 3-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 177.326528][ T291] usb 2-1: Failed to create links for entity 3 [ 177.336492][ T641] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xC9, skipping [ 177.342554][ T291] usb 2-1: Failed to register entities (-22). [ 177.357445][ T641] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 177.363922][ T291] usb 2-1: USB disconnect, device number 88 [ 177.375927][ T8176] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 177.380895][ T641] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.386331][ T8176] EXT4-fs (loop4): group descriptors corrupted! [ 177.401021][ T641] usb 3-1: Product: syz [ 177.405307][ T641] usb 3-1: Manufacturer: syz [ 177.409958][ T641] usb 3-1: SerialNumber: syz [ 177.415260][ T641] usb 3-1: config 0 descriptor?? [ 177.420621][ T8120] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 177.429169][ T641] snd-usb-audio: probe of 3-1:0.151 failed with error -2 [ 177.451226][ T641] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 177.470293][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 177.534136][ T8200] loop4: detected capacity change from 0 to 512 [ 177.541533][ T8200] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 17 [ 177.645881][ T19] usb 3-1: USB disconnect, device number 86 [ 177.646133][ T340] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 177.659624][ T39] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 177.859895][ T340] usb 1-1: Using ep0 maxpacket: 32 [ 177.867026][ T39] usb 4-1: not running at top speed; connect to a high speed hub [ 177.875157][ T340] usb 1-1: unable to get BOS descriptor or descriptor too short [ 177.883694][ T39] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 177.894770][ T340] usb 1-1: config 1 interface 0 has no altsetting 0 [ 177.901812][ T39] usb 4-1: language id specifier not provided by device, defaulting to English [ 177.910869][ T340] usb 1-1: string descriptor 0 read error: -22 [ 177.917099][ T291] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 177.924750][ T340] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.40 [ 177.933791][ T340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.943141][ T39] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 177.952503][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.960564][ T39] usb 4-1: Product: syz [ 177.965666][ T39] usb 4-1: Manufacturer: ቍ컁㮔讈볡똲佳Ԙ檘廊䘬㹿៰싯擦ェᕮ訃쿪䋕Bᬅ咮יִ椭yㄜ㾋引ޏ픨藒评锊윓 [ 177.980225][ T39] usb 4-1: SerialNumber: syz [ 178.137745][ T527] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 178.146292][ T291] usb 5-1: not running at top speed; connect to a high speed hub [ 178.154983][ T291] usb 5-1: config 95 has an invalid interface number: 1 but max is 0 [ 178.163144][ T291] usb 5-1: config 95 has no interface number 0 [ 178.169321][ T291] usb 5-1: config 95 interface 1 has no altsetting 0 [ 178.177500][ T291] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 178.186649][ T291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.194767][ T291] usb 5-1: Product: syz [ 178.199345][ T291] usb 5-1: Manufacturer: syz [ 178.209817][ T39] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 178.216707][ T340] usbhid 1-1:1.0: can't add hid device: -71 [ 178.222676][ T340] usbhid: probe of 1-1:1.0 failed with error -71 [ 178.229454][ T291] usb 5-1: SerialNumber: syz [ 178.234258][ T39] cdc_ncm 4-1:1.0: bind() failure [ 178.240233][ T39] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 178.241972][ T340] usb 1-1: USB disconnect, device number 86 [ 178.255403][ T39] cdc_ncm 4-1:1.1: bind() failure [ 178.261808][ T39] usb 4-1: USB disconnect, device number 84 [ 178.330936][ T527] usb 2-1: not running at top speed; connect to a high speed hub [ 178.339534][ T527] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 178.349586][ T527] usb 2-1: config 1 has no interface number 1 [ 178.355756][ T527] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 178.376861][ T527] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 178.385997][ T527] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.394029][ T527] usb 2-1: Product: syz [ 178.398286][ T527] usb 2-1: Manufacturer: syz [ 178.402929][ T527] usb 2-1: SerialNumber: syz [ 178.481898][ T291] usb 5-1: USB disconnect, device number 84 [ 178.627691][ T527] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 178.642180][ T527] usb 2-1: 2:1 : unsupported sample bitwidth 8 in 8 bytes [ 178.661815][ T527] usb 2-1: USB disconnect, device number 89 [ 178.726641][ T958] udevd[958]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:95.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 178.771908][ T8283] cgroup: name respecified [ 178.899036][ T958] udevd[958]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 179.049561][ T8320] loop4: detected capacity change from 0 to 256 [ 179.081020][ T8320] exfat: Deprecated parameter 'namecase' [ 179.091793][ T8320] exfat: Deprecated parameter 'namecase' [ 179.097765][ T8320] exFAT-fs (loop4): failed to read boot sector [ 179.104317][ T8320] exFAT-fs (loop4): failed to recognize exfat type [ 179.131506][ T8296] loop3: detected capacity change from 0 to 40427 [ 179.141228][ T8296] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 179.147687][ T8296] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 179.156804][ T8296] F2FS-fs (loop3): invalid crc value [ 179.163657][ T8296] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 179.212297][ T8296] F2FS-fs (loop3): Failed to read root inode [ 179.263063][ T8337] cgroup: Invalid name [ 179.281450][ T19] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 179.377728][ T641] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 179.484662][ T19] usb 3-1: Using ep0 maxpacket: 16 [ 179.491636][ T19] usb 3-1: config 8 has an invalid interface number: 97 but max is 2 [ 179.499829][ T832] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 179.507786][ T19] usb 3-1: config 8 has an invalid interface number: 94 but max is 2 [ 179.518590][ T19] usb 3-1: config 8 has an invalid interface number: 21 but max is 2 [ 179.526724][ T19] usb 3-1: config 8 has no interface number 0 [ 179.532880][ T19] usb 3-1: config 8 has no interface number 1 [ 179.538989][ T19] usb 3-1: config 8 has no interface number 2 [ 179.545145][ T19] usb 3-1: config 8 interface 97 has no altsetting 0 [ 179.551906][ T19] usb 3-1: config 8 interface 94 has no altsetting 0 [ 179.558658][ T19] usb 3-1: config 8 interface 21 has no altsetting 0 [ 179.566898][ T19] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=d4.ce [ 179.576131][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.584197][ T19] usb 3-1: Product: syz [ 179.588406][ T19] usb 3-1: Manufacturer: syz [ 179.593122][ T641] usb 1-1: too many configurations: 164, using maximum allowed: 8 [ 179.600982][ T19] usb 3-1: SerialNumber: syz [ 179.611094][ T641] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 179.620224][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.628883][ T641] usb 1-1: config 0 descriptor?? [ 179.634763][ T641] usb 1-1: bad CDC descriptors [ 179.709076][ T291] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 