last executing test programs:

5m55.46217193s ago: executing program 2 (id=1745):
mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=bind:7-', @ANYRESDEC, @ANYRESDEC])

5m55.462026821s ago: executing program 2 (id=1746):
mknod(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa010, 0x247)

5m55.390219771s ago: executing program 2 (id=1747):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x28, 0x801, 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3000010, &(0x7f0000000400)=ANY=[@ANYBLOB='adinicb,uid=forget,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c766f6c756d653d30303030303030303030303030303030303030322c696f636861727365743d6d6163637972696c6c69632c6769643d666f726765742c6769643d69672c6d6f64653deba5f0d0303030303030303030303030303030303030303030"], 0x1, 0xc59, &(0x7f0000001640)="$eJzs3U9sHNd9B/DfGy3FldJWTJwqThoHm7ZIZcVy9S+iYhXuqqbZBpBlIhRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFEjQw2iLokWldILn4UOTUE9HCRlD0wBYBAhQIWMzsW3FJkbYs/hElfz429d2ZeW/mvZn1jCzozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOL3Xr58+kzaYsOhR9AYAGBfXB396umzWz3/AYAn1rXt/v8fAAAAAAAAAAAAAAA4KFIU8VSkmL26msar5Y76lXbfnbtjQ8NbVzuSqpqHqvLlT/3M2XPnv3Rh8GI3r7Sn36f+bvtMvDp67XLjpZnbs3OT8/OTE42x6faNmYnJB97DTutvdrI6AY3br92ZuHlzvnH2+XMbNt8deK//Y8cHLg0+e+qZbtmxoeHh0fUi9d7ytYduSMd2IzwORxGnIsVz3/9pakVEETs/F/X9vfabHak6cbLqxNjQcNWRqXZreqHcONI9EUVEo6dSs3uOtr4WUevb1z5srxmxWDa/bPDJsnujs6251vWpycZIa26hvdCemR5JndaW/WlEERdTxFJErPTfv7u+KKIWKb5zbDVdz2/9qM7DF6uBwdu3o9jDPj6Asp2Nvoil4jG4ZgdYfxTxSqT42dsn4ka+z1T3mi9EvFLmDyLeLPPFiFR+Mc5HvLvF94jHUy2K+PPy+l9aTRPV/aB7X7nytcZXpm/O9JTt3lc+5PPhvjvFI3o+HNmU++OA35vqUUSruuOvpof/zQ4AAAAAAAAAAAAAAAAAu+1IFPHpSPHyv/1RNa44qnHpxy4N/v7AL/eOGX/6A/ZTln0+IhaLBxuTezgPDBxJIyk94rHEH2X1KOKP8/i/bz3qxgAAAAAAAAAAAAAAAAAAAHykFfGTSPHCOyfSUvTOKd6evtW41ro+1ZkVtjv3b3fO9LW1tbVGqjIG8vJ4Z3ltMedSzuWcKynPL9ytX3SymXM852LOpZzLOVdyxqFcP2cz53jOxZxLOZdzruSMWq6fs5lzPOdizqWcyzlXcsYBmbsXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBJUkQRv4gU3/7GaooUEc2I8ejkcv+jbh0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUOpPRfxDpGj8QfPeulpEpOrfjhPlL+ejebjMT0RzsMwXo3k5Z6vKWvNbj6D97ExfKuLHkaK//ta9C56vf19n6d7XIN785vrSZ2qdPNTdOPBe/8eOH7s0OPy5p7f7nLZqwMkr7ek7dxtjQ8PDoz2ra/non+hZN5CPW+xO14mI+dffeK01NTU59/Afyq/AQ1bvXskdHH0/P6TaLja1/+D3PWoHohmP7kPUDkQzHk3fN6jv942JfVE+/9+NFL/9zr93H/id5389fqmzdO8JHz//k/Xn/wubd/SAz//a5nr5+V8+CbZ6/j/Vs+6F/LuRvlpEfeH2bN/xiPr862+cat9u3Zq8NTl9/vTpLw8Ofvnc6b7DEfWb7anJnk+7croAAAAAAAAAAAAAAAAA9k8q4ncjRevHq6kREXer8VoDlwafPfXMoThUjbfaMG771dFrlxsvzdyenZucn5+caIxNt2/MTEw+6OHq1XCvsaHhPenMBzqyx+0/Un9pZvb1ufatP1zYcvvR+uXr8wtzrRtbb44jUUQ0e9ecrBo8NjRcNXqq3Zquqo5sOZj+w+tLRfxHpLhxvpE+n9fl8f+bR/hvGP+/uHlHuzj+/3NH18f/fbwTRfeYKRXx80jxW3/xdHy+aufRuO+c5XJ/EylOXvxsLheHy3LdNnTeK9AZGViW/Z9I8fe/2Fi2Ox7yqfWyZz70CT7gyut/LNIr3/uz78av53Ub3/+w9fU/unlHe/T+h0/2rDu64X0FO+46+fqfihQvPvVW/Ea15v/e9/0f3Tc2nOgUXn8/xx5d/1/tWTeQj/ubu9V5AAAAAAAAAACAx1hfKuJvI8UPh2vpQl73IH//b2Lzjvbo7399qmfdxO7MV/TB094AAAAAwBOiLxXxk0hxa+Gte2OoN47/7hn/+Tvr4z+H0qat1Z/z/Ur13oDd/PO/XgP5uOM77zYAAAAAAAAAAAAAAAAAAAAcKCkVcSHPpz5ejeef2HY+9eVI8fJ/PZfLpeNlue488APVr/Wra9OnLk9NzdRjoXV9arIxOtu6MVnW/WSkWP3rz+a6RTW/ene++c4c7+tzsc9FiuHvdct25mLvzk3emQ+8vrYWcaYs+/FI8Z9/t7Fsnpo6zx1d7fdsWfavIsXX/2nrssfXy54ry343Uvzo641u2aNl2Qv5ZaifWi/7/I2ZYm8uDAAAAAAAAAAAAAAAAAAAAB8pfamIP40U/3176d5Y/jz/f1/PYuXNb/bM97/J3Wqe/4Fq/v/tPj/M/P/VewUWtzsqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8mVIU8UakmL26mpb7y+WO+pX29J27Y0PDW1c7kqqah6ry5U/9zNlz5790YfBiN9+//m77dLw6eu1y46WZ27Nzk/PzkxONsen2jZmJyQfew07rb3ayOgGN26/dmbh5c75x9vlzGzbfHXiv/2PHBy4NPnvqmW7ZsaHh4dGeMrW+hz76fdI26w9HEX8ZKZ77/k/TD/sjitj5ufiA785eO1J14mTVibGh4aojU+3W9EK5caR7IoqIRk+lZvcc7cO12JFmxGLZ/LLBJ8vujc625lrXpyYbI625hfZCe2Z6JHVaW/anEUVcTBFLEbHSf//u+qKI1yLFd46tpn/ujzjUPQ9fvDr61dNnt29HsYd9fABlOxt9EUvFY3DNDrD+KOIfI8XP3j4R/9IfUYvOT3wh4pUyfxDxZnSudyq/GOcj3t3ie8TjqRZF/G95/S+tprf7y/tB975y5WuNr0zfnOkp272vPPbPh/10wO9N9SjiR9UdfzX9q/+uAQAAAAAAAAAAAAAAAA6QIn4tUrzwzolUjQ++N6a4PX2rca11faozrK879q87ZnptbW2tkTrZzDmeczHnUs7lnCs5o8j1czbLrK+tjeflxZxLOZdzruSMQ7l+zmbO8ZyLOZdyLudcyRm1XD9nM+d4zsWcSzmXc67kjAMydg8AAAAAAAAAAAAAAAAAAHiyFNU/Kb79jdW01t+ZX3o8OrlsPtAn3v8HAAD//9/q7Wc=")
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ioctl$sock_SIOCOUTQ(r3, 0x5411, 0x0)
r4 = socket$l2tp(0x2, 0x2, 0x73)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x4)
chdir(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x0)
truncate(&(0x7f0000000000)='./file1\x00', 0x8000)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, 0x0, 0x0)

5m54.498502671s ago: executing program 2 (id=1757):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101)
mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$9p_unix(&(0x7f0000000200)='./file1/file0\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1002, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

5m54.413358256s ago: executing program 2 (id=1758):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4a8, &(0x7f0000000300)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

5m54.197664621s ago: executing program 2 (id=1761):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4000, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)

5m54.131489588s ago: executing program 32 (id=1761):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4000, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)

4m35.993363147s ago: executing program 3 (id=2698):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000180)={0x2, {{0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x9}}, {{0xa, 0x4e20, 0x10000005, @local, 0x40}}}, 0x108)
getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6)

4m35.859731686s ago: executing program 3 (id=2703):
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8)
r0 = gettid()
timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)=<r1=>0x0)
timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0)
timer_delete(r1)
tkill(r0, 0x12)

4m35.773613187s ago: executing program 3 (id=2706):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x7}, 0x4)
getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000080))

4m35.703604995s ago: executing program 3 (id=2708):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x8)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000010600)='./file0\x00', 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c00200da779e57c52e33a83fdbd563a5b7c6b958cb6e49387a5ba5a89b0887c0292eb888cc8efa81040100dc3ba748033542625bc334eaf793332891541000f3c63c0a5f0af254a5bd1f4b81d0c5188ddcadf07eff7b49004e0b243a8a4d93632fbe9ab868d88310829d8e04a3c0572143a3d3d1472cc5da6f72bb097f5f7b95a09e442c0a1463aaa90db7dcbc542dc5bced278eda11583f810469b706968e793db3230"], 0x1, 0x1059a, &(0x7f0000010640)="$eJzs3M1rI2UcB/Bftu6r61pkX/TkgAgNmNC03aIgUnUXXbBL8eXgSdNkGrKbZEqTvrhnPemf4FUQ8ebf4MV/Y/EgeBK8rSiZmcpW96A226zbzwem32eePPPL84RcnkyZAI6t2eTXXypxIc5GxExEnI/I25XyyK0U8WxEPB8RJ+47KmX/nx2nIuJcRFwYFy9qVsqXln+7e++r5268+vk3d6uNn77+cnqrBqbtxYjobxbt3X6RWafIW2V/c6ebZ39pp8zihf7t8jwrcjddzyvsNvfHNfNc7BTjs83t4Tg3es3WODvdjbx/c1C84XCns18nv+BWcys/b6freXaHWZ6dO8W89sq8MxwVddplvU/y8jEa7WfRn+6lxXo2b+fZGozK/qJu1k73xrlTZvl20cp67Xwe6//5Y37kvdMdbO8lO+nWsJsNkqv1xsv1xnKtsZW101G6VGv228tLyVynNx5WG6XN/konyzq9tN7K+tVkrtNq1RqNZO5aut5tDpJGo75Yn69drZatl5K3bn6Q9NrJ3Djf6A62R93eMNnItpLiimqyUF98pZq80EjeW11L1t69fn117f2Prn148/XVG2+Wg/42rWRuYX5hodaYry00qtZ/GJXDXc5x5wsE8K/Z/wPTYP9v/x/2v8d+/bZvHIovEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAsfXjye/ezhuzxfmTZf9TZdczEXElIi5HxKWI+P0BZuLUgZoXI6JSth80/uRf5vB9JfIK42tOl8e5iFgpj3tPP+xPAQAAAB5f3/7w6WcRM+Nm/ue1aU+Io1T+aHNmUvXyn3yemFS1i3mxvQlVu7RfciIuR8TJ2Z8nVO1KRJw4//GEqv0jMwfizH1RKeLEUc4GAAA4Ggd3AhPbvQEAAPDI+WLaE2A68vu15f/il/eCTxdR3hA8e+AMAAAA+B+qTHsCAAAAwEOX7/89/w8AAAAeb8Xz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD/YuZfcNGI4DsB/oFPoS0UVj6uwqrpkwSF6hC57gPY22XGGSIhzkF2OEEHEjIMyhN2YAZHvkwbbI/jJRmJhmzEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACc00OxnN+t//1vmrPdNZNnNAAAAMApm2I5LyvDqv0l3f+Wbv2IiGlETCJiHBGn5u69+FjLHEVEJ9VPvb846sN9RJmw/0w/XZ8j4le6nr6f+1sAAACA27VezRYRvX21fPl5qPEOpEWbQa68csnnQ660URn2N1Pa+CUyi0lEFMPHTGnTiOh+/Z1arfz+erVi8KroVEW3jV4AAADtqs8Ess3eAAAAuDp/Lt0BLqPcr03/xU97wf2qSBuCn2otAAAA4HodP21/0Gm3HwAAAMAFlPP/N+f/pVUB5/8BAADAbajO/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCcNsVyvl7NFk1ztrtm8owGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAntmfdxQIgTAIg73r+06D9z+WNGhqalIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALz53V/+T0yNM8nca2PpeSRZOzW2To29c+PoD+Pr1wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzP3QmEQBCEwb7zP6fF/MOSBo1BhCpY+JhhHhYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+KLf/fJ/YmqcSeZOG0vHI8naVWPrqrH3oHH0YLz9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GIHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgr7c2+bMBDGcfi1kyhxm4yQ3uJjBhoqBCPwISFZ8gwMwEI0VLQWi8AKIOCgpTMFz9P8fzpdcQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7+n09MZHRGSfj8wjH67+DpeDr8jXTTP4vma2Oe7rn1tOtrtRyt8Y/xcRUUTWwm8AANpX3jfFYlnNO2m7aXtp+2nLaV3NXvloAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzuzcsWpTURgA4JOkiVYnRyuI4KCLjU2sRsjiUOguCLqFNpZiqpJmaEuXPoHo5Oor2E1fwRcQHLTg4NBBwUUQJclNeoJBUoR7Q/0++O/9c4dzz8kQ+O9/bgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgWA73wtlBngshzM0c5V3vv+6ujDu/ffZhbhBf7ry5GI/ZHaIYQni43mpeT3Et025ze+dRo9VqtiUSiWSYZP3LBADASVNMolvXfyruL3ev5eoh/Ho1Wv9fifLwl/r/88vzFwbxc+tdJ75XXP8vpLbC6VfubDwtb27vXFvfaKw115qPq9XK4s3FG7dvVcq9ZyVlT0wAAAD4N6Uk4vo/X/+z/38mysOE9f+9pQf343sV1P9jHTX9sp4JAADA/+3cpe/fcmOu50qlsNXodNoL/ePwc6V/zGCqx3Yqibj+L9SznhUAAACQhsO93Ej/fzXKw4T9//nXuwfxmIUQwmzS/59fedJaTW85Uy2N14mzXiMAAADZmk0i7v8Xe/v/88MtD/kQwtXL/Tz5G8CJ6v+PL+6OvLQe7/+vprfEqZSv9b+P3rkWwkwt6xkBAABwkp1OolvsHxT3l9s/ni+V7P8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDf7NgxSgNBFAbgzW5WKzFgpVZeQLSzClgIYuMhREHwBCKIBxBbS+9g6R1SK9hYWKbwBvJmd1TSBCx2lXwfTN4jDJmXSZN/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgrun+d1/Fy6jpy/a954+rk6gvMzW8369vxop+0OXQ/9Bgr+8JAAAAWARVzvdFUbzVj4dRy3HK/3XeE5n/YaXpc56fzf25Pt29buT8f328dfl10Kg5Jz707PzidKezb/j3rc7dMUw3n569VOkHKY9u1qZ1us/B7WRysJTa5S6mBQB+YzvXtsn/h6Lu9jkYAAtj2K7iR/6vxv3OBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCFzwAAAP//OCtiEg==")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140))
mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