179.720877][ T832] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.731890][ T832] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.741793][ T832] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.754876][ T832] usb 2-1: New USB device found, idVendor=15c2, idProduct=2204, bcdDevice= 0.00 [ 179.764420][ T832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.773104][ T832] usb 2-1: config 0 descriptor?? [ 179.794615][ T340] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 179.824635][ T19] ftdi_sio 3-1:8.97: FTDI USB Serial Device converter detected [ 179.832806][ T19] ftdi_sio ttyUSB0: unknown device type: 0xd4ce [ 179.840809][ T19] ftdi_sio 3-1:8.94: FTDI USB Serial Device converter detected [ 179.849016][ T19] ftdi_sio ttyUSB1: unknown device type: 0xd4ce [ 179.850980][ T39] usb 1-1: USB disconnect, device number 87 [ 179.860841][ T19] ftdi_sio 3-1:8.21: FTDI USB Serial Device converter detected [ 179.869276][ T19] ftdi_sio ttyUSB2: unknown device type: 0xd4ce [ 179.876823][ T19] usb 3-1: USB disconnect, device number 87 [ 179.883323][ T19] ftdi_sio 3-1:8.97: device disconnected [ 179.889755][ T19] ftdi_sio 3-1:8.94: device disconnected [ 179.896059][ T19] ftdi_sio 3-1:8.21: device disconnected [ 179.902973][ T291] usb 4-1: unable to get BOS descriptor or descriptor too short [ 179.911182][ T291] usb 4-1: not running at top speed; connect to a high speed hub [ 179.919832][ T291] usb 4-1: config 7 has an invalid interface number: 135 but max is 0 [ 179.928476][ T291] usb 4-1: config 7 has no interface number 0 [ 179.934637][ T291] usb 4-1: config 7 interface 135 has no altsetting 0 [ 179.943047][ T291] usb 4-1: New USB device found, idVendor=d26f, idProduct=e881, bcdDevice=d0.cb [ 179.952670][ T291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.960793][ T291] usb 4-1: Product: syz [ 179.965070][ T291] usb 4-1: Manufacturer: syz [ 179.969833][ T291] usb 4-1: SerialNumber: syz [ 179.986988][ T340] usb 5-1: Using ep0 maxpacket: 16 [ 179.993526][ T340] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 179.998217][ T832] usbhid 2-1:0.0: can't add hid device: -71 [ 180.002921][ T340] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.007921][ T832] usbhid: probe of 2-1:0.0 failed with error -71 [ 180.017838][ T340] usb 5-1: config 0 has no interface number 0 [ 180.019611][ T340] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 180.027422][ T832] usb 2-1: USB disconnect, device number 90 [ 180.035822][ T340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.054565][ T340] usb 5-1: Product: syz [ 180.058739][ T340] usb 5-1: Manufacturer: syz [ 180.063395][ T340] usb 5-1: SerialNumber: syz [ 180.068827][ T340] usb 5-1: config 0 descriptor?? [ 180.075000][ T340] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 180.081415][ T340] usb 5-1: No valid video chain found. [ 180.192266][ T291] usb-storage 4-1:7.135: USB Mass Storage device detected [ 180.234683][ T291] usb 4-1: USB disconnect, device number 85 [ 180.297150][ T832] usb 5-1: USB disconnect, device number 85 [ 180.756695][ T291] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 180.810130][ T832] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 180.852921][ T779] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 180.876702][ T8411] futex_wake_op: syz.4.3882 tries to shift op by 32; fix this program [ 180.951182][ T291] usb 3-1: config 0 has an invalid interface number: 156 but max is 0 [ 180.959482][ T291] usb 3-1: config 0 has no interface number 0 [ 180.965678][ T291] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 180.977026][ T291] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 180.986938][ T291] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 180.997053][ T291] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 181.009000][ T291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.013247][ T832] usb 1-1: Using ep0 maxpacket: 32 [ 181.018361][ T291] usb 3-1: config 0 descriptor?? [ 181.027847][ T832] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 181.028699][ T291] usb 3-1: MIDIStreaming interface descriptor not found [ 181.036718][ T832] usb 1-1: config 0 has no interface number 0 [ 181.054061][ T832] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 181.056004][ T779] usb 2-1: Using ep0 maxpacket: 32 [ 181.063481][ T832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.076302][ T832] usb 1-1: Product: syz [ 181.080534][ T832] usb 1-1: Manufacturer: syz [ 181.080738][ T779] usb 2-1: unable to get BOS descriptor or descriptor too short [ 181.085145][ T832] usb 1-1: SerialNumber: syz [ 181.094071][ T779] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.099300][ T832] usb 1-1: config 0 descriptor?? [ 181.112842][ T779] usb 2-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 181.113516][ T832] smsc95xx v2.0.0 [ 181.123818][ T779] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 181.135274][ T779] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.143621][ T779] usb 2-1: Product: syz [ 181.147890][ T779] usb 2-1: Manufacturer: syz [ 181.152579][ T779] usb 2-1: SerialNumber: syz [ 181.184339][ T39] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 181.254843][ T291] usb 3-1: USB disconnect, device number 88 [ 181.291756][ T19] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 181.342161][ T832] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 181.352402][ T832] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 181.361131][ T832] usb 1-1: USB disconnect, device number 88 [ 181.375971][ T779] usb 2-1: 2:0 : UAC_AS_GENERAL descriptor not found [ 181.382760][ T39] usb 4-1: Using ep0 maxpacket: 8 [ 181.394283][ T39] usb 4-1: unable to get BOS descriptor or descriptor too short [ 181.402806][ T779] usb 2-1: USB disconnect, device number 91 [ 181.410018][ T39] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 181.418161][ T39] usb 4-1: config 0 has no interface number 0 [ 181.427604][ T39] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 181.438686][ T39] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 181.448585][ T39] usb 4-1: config 0 interface 88 has no altsetting 0 [ 181.457567][ T39] usb 4-1: string descriptor 0 read error: -22 [ 181.463867][ T39] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 181.473384][ T39] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 181.483726][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 181.490083][ T39] usb 4-1: config 0 descriptor?? [ 181.497068][ T39] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input20 [ 181.505497][ T19] usb 5-1: unable to get BOS descriptor or descriptor too short [ 181.517702][ T19] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.528039][ T19] usb 5-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 181.541238][ T19] usb 5-1: config 1 interface 0 has no altsetting 0 [ 181.548348][ T958] udevd[958]: Error opening device "/dev/input/event3": Input/output error [ 181.549517][ T19] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 181.557085][ T958] udevd[958]: Unable to EVIOCGABS device "/dev/input/event3" [ 181.566162][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.573876][ T958] udevd[958]: Unable to EVIOCGABS device "/dev/input/event3" [ 181.581574][ T19] usb 5-1: Product: syz [ 181.593465][ T19] usb 5-1: Manufacturer: syz [ 181.598264][ T19] usb 5-1: SerialNumber: syz [ 181.716448][ T833] usb 4-1: USB disconnect, device number 86 [ 181.824885][ T19] cdc_ether 5-1:1.0: invalid descriptor buffer length [ 181.832306][ T19] usb 5-1: bad CDC descriptors [ 181.839265][ T19] usb 5-1: USB disconnect, device number 86 [ 181.874075][ T8439] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 181.883344][ T8439] overlayfs: missing 'lowerdir' [ 182.077162][ T8461] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 182.177321][ T8477] loop1: detected capacity change from 0 to 512 [ 182.184427][ T8477] EXT4-fs: Ignoring removed nomblk_io_submit option [ 182.191876][ T8477] EXT4-fs (loop1): filesystem is read-only [ 182.197841][ T8477] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 182.209736][ T8477] EXT4-fs (loop1): filesystem is read-only [ 182.215638][ T779] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 182.221483][ T8477] EXT4-fs (loop1): orphan cleanup on readonly fs [ 182.229789][ T8477] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #16: comm syz.1.3915: iget: bad i_size value: 648518346341360424 [ 182.243185][ T8477] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.3915: couldn't read orphan inode 16 (err -117) [ 182.255510][ T8477] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 182.283738][ T287] EXT4-fs (loop1): unmounting filesystem. [ 182.296062][ T291] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 182.339603][ T28] audit: type=1400 audit(1764691973.341:285): avc: denied { mount } for pid=8489 comm="syz.1.3921" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 182.361648][ T28] audit: type=1400 audit(1764691973.341:286): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 182.430385][ T8494] loop4: detected capacity change from 0 to 8192 [ 182.439362][ T779] usb 3-1: config 192 has an invalid interface number: 162 but max is 0 [ 182.447802][ T779] usb 3-1: config 192 has no interface number 0 [ 182.454062][ T779] usb 3-1: config 192 interface 162 has no altsetting 0 [ 182.462449][ T779] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=56.c3 [ 182.471689][ T779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.480004][ T779] usb 3-1: Product: syz [ 182.488462][ T779] usb 3-1: Manufacturer: syz [ 182.493104][ T779] usb 3-1: SerialNumber: syz [ 182.510863][ T291] usb 1-1: config 0 has no interfaces? [ 182.516569][ T291] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 182.525819][ T291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.534595][ T291] usb 1-1: config 0 descriptor?? [ 182.616789][ T39] usb 4-1: new low-speed USB device number 87 using dummy_hcd [ 182.702275][ T527] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 182.718382][ T779] usb-storage 3-1:192.162: USB Mass Storage device detected [ 182.726567][ T779] usb-storage 3-1:192.162: device ignored [ 182.756921][ T19] usb 1-1: USB disconnect, device number 89 [ 182.791782][ T779] usb 3-1: USB disconnect, device number 89 [ 182.810216][ T39] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 182.821356][ T39] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 65535, setting to 8 [ 182.832441][ T39] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 182.841507][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.850371][ T8486] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 182.873321][ T291] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 182.896077][ T527] usb 2-1: unable to get BOS descriptor or descriptor too short [ 182.904506][ T527] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 182.914857][ T527] usb 2-1: too many endpoints for config 1 interface 2 altsetting 49: 56, using maximum allowed: 30 [ 182.925728][ T527] usb 2-1: config 1 interface 2 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 56 [ 182.938808][ T527] usb 2-1: config 1 interface 2 has no altsetting 0 [ 182.946890][ T527] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.956044][ T527] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.964243][ T527] usb 2-1: Product: syz [ 182.968442][ T527] usb 2-1: Manufacturer: syz [ 182.973112][ T527] usb 2-1: SerialNumber: syz [ 183.067037][ T291] usb 5-1: unable to get BOS descriptor or descriptor too short [ 183.075853][ T39] usb 4-1: string descriptor 0 read error: -71 [ 183.082484][ T39] hub 4-1:32.0: USB hub found [ 183.087784][ T291] usb 5-1: config 1 interface 0 altsetting 64 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 183.098741][ T291] usb 5-1: config 1 interface 0 has no altsetting 0 [ 183.105398][ T39] hub 4-1:32.0: config failed, can't read hub descriptor (err -22) [ 183.114940][ T291] usb 5-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.40 [ 183.124469][ T291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.133719][ T291] usb 5-1: Product: syz [ 183.137942][ T291] usb 5-1: Manufacturer: syz [ 183.142678][ T291] usb 5-1: SerialNumber: syz [ 183.148841][ T8504] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 183.162334][ T39] usb 4-1: USB disconnect, device number 87 [ 183.198130][ T527] usb 2-1: selecting invalid altsetting 0 [ 183.207347][ T527] usb 2-1: USB disconnect, device number 92 [ 183.374856][ T291] usbhid 5-1:1.0: can't add hid device: -71 [ 183.381325][ T291] usbhid: probe of 5-1:1.0 failed with error -71 [ 183.390879][ T291] usb 5-1: USB disconnect, device number 87 [ 183.429620][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 183.600255][ T19] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 183.642993][ T833] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 183.743022][ T8530] loop1: detected capacity change from 0 to 16 [ 183.750176][ T8530] erofs: (device loop1): mounted with root inode @ nid 36. [ 183.774122][ T8532] loop1: detected capacity change from 0 to 512 [ 183.783401][ T8532] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 183.795193][ T19] usb 1-1: unable to get BOS descriptor or descriptor too short [ 183.805264][ T19] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.815770][ T19] usb 1-1: config 0 has no interfaces? [ 183.816214][ T287] EXT4-fs (loop1): unmounting filesystem. [ 183.823004][ T19] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 183.836770][ T833] usb 3-1: Using ep0 maxpacket: 16 [ 183.842063][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.850759][ T19] usb 1-1: Product: syz [ 183.855053][ T19] usb 1-1: Manufacturer: 忁ᮿɔ粝⒠꣗耕歈燐箍 [ 183.863390][ T19] usb 1-1: SerialNumber: syz [ 183.868390][ T833] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.879418][ T8536] loop1: detected capacity change from 0 to 4096 [ 183.879787][ T19] usb 1-1: config 0 descriptor?? [ 183.890971][ T833] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 183.902286][ T833] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 183.912417][ T8536] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 183.917803][ T833] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 183.933573][ T833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 183.941991][ T833] usb 3-1: SerialNumber: syz [ 183.953672][ T291] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 183.962490][ T8540] loop4: detected capacity change from 0 to 1024 [ 183.980246][ T8540] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 183.996339][ T287] EXT4-fs (loop1): unmounting filesystem. [ 184.003262][ T284] EXT4-fs (loop4): unmounting filesystem. [ 184.057883][ T8549] loop4: detected capacity change from 0 to 1024 [ 184.058325][ T8547] loop1: detected capacity change from 0 to 2048 [ 184.081444][ T8549] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 184.095145][ T8547] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 184.104965][ T284] EXT4-fs (loop4): unmounting filesystem. [ 184.131330][ T287] EXT4-fs (loop1): unmounting filesystem. [ 184.144072][ T527] usb 1-1: USB disconnect, device number 90 [ 184.166686][ T833] usb 3-1: USB disconnect, device number 90 [ 184.192764][ T8558] loop1: detected capacity change from 0 to 4096 [ 184.201822][ T291] usb 4-1: unable to get BOS descriptor or descriptor too short [ 184.210494][ T291] usb 4-1: not running at top speed; connect to a high speed hub [ 184.219410][ T8558] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 184.228424][ T291] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.240455][ T291] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.251489][ T287] EXT4-fs (loop1): unmounting filesystem. [ 184.257966][ T291] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 184.267238][ T291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.275305][ T291] usb 4-1: Product: syz [ 184.279619][ T291] usb 4-1: Manufacturer: syz [ 184.284262][ T291] usb 4-1: SerialNumber: syz [ 184.423341][ T641] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 184.510021][ T291] usb 4-1: 0:2 : does not exist [ 184.527687][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 184.544141][ T291] usb 4-1: USB disconnect, device number 88 [ 184.616903][ T641] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 184.626913][ T641] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 184.636111][ T641] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.659141][ T641] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 184.699936][ T8561] loop1: detected capacity change from 0 to 131072 [ 184.734398][ T8561] F2FS-fs (loop1): Found nat_bits in checkpoint [ 184.785863][ T8561] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 184.865245][ T833] usb 5-1: USB disconnect, device number 88 [ 185.024542][ T8585] loop1: detected capacity change from 0 to 256 [ 185.054104][ T641] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 185.246469][ T832] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 185.258622][ T641] usb 3-1: unable to get BOS descriptor or descriptor too short [ 185.278761][ T641] usb 3-1: config 0 has no interfaces? [ 185.286395][ T641] usb 3-1: language id specifier not provided by device, defaulting to English [ 185.298239][ T8587] loop1: detected capacity change from 0 to 65536 [ 185.306384][ T641] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0102, bcdDevice= 0.40 [ 185.327753][ T641] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.348959][ T641] usb 3-1: Product: syz [ 185.353245][ T641] usb 3-1: Manufacturer: ᗽ갯璷썕ꉽ뢏횻넹簶᧡斅好ペ㋳Ԝ㡶恣嚜抓磕霮Ɜ縵렐棊홬毼燁␲䒸툧㣪ଷퟳ꧉ꕱ蹧奫졢쎕㕄䮈那撣⾧ѿ␑⁹鞐遣ᒑ撦卣䱃䃛ϺƖ吃㼶鮀䬤쬖쳴认Ӕ暠螿忘鴯﹂䃄浌⥰赺 [ 185.396135][ T641] usb 3-1: SerialNumber: syz [ 185.414887][ T641] usb 3-1: config 0 descriptor?? [ 185.449579][ T832] usb 1-1: Using ep0 maxpacket: 16 [ 185.455897][ T832] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.476835][ T832] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.499809][ T832] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 185.519808][ T832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.530565][ T832] usb 1-1: Product: syz [ 185.541336][ T832] usb 1-1: Manufacturer: syz [ 185.549467][ T832] usb 1-1: SerialNumber: syz [ 185.642916][ T779] usb 3-1: USB disconnect, device number 91 [ 185.783157][ T832] usb 1-1: 0:1 : does not exist [ 185.788077][ T832] usb 1-1: 0:2 : does not exist [ 185.804858][ T832] usb 1-1: USB disconnect, device number 91 [ 186.668245][ T833] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 186.682197][ T8589] loop3: detected capacity change from 0 to 262144 [ 186.733801][ T8589] F2FS-fs (loop3): Found nat_bits in checkpoint [ 186.850007][ T8589] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 186.871351][ T833] usb 1-1: Using ep0 maxpacket: 16 [ 186.877744][ T833] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.900497][ T833] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 186.947719][ T833] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 186.988934][ T833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.997163][ T833] usb 1-1: Product: syz [ 187.031708][ T833] usb 1-1: Manufacturer: syz [ 187.036373][ T833] usb 1-1: SerialNumber: syz [ 187.272697][ T833] usb 1-1: USB disconnect, device number 92 [ 187.525048][ T8592] loop4: detected capacity change from 0 to 262144 [ 187.606666][ T8594] loop1: detected capacity change from 0 to 262144 [ 187.669502][ T8594] F2FS-fs (loop1): Found nat_bits in checkpoint [ 187.733393][ T28] audit: type=1400 audit(1764691978.374:287): avc: denied { create } for pid=8652 comm="syz.2.3991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 187.763007][ T28] audit: type=1400 audit(1764691978.383:288): avc: denied { write } for pid=8652 comm="syz.2.3991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 187.783922][ T8594] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 187.844234][ T833] usb 5-1: new low-speed USB device number 89 using dummy_hcd [ 187.860883][ T28] audit: type=1400 audit(1764691978.383:289): avc: denied { nlmsg_write } for pid=8652 comm="syz.2.3991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 187.962018][ T779] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 188.048771][ T833] usb 5-1: config index 0 descriptor too short (expected 65535, got 36) [ 188.064365][ T833] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 188.081153][ T28] audit: type=1400 audit(1764691978.711:290): avc: denied { bind } for pid=8667 comm="syz.2.3999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 188.111400][ T833] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 188.132831][ T832] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 188.140746][ T833] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 188.141254][ T28] audit: type=1400 audit(1764691978.711:291): avc: denied { name_bind } for pid=8667 comm="syz.2.3999" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 188.161707][ T833] usb 5-1: config index 1 descriptor too short (expected 65535, got 36) [ 188.172827][ T28] audit: type=1400 audit(1764691978.711:292): avc: denied { node_bind } for pid=8667 comm="syz.2.3999" saddr=224.0.0.2 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 188.204405][ T833] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 188.210174][ T779] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 188.216187][ T833] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 188.237745][ T779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.246172][ T833] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 188.262463][ T779] usb 4-1: config 0 descriptor?? [ 188.279570][ T833] usb 5-1: config index 2 descriptor too short (expected 65535, got 36) [ 188.303903][ T833] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 188.304828][ T28] audit: type=1326 audit(1764691978.917:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8675 comm="syz.2.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d72d8f749 code=0x7ffc0000 [ 188.324641][ T833] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 188.346971][ T832] usb 1-1: Using ep0 maxpacket: 16 [ 188.351805][ T28] audit: type=1326 audit(1764691978.945:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8675 comm="syz.2.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f4d72d8f749 code=0x7ffc0000 [ 188.355461][ T832] usb 1-1: unable to get BOS descriptor or descriptor too short [ 188.419065][ T28] audit: type=1326 audit(1764691978.945:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8675 comm="syz.2.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d72d8f749 code=0x7ffc0000 [ 188.426432][ T833] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 188.452927][ T832] usb 1-1: config 13 has an invalid interface number: 50 but max is 0 [ 188.469973][ T833] usb 5-1: string descriptor 0 read error: -22 [ 188.477631][ T28] audit: type=1400 audit(1764691979.076:296): avc: denied { write } for pid=8683 comm="syz.2.4007" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 188.478552][ T833] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 188.506645][ T779] usb 4-1: USB disconnect, device number 89 [ 188.514180][ T832] usb 1-1: config 13 has no interface number 0 [ 188.527085][ T832] usb 1-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 188.539616][ T832] usb 1-1: config 13 interface 50 has no altsetting 0 [ 188.546611][ T833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.556120][ T832] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 188.578710][ T832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.587154][ T832] usb 1-1: Product: syz [ 188.591391][ T832] usb 1-1: Manufacturer: syz [ 188.600040][ T832] usb 1-1: SerialNumber: syz [ 188.607943][ T8658] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 188.836256][ T832] usb 1-1: MIDIStreaming interface descriptor not found [ 188.856078][ T832] usb 1-1: USB disconnect, device number 93 [ 188.875261][ T833] usb 5-1: USB disconnect, device number 89 [ 188.897331][ T8712] device ip6tnl1 entered promiscuous mode [ 189.004414][ T8720] netlink: 'syz.2.4024': attribute type 13 has an invalid length. [ 189.012475][ T8720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4024'. [ 189.142947][ T8735] mmap: syz.2.4031 (8735): VmData 29085696 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 189.370407][ T8759] netlink: 'syz.3.4043': attribute type 3 has an invalid length. [ 189.490193][ T8773] xt_socket: unknown flags 0x40 [ 189.513607][ T8776] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4052'. [ 189.635150][ T8795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4061'. [ 189.675728][ T8696] loop1: detected capacity change from 0 to 131072 [ 189.683690][ T8797] xt_l2tp: wrong L2TP version: 0 [ 189.734766][ T8696] F2FS-fs (loop1): Found nat_bits in checkpoint [ 189.826787][ T8821] netlink: 'syz.3.4071': attribute type 2 has an invalid length. [ 189.841457][ T8821] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.874809][ T8696] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 189.963523][ T8839] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4081'. [ 190.157459][ T8863] netlink: 'syz.0.4095': attribute type 3 has an invalid length. [ 190.522408][ T8908] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4116'. [ 190.575921][ T8908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4116'. [ 190.623592][ T8912] device veth1_macvtap left promiscuous mode [ 190.629641][ T8912] device macsec0 entered promiscuous mode [ 190.688470][ T8920] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4121'. [ 190.719405][ T8920] netlink: 18 bytes leftover after parsing attributes in process `syz.1.4121'. [ 190.744804][ T8920] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.847199][ T8935] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4128'. [ 190.977392][ T8952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4136'. [ 190.997163][ T8952] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.414229][ T9012] tc_dump_action: action bad kind [ 191.584282][ T8875] loop4: detected capacity change from 0 to 131072 [ 191.652133][ T9050] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.672296][ T8875] F2FS-fs (loop4): Found nat_bits in checkpoint [ 191.789898][ T9068] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 191.812220][ T8875] F2FS-fs (loop4): Mounted with checkpoint version = 1b41e955 [ 191.978520][ T9099] xt_TCPMSS: Only works on TCP SYN packets [ 192.162930][ T833] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 192.245919][ T9140] xt_TCPMSS: Only works on TCP SYN packets [ 192.258267][ T9139] loop1: detected capacity change from 0 to 256 [ 192.367147][ T833] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 192.386779][ T833] usb 1-1: config 0 interface 0 has no altsetting 0 [ 192.411249][ T833] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 192.432426][ T833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.448975][ T833] usb 1-1: config 0 descriptor?? [ 192.457542][ T9083] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 192.591791][ T9192] device vlan0 entered promiscuous mode [ 192.696141][ T833] usbhid 1-1:0.0: can't add hid device: -71 [ 192.702207][ T833] usbhid: probe of 1-1:0.0 failed with error -71 [ 192.732796][ T833] usb 1-1: USB disconnect, device number 94 [ 192.739604][ T9215] x_tables: duplicate underflow at hook 2 [ 192.760927][ T9219] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 192.788704][ T9223] loop3: detected capacity change from 0 to 512 [ 192.796107][ T9224] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 192.811764][ T9223] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 192.824981][ T9223] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 192.833685][ T9223] System zones: 1-12 [ 192.857127][ T9223] EXT4-fs (loop3): 1 truncate cleaned up [ 192.862899][ T9223] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 192.897145][ T286] EXT4-fs (loop3): unmounting filesystem. [ 192.952354][ T9248] syz.1.4279 uses obsolete (PF_INET,SOCK_PACKET) [ 193.142192][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 193.142211][ T28] audit: type=1400 audit(1764691983.435:345): avc: denied { read write } for pid=9275 comm="syz.2.4294" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 193.174047][ T28] audit: type=1400 audit(1764691983.435:346): avc: denied { open } for pid=9275 comm="syz.2.4294" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 193.199419][ T28] audit: type=1400 audit(1764691983.435:347): avc: denied { ioctl } for pid=9275 comm="syz.2.4294" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 193.260296][ T9288] netlink: 'syz.2.4299': attribute type 1 has an invalid length. [ 193.264916][ T9292] syz.3.4302 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 193.503136][ T9332] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.564832][ T9342] loop3: detected capacity change from 0 to 256 [ 193.580583][ T28] audit: type=1400 audit(1764691983.846:348): avc: denied { connect } for pid=9343 comm="syz.0.4328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 193.634938][ T9342] FAT-fs (loop3): Directory bread(block 64) failed [ 193.645303][ T9342] FAT-fs (loop3): Directory bread(block 65) failed [ 193.658017][ T9342] FAT-fs (loop3): Directory bread(block 66) failed [ 193.679775][ T9342] FAT-fs (loop3): Directory bread(block 67) failed [ 193.697538][ T9342] FAT-fs (loop3): Directory bread(block 68) failed [ 193.704860][ T9342] FAT-fs (loop3): Directory bread(block 69) failed [ 193.711751][ T9342] FAT-fs (loop3): Directory bread(block 70) failed [ 193.718617][ T9342] FAT-fs (loop3): Directory bread(block 71) failed [ 193.725431][ T9342] FAT-fs (loop3): Directory bread(block 72) failed [ 193.732320][ T9342] FAT-fs (loop3): Directory bread(block 73) failed [ 193.762443][ T9363] device vlan0 entered promiscuous mode [ 193.899252][ T28] audit: type=1400 audit(1764691984.146:349): avc: denied { ioctl } for pid=9384 comm="syz.4.4348" path="/dev/binderfs/binder1" dev="binder" ino=20 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 193.994900][ T28] audit: type=1326 audit(1764691984.239:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm="syz.3.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697138f749 code=0x7ffc0000 [ 194.086013][ T28] audit: type=1326 audit(1764691984.239:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm="syz.3.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697138f749 code=0x7ffc0000 [ 194.146004][ T28] audit: type=1326 audit(1764691984.267:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm="syz.3.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f697138f749 code=0x7ffc0000 [ 195.102620][ C0] sched: RT throttling activated [ 195.105412][ T28] audit: type=1326 audit(1764691984.267:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm="syz.3.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697138f749 code=0x7ffc0000 [ 195.134071][ T28] audit: type=1326 audit(1764691984.267:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm="syz.3.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697138f749 code=0x7ffc0000 [ 195.166598][ T9425] IPv6: sit1: Disabled Multicast RS [ 196.234698][ T9435] netlink: 'syz.3.4372': attribute type 4 has an invalid length. [ 196.255458][ T9435] netlink: 'syz.3.4372': attribute type 6 has an invalid length. [ 196.287437][ T9435] __nla_validate_parse: 13 callbacks suppressed [ 196.287453][ T9435] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.4372'. [ 196.399387][ T9445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4376'. [ 196.399409][ T9445] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4376'. [ 196.399423][ T9445] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4376'. [ 196.568528][ T9453] device gre1 entered promiscuous mode [ 196.754933][ T9466] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.281033][ T9480] loop3: detected capacity change from 0 to 40427 [ 197.306559][ T9480] F2FS-fs (loop3): fault_type options not supported [ 197.313229][ T9480] F2FS-fs (loop3): Unrecognized mount option "fault_injection=0000000000o]c0000001262" or missing value [ 197.897370][ T9575] netlink: 'syz.0.4441': attribute type 3 has an invalid length. [ 198.038645][ T9593] netlink: 'syz.3.4452': attribute type 3 has an invalid length. [ 198.082129][ T9603] xt_hashlimit: size too large, truncated to 1048576 [ 198.090072][ T9603] xt_hashlimit: invalid rate [ 198.149541][ T9612] xt_CT: No such helper "netbios-ns" [ 198.160880][ T9615] cgroup2: Unexpected value for 'nsdelegate' [ 198.199887][ T9623] xt_CT: You must specify a L4 protocol and not use inversions on it [ 198.213526][ T9624] netlink: 'syz.0.4464': attribute type 7 has an invalid length. [ 198.226096][ T9624] netlink: 'syz.0.4464': attribute type 8 has an invalid length. [ 198.241662][ T9624] netlink: 'syz.0.4464': attribute type 13 has an invalid length. [ 198.268060][ T9632] netlink: 4208 bytes leftover after parsing attributes in process `syz.3.4469'. [ 198.351978][ T9647] loop4: detected capacity change from 0 to 128 [ 198.443108][ T9663] netlink: 'syz.3.4484': attribute type 7 has an invalid length. [ 198.452784][ T9661] xt_limit: Overflow, try lower: 2/0 [ 198.471698][ T9669] device bridge1 entered promiscuous mode [ 198.531037][ T9677] loop4: detected capacity change from 0 to 512 [ 198.602457][ T9677] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 198.611724][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 198.611740][ T28] audit: type=1400 audit(1764691988.561:418): avc: denied { mount } for pid=9676 comm="syz.4.4492" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 198.623188][ T9677] ext4 filesystem being mounted at /1000/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.675959][ T28] audit: type=1400 audit(1764691988.608:419): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 198.696238][ T284] EXT4-fs (loop4): unmounting filesystem. [ 198.744431][ T28] audit: type=1400 audit(1764691988.673:420): avc: denied { create } for pid=9704 comm="syz.4.4502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 198.767377][ T9709] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4505'. [ 198.771260][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4502'. [ 198.801569][ T28] audit: type=1400 audit(1764691988.702:421): avc: denied { write } for pid=9704 comm="syz.4.4502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 198.820693][ T9712] netlink: 'syz.1.4507': attribute type 13 has an invalid length. [ 198.849367][ T28] audit: type=1400 audit(1764691988.767:422): avc: denied { read write } for pid=9720 comm="syz.0.4510" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 198.993825][ T28] audit: type=1400 audit(1764691988.767:423): avc: denied { open } for pid=9720 comm="syz.0.4510" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 199.004007][ T9745] loop1: detected capacity change from 0 to 512 [ 199.025251][ T9752] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4526'. [ 199.078858][ T28] audit: type=1400 audit(1764691988.907:424): avc: denied { create } for pid=9743 comm="syz.3.4522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 199.111918][ T9764] xt_TPROXY: Can be used only with -p tcp or -p udp [ 199.136482][ T28] audit: type=1400 audit(1764691988.917:425): avc: denied { bind } for pid=9743 comm="syz.3.4522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 199.172263][ T9772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4536'. [ 199.177582][ T9745] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 199.195519][ T9745] ext4 filesystem being mounted at /872/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.214450][ T9745] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 199.239531][ T287] EXT4-fs (loop1): unmounting filesystem. [ 199.245654][ T28] audit: type=1400 audit(1764691989.113:426): avc: denied { setattr } for pid=9744 comm="syz.1.4524" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 199.490792][ T9824] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4561'. [ 199.521682][ T28] audit: type=1400 audit(1764691989.403:427): avc: denied { prog_run } for pid=9820 comm="syz.2.4559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 199.744193][ T9859] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.751528][ T9859] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.891597][ T9884] netlink: 'syz.4.4590': attribute type 5 has an invalid length. [ 200.206131][ T9971] xt_CT: No such helper "snmp_trap" [ 200.820822][T10100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.032782][T10140] IPv6: NLM_F_CREATE should be specified when creating new route [ 201.133905][T10152] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.141189][T10152] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.593229][T10230] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 201.642308][T10239] device ipip0 entered promiscuous mode [ 201.747316][T10259] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.754599][T10259] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.830492][T10272] __nla_validate_parse: 6 callbacks suppressed [ 201.830513][T10272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4781'. [ 201.848150][T10272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4781'. [ 201.863719][T10272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4781'. [ 202.028707][T10315] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4801'. [ 202.168656][T10353] xt_TCPMSS: Only works on TCP SYN packets [ 202.266931][T10375] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4832'. [ 202.276898][T10375] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4832'. [ 202.293064][T10375] tc_dump_action: action bad kind [ 202.379544][T10399] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 202.454664][T10415] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.489307][T10421] xt_TPROXY: Can be used only with -p tcp or -p udp [ 202.556206][T10436] device bridge2 entered promiscuous mode [ 202.652712][T10464] validate_nla: 7 callbacks suppressed [ 202.652734][T10464] netlink: 'syz.2.4875': attribute type 2 has an invalid length. [ 202.793376][T10497] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.800664][T10497] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.925546][T10520] netlink: 'syz.2.4900': attribute type 6 has an invalid length. [ 203.108796][T10570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4928'. [ 203.120017][T10570] device bridge_slave_0 left promiscuous mode [ 203.126601][T10570] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.232094][T10597] xt_l2tp: v2 tid > 0xffff: 134217728 [ 203.266462][T10605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4945'. [ 203.322240][T10617] netlink: 'syz.0.4951': attribute type 3 has an invalid length. [ 203.550470][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4980'. [ 203.611721][T10690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4988'. [ 203.795445][T10731] xt_ecn: cannot match TCP bits for non-tcp packets [ 203.982386][ T28] kauditd_printk_skb: 556 callbacks suppressed [ 203.982403][ T28] audit: type=1400 audit(1764691993.580:984): avc: denied { read write } for pid=283 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 204.052840][ T28] audit: type=1400 audit(1764691993.590:985): avc: denied { read write } for pid=287 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 204.079347][ T28] audit: type=1400 audit(1764691993.618:986): avc: denied { read write } for pid=287 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 204.109844][T10785] xt_hashlimit: max too large, truncated to 1048576 [ 204.116747][ T28] audit: type=1400 audit(1764691993.618:987): avc: denied { name_bind } for pid=10774 comm="syz.2.5028" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=0 [ 204.156221][ T28] audit: type=1400 audit(1764691993.637:988): avc: denied { read write } for pid=287 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 204.180740][ T28] audit: type=1400 audit(1764691993.637:989): avc: denied { read write } for pid=283 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 204.213390][ T28] audit: type=1400 audit(1764691993.646:990): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 204.246275][ T28] audit: type=1400 audit(1764691993.665:991): avc: denied { read write } for pid=287 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 204.276090][T10803] x_tables: duplicate underflow at hook 3 [ 204.306032][ T28] audit: type=1400 audit(1764691993.711:992): avc: denied { read write } for pid=283 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 204.370570][ T28] audit: type=1400 audit(1764691993.721:993): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 204.433431][T10832] device ip6gre1 entered promiscuous mode [ 204.566823][T10865] netlink: 'syz.4.5073': attribute type 3 has an invalid length. [ 204.584326][T10865] netlink: 'syz.4.5073': attribute type 3 has an invalid length. [ 204.667211][T10886] netlink: 'syz.0.5085': attribute type 4 has an invalid length. [ 204.675941][T10888] xt_connbytes: Forcing CT accounting to be enabled [ 204.679551][T10886] netlink: 'syz.0.5085': attribute type 5 has an invalid length. [ 204.688695][T10888] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'nat' [ 204.963760][T10952] xt_TCPMSS: Only works on TCP SYN packets [ 205.118842][T10998] kernel profiling enabled (shift: 17) [ 205.296559][T11040] netlink: 'syz.2.5160': attribute type 1 has an invalid length. [ 205.450597][T11081] device vti0 entered promiscuous mode [ 205.532716][T11106] xt_connbytes: Forcing CT accounting to be enabled [ 205.601184][T11126] netlink: 'syz.2.5203': attribute type 27 has an invalid length. [ 205.634886][T11133] syz.2.5208 (11133): /proc/11132/oom_adj is deprecated, please use /proc/11132/oom_score_adj instead. [ 205.647876][T11135] device bridge_slave_0 left promiscuous mode [ 205.654116][T11135] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.896685][T11199] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 206.257357][T11294] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 206.374027][T11312] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.463063][T11327] device vti0 left promiscuous mode [ 206.482136][T11331] netlink: 'syz.4.5304': attribute type 49 has an invalid length. [ 206.546192][T11351] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11351 comm=syz.3.5312 [ 206.657128][T11379] device bridge1 entered promiscuous mode [ 207.312936][T11533] device vlan0 entered promiscuous mode [ 207.341548][T11539] xt_policy: too many policy elements [ 207.606512][T11578] xt_CT: No such helper "pptp" [ 207.781627][T11605] __nla_validate_parse: 7 callbacks suppressed [ 207.781660][T11605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5438'. [ 208.293013][T11698] xt_TCPMSS: Only works on TCP SYN packets [ 208.368938][T11717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5495'. [ 208.641746][T11778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5524'. [ 208.686871][T11787] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5529'. [ 208.771128][T11806] xt_policy: output policy not valid in PREROUTING and INPUT [ 208.984443][T11867] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5569'. [ 208.998546][T11867] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.049121][T11880] xt_CT: You must specify a L4 protocol and not use inversions on it [ 209.338214][ T28] kauditd_printk_skb: 729 callbacks suppressed [ 209.338231][ T28] audit: type=1400 audit(200.321:1723): avc: denied { read write } for pid=284 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 209.370859][T11967] validate_nla: 4 callbacks suppressed [ 209.370879][T11967] netlink: 'syz.4.5618': attribute type 49 has an invalid length. [ 209.385042][ T28] audit: type=1400 audit(200.330:1724): avc: denied { read write } for pid=283 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 209.448899][T11980] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 209.465274][ T28] audit: type=1400 audit(200.349:1725): avc: denied { read write } for pid=287 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 209.495113][ T28] audit: type=1400 audit(200.349:1726): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 209.553047][ T28] audit: type=1400 audit(200.358:1727): avc: denied { read write } for pid=283 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 209.567251][T12001] xt_SECMARK: invalid security context 'unconfined' [ 209.580814][ T28] audit: type=1400 audit(200.358:1728): avc: denied { read write } for pid=284 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 209.621969][ T28] audit: type=1400 audit(200.387:1729): avc: denied { write } for pid=11971 comm="syz.2.5622" name="dev" dev="proc" ino=4026532299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 209.655389][ T28] audit: type=1400 audit(200.405:1730): avc: denied { read write } for pid=285 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 209.725415][ T28] audit: type=1400 audit(200.405:1731): avc: denied { read write } for pid=284 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 209.776277][ T28] audit: type=1400 audit(200.405:1732): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 209.928036][T12072] x_tables: unsorted entry at hook 1 [ 209.945873][T12079] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 210.113433][T12116] netlink: 'syz.2.5693': attribute type 5 has an invalid length. [ 210.230112][T12142] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 210.446426][T12194] 8021q: VLANs not supported on gre0 [ 210.785348][T12287] netlink: 'syz.0.5773': attribute type 46 has an invalid length. [ 210.799018][T12287] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5773'. [ 210.846619][T12299] netlink: 'syz.4.5779': attribute type 7 has an invalid length. [ 210.876872][T12299] netlink: 'syz.4.5779': attribute type 8 has an invalid length. [ 210.943156][T12323] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 211.005213][T12334] netlink: 'syz.2.5795': attribute type 12 has an invalid length. [ 211.280240][T12395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5825'. [ 211.299448][T12395] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5825'. [ 211.351255][T12406] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 212.208971][T12595] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5925'. [ 212.231284][T12595] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5925'. [ 212.397662][T12630] x_tables: unsorted underflow at hook 4 [ 212.667863][ T3555] ------------[ cut here ]------------ [ 212.673495][ T3555] kernel BUG at fs/buffer.c:2714! [ 212.700322][ T3555] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 212.706462][ T3555] CPU: 1 PID: 3555 Comm: kmmpd-loop0 Not tainted syzkaller #0 [ 212.709896][T12693] xt_CT: No such helper "netbios-ns" [ 212.713939][ T3555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 212.713969][ T3555] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 212.734730][ T3555] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 e8 32 e8 ff e9 b0 fe ff ff e8 8e ba a3 ff 0f 0b e8 87 ba a3 ff <0f> 0b e8 80 ba a3 ff 0f 0b e8 79 ba a3 ff 0f 0b e8 72 ba a3 ff 0f [ 212.754454][ T3555] RSP: 0000:ffffc9000f6c7ca0 EFLAGS: 00010293 [ 212.760561][ T3555] RAX: ffffffff81cc6de9 RBX: 0000000000000000 RCX: ffff88811a08d100 [ 212.768561][ T3555] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 212.776545][ T3555] RBP: ffffc9000f6c7cf0 R08: dffffc0000000000 R09: ffffed102187b855 [ 212.784526][ T3555] R10: ffffed102187b855 R11: 1ffff1102187b854 R12: 0000000000000000 [ 212.792503][ T3555] R13: 1ffff1102187b854 R14: ffff88810c3dc2a0 R15: 0000000000003801 [ 212.800491][ T3555] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 212.809439][ T3555] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.816036][ T3555] CR2: 00007f4d73c93f98 CR3: 0000000134ed2000 CR4: 00000000003506a0 [ 212.824032][ T3555] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 212.832007][ T3555] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 212.839991][ T3555] Call Trace: [ 212.843279][ T3555] [ 212.846299][ T3555] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 212.852129][ T3555] submit_bh+0x1f/0x30 [ 212.856207][ T3555] write_mmp_block_thawed+0x34a/0x4c0 [ 212.861691][ T3555] ? read_mmp_block+0x6d0/0x6d0 [ 212.866585][ T3555] ? __cfi_process_timeout+0x10/0x10 [ 212.871889][ T3555] write_mmp_block+0x138/0x2b0 [ 212.876671][ T3555] kmmpd+0x3ce/0x950 [ 212.880581][ T3555] kthread+0x281/0x320 [ 212.884653][ T3555] ? __cfi_kmmpd+0x10/0x10 [ 212.889076][ T3555] ? __cfi_kthread+0x10/0x10 [ 212.893678][ T3555] ret_from_fork+0x1f/0x30 [ 212.898109][ T3555] [ 212.901137][ T3555] Modules linked in: [ 212.909963][ T3555] ---[ end trace 0000000000000000 ]--- [ 212.921932][ T3555] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 212.929352][ T3555] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 e8 32 e8 ff e9 b0 fe ff ff e8 8e ba a3 ff 0f 0b e8 87 ba a3 ff <0f> 0b e8 80 ba a3 ff 0f 0b e8 79 ba a3 ff 0f 0b e8 72 ba a3 ff 0f [ 212.949496][ T3555] RSP: 0000:ffffc9000f6c7ca0 EFLAGS: 00010293 [ 212.955660][ T3555] RAX: ffffffff81cc6de9 RBX: 0000000000000000 RCX: ffff88811a08d100 [ 212.964313][ T3555] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 212.972467][ T3555] RBP: ffffc9000f6c7cf0 R08: dffffc0000000000 R09: ffffed102187b855 [ 212.980587][ T3555] R10: ffffed102187b855 R11: 1ffff1102187b854 R12: 0000000000000000 [ 212.988729][ T3555] R13: 1ffff1102187b854 R14: ffff88810c3dc2a0 R15: 0000000000003801 [ 212.996852][ T3555] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 213.006046][ T3555] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.012793][ T3555] CR2: 000055558f2554a8 CR3: 000000012f338000 CR4: 00000000003506a0 [ 213.020874][ T3555] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 213.028957][ T3555] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 213.040037][ T3555] Kernel panic - not syncing: Fatal exception [ 213.046365][ T3555] Kernel Offset: disabled [ 213.050710][ T3555] Rebooting in 86400 seconds..