4m35.072179338s ago: executing program 3 (id=2714):
set_mempolicy(0xc002, 0x0, 0x979f)

4m32.420534218s ago: executing program 3 (id=2757):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r0, 0x0, 0x23, 0x0, 0x0)

4m32.271061169s ago: executing program 33 (id=2757):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r0, 0x0, 0x23, 0x0, 0x0)

4m29.882139845s ago: executing program 0 (id=2778):
add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)

4m29.801552804s ago: executing program 0 (id=2780):
r0 = socket(0x1d, 0x2, 0x6)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x5028ce1c6d9ffa16, 0x0, 0x0)

4m29.714222703s ago: executing program 0 (id=2782):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f00000003c0)='syzkaller\x00', 0x6}, 0x94)

4m29.65333496s ago: executing program 0 (id=2784):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x21008, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0)
mount$bind(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x20000, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0)

4m29.551723484s ago: executing program 0 (id=2786):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x400448dd, &(0x7f0000000000)={0x0, 0xc3f, "1500", 0x8a})

4m28.795921457s ago: executing program 0 (id=2787):
syz_usb_connect(0x5, 0x24, 0x0, 0x0)
r0 = socket(0x2a, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'})

4m28.557104265s ago: executing program 34 (id=2787):
syz_usb_connect(0x5, 0x24, 0x0, 0x0)
r0 = socket(0x2a, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'})

3m19.146425673s ago: executing program 4 (id=3738):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020605000000000000000000000000000900020073797a3000000000050001000600000005000500020000000500040000000000140007800800114000000800050015000200000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0)

3m19.090302677s ago: executing program 4 (id=3739):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee4}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000004800)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0xfffffffe, @loopback}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000000440)="cd", 0x1}], 0x1}}], 0x2, 0x4020)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080), 0x4)

3m18.241034947s ago: executing program 4 (id=3754):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000040)=""/9, 0xfe72, 0x10012, 0x0, 0x0)

3m18.166762212s ago: executing program 4 (id=3757):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000340)={[{@fat=@flush}, {@shortname_winnt}, {@rodir}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@uni_xlateno}, {@fat=@umask={'umask', 0x3d, 0x9}}, {@shortname_win95}, {@fat=@debug}, {@shortname_mixed}, {@fat=@sys_immutable}, {@utf8no}]}, 0x0, 0x29f, &(0x7f0000000580)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020)

3m18.039139851s ago: executing program 4 (id=3758):
syz_usb_connect$uac1(0x5, 0x87, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x763, 0x2080, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x81, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x1f}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x306, 0x5, 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x201, 0x6, 0xfa, 0x8, 0x5, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x7, 0x3, 0x2, {0x7, 0x25, 0x1, 0xc, 0xff, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xfc, 0xf5, 0x5, {0x7, 0x25, 0x1, 0x8, 0x3f, 0xa4}}}}}}}}]}}, 0x0)

3m17.749540506s ago: executing program 4 (id=3763):
syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000a40)='./file1\x00', 0x2004000, &(0x7f0000001180)=ANY=[], 0x9, 0x1f2, &(0x7f00000004c0)="$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")
rmdir(&(0x7f00000005c0)='./file0\x00')

3m17.606160492s ago: executing program 35 (id=3763):
syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000a40)='./file1\x00', 0x2004000, &(0x7f0000001180)=ANY=[], 0x9, 0x1f2, &(0x7f00000004c0)="$eJzs28tO1FAcx/Ffy8x0wPtt40YTTXTjFIdJRnbyAL6AOzIUQixixA3EhLLxPXwMd76JWxeS6BPU9MZYpJ1ecFrk+0mG+dP0d86Zhv9wShgBuLRuhl8NGeqGle/7hw8lvX4lqZMb7c1lgQD+Gd+Imj5L7+zD/fwUgIth4efZx63MBv+SFCbvAsBFdry2EO4DvhrSt18fJz/iR7fg/uF4zZSCIbzo+yTfk/qF8kdG+Hy/M80GD0vpAQwvY//yOco/UTq/WHT98fxLp/JLs4LBLVPgyAyfnj5K569IuirpmqTrkm7E91q3JN1ORpB3Mv/GqfnvFVw/UEfw0zdIHSnUtun8IOcEKz8fdM/mtussl5p1qhvnn5fIPP6j7sX5YcX5k/xKxbwV5weTXXcj86yXFUcH8pl/9X85M/s/y+74pKzT/50K/Q8gsrd/8GbddZ335QuzUqqVRb/+1ahbHDZ+Ec67SC5qcKTje5qd+lRprgfxPC14ySWKxXYsI7to6A0JwNzYH3be2Xv7B8+2d9a3nC3n7XC0+mK0MhyNV+3Nsess23V25wDabPpLXyryN/P8fwkCAAAAAAAAAAAAAABNuCPpbtOLAAAAADAX5/OZoe8TKfucpl8jAAAAAAAAAAAAAAAAAAAA8L/4HQAA//+UhDYo")
rmdir(&(0x7f00000005c0)='./file0\x00')

3m1.957022584s ago: executing program 6 (id=3956):
syz_usbip_server_init(0x1cd0d573d486a6b8)

3m1.304494185s ago: executing program 6 (id=3957):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c000000050a010100000000000000000a00000a0900010073797a31000019000c0002"], 0x74}, 0x1, 0x0, 0x0, 0x40000f0}, 0x20008890)

3m1.126597376s ago: executing program 6 (id=3960):
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7)

3m0.937041761s ago: executing program 6 (id=3962):
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x9a5840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0)
mount$bpf(0x0, &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x20000, 0x0)

3m0.867104809s ago: executing program 6 (id=3964):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0xb, 0x181000)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x9, [[0x752, 0xffffffff, 0x0, 0x7, 0x0, 0x101], [0x1000000, 0x400, 0x800, 0x4, 0x0, 0x2, 0x0, 0x200000], [0xf, 0x4, 0x0, 0x80, 0x4000, 0x8000]], '\x00', [{0x0, 0x1}, {0x3, 0xfffffffd}, {0x0, 0xffffffff}, {0xffffffff, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x409, 0x0, 0x0, 0x1}, {0xfffffffd, 0x8}, {0x4000000, 0xc}, {}, {0xfffffffe}, {0xfffffffd, 0x7}, {0x12}, {0x2, 0x5}], '\x00', 0x5})

3m0.428278711s ago: executing program 6 (id=3970):
r0 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)

3m0.122225567s ago: executing program 36 (id=3970):
r0 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)

2m25.936213007s ago: executing program 5 (id=4312):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x3ffff, 0x0, 0x90, [0x200000000100, 0x200000000130, 0x200000000160, 0x200000000100, 0x200000000100, 0x200000000100], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000700000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108)

2m25.93596019s ago: executing program 5 (id=4313):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x5)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f00000002c0)={0x0, 0x2710}, 0x10)
sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0)

2m25.824206415s ago: executing program 5 (id=4314):
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x0, 0x4, 0x49c, '\x00', 0x0})

2m25.823857656s ago: executing program 5 (id=4315):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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")
r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a)
chown(&(0x7f0000000080)='./file1\x00', 0x0, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x10000, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0)
setsockopt(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)='\x00\x00', 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r2=>0x0})
sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r2, 0x6}, 0x80, 0x0}, 0x40011)
r3 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
fallocate(r3, 0x0, 0x0, 0x1001f0)
copy_file_range(r3, 0x0, r3, 0x0, 0xc000, 0x0)

2m25.656389006s ago: executing program 5 (id=4316):
r0 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x0, 0x1d}, &(0x7f0000000340), &(0x7f0000000600), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={0x0, 0x2, 0xf}, 0x1)

2m24.933587035s ago: executing program 5 (id=4324):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}}}]}, 0x40}}, 0x4040)

2m24.776659004s ago: executing program 37 (id=4324):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}}}]}, 0x40}}, 0x4040)

1.758817304s ago: executing program 7 (id=6379):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8fffeffb702000008000000b50af8ff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94)

1.681100109s ago: executing program 8 (id=6380):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}, 0x1, 0x0, 0x0, 0x8080}, 0x0)

1.680909731s ago: executing program 7 (id=6381):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x200004, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x0, 0x2}, 0x2}}, @TCA_TBF_BURST={0x8, 0x6, 0x5100}]}}]}, 0x60}}, 0x0)

1.575307178s ago: executing program 8 (id=6383):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', <r2=>0x0})
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0xa0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0xe839, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x70}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2, 0x2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014)

1.437176917s ago: executing program 8 (id=6385):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x5)
r1 = socket(0x28, 0x5, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989})
setrlimit(0x40000000000008, &(0x7f0000000000))
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002580)=@newtaction={0x14, 0x30, 0x1, 0x70bd29, 0x25dfdc02}, 0x14}, 0x1, 0x0, 0x0, 0x400c881}, 0x40004)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)

1.356820703s ago: executing program 7 (id=6386):
r0 = socket$xdp(0x2c, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff088)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000440)=0x30)

1.19034067s ago: executing program 8 (id=6388):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000080))

849.958877ms ago: executing program 8 (id=6389):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x80078b, &(0x7f0000000040)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@jqfmt_vfsv0}, {@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x11480, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020)

525.573825ms ago: executing program 1 (id=6393):
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c740f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000000e00)="$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")
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

416.324988ms ago: executing program 8 (id=6394):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x48, r2, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
close(r0)

415.879444ms ago: executing program 7 (id=6395):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x12}, 0xb}], 0x12, 0x40000021, 0x0)

336.496029ms ago: executing program 1 (id=6396):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}})

335.158383ms ago: executing program 1 (id=6397):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000900000006000000000000070000000000002e5f2e302e5f"], 0x0, 0x2d, 0x0, 0x1}, 0x28)

233.087299ms ago: executing program 1 (id=6398):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x210008, &(0x7f0000000000)=ANY=[], 0xff, 0xc2d, &(0x7f00000001c0)="$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")
setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff})
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1431c2, 0x0)
pwrite64(r0, &(0x7f0000005680)="a9", 0x1, 0x600000fff)
ftruncate(r0, 0x2000000003)

146.905324ms ago: executing program 1 (id=6399):
socket$nl_route(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r1)
socket$key(0xf, 0x3, 0x2)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
syz_emit_ethernet(0x4c, &(0x7f00000001c0)={@random="5b37182347bc", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "9d0080", 0x16, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @local, [{}]}}}}}}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000063c0)={0x2020}, 0x2020)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@empty, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r3, &(0x7f00000000c0)=@other={'unlock', ' ', 'io'}, 0xa)

8.407937ms ago: executing program 1 (id=6400):
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x1)
mknod$loop(&(0x7f00000003c0)='./file1\x00', 0x6000, 0x1)

4.872717ms ago: executing program 7 (id=6401):
prctl$PR_SET_SECUREBITS(0x1c, 0x15)
setuid(0xee00)
fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0xffffff69)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4a040, 0x0)

0s ago: executing program 7 (id=6402):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="f0968400", 0x4}], 0x1, 0x0, 0x0, 0x20008000}], 0x1, 0x20000045)

kernel console output (not intermixed with test programs):

-realtek 6-1:166.34: probe with driver ums-realtek failed with error -5
[  407.493119][ T5694] uvcvideo 6-1:166.34: Found UVC 0.00 device syz (0bda:0138)
[  407.495873][ T5694] uvcvideo 6-1:166.34: No valid video chain found.
[  407.503763][ T5694] usb 6-1: USB disconnect, device number 27
[  408.609308][T16218] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  408.609308][T16218] The task syz.1.4204 (16218) triggered the difference, watch for misbehavior.
[  409.495255][T16244] loop5: detected capacity change from 0 to 4096
[  409.502073][T16244] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  409.509770][ T5622] udevd[5622]: symlink '../../loop5' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:5' failed: Read-only file system
[  409.531133][T16244] ntfs3(loop5): ino=19, mi_enum_attr
[  409.534827][T16244] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  410.056238][T16276] loop5: detected capacity change from 0 to 128
[  410.064630][T16276] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  410.075903][T16276] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  410.371123][T16283] loop7: detected capacity change from 0 to 2048
[  410.383950][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  410.393043][T16283] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  410.403383][T16283] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  410.407534][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  410.429788][T15560] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  410.680625][ T3043] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  411.045444][T16314] loop5: detected capacity change from 0 to 4096
[  411.049655][T16314] EXT4-fs: Ignoring removed orlov option
[  411.054740][T16314] EXT4-fs (loop5): Test dummy encryption mode enabled
[  411.072466][T16314] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  411.072651][ T5622] udevd[5622]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  411.166073][ T5622] udevd[5622]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  411.749065][T16318] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  411.753808][T16318] overlayfs: missing 'lowerdir'
[  412.421276][T12549] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  412.973248][ T7247] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  413.131968][ T7247] usb 6-1: Using ep0 maxpacket: 8
[  413.140832][ T7247] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  413.144924][ T7247] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.148153][ T7247] usb 6-1: Product: syz
[  413.149835][ T7247] usb 6-1: Manufacturer: syz
[  413.153389][ T7247] usb 6-1: SerialNumber: syz
[  413.162439][ T7247] usb 6-1: config 0 descriptor??
[  413.178618][ T7247] gspca_main: se401-2.14.0 probing 047d:5003
[  413.236934][T16340] loop7: detected capacity change from 0 to 131072
[  413.247568][T16340] XFS (loop7): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  413.280425][T16340] XFS (loop7): Starting recovery (logdev: internal)
[  413.292957][ T6170] udevd[6170]: symlink '../../loop7' '/dev/disk/by-uuid/b93a8937-ccd4-41a2-86c7-66a1570a2846.tmp-b7:7' failed: Read-only file system
[  413.327487][T16340] XFS (loop7): Ending recovery (logdev: internal)
[  413.327702][ T6170] udevd[6170]: symlink '../../loop7' '/dev/disk/by-uuid/b93a8937-ccd4-41a2-86c7-66a1570a2846.tmp-b7:7' failed: Read-only file system
[  413.471510][T16340] XFS (loop7): EXPERIMENTAL online shrink feature enabled.  Use at your own risk!
[  413.533690][T15560] XFS (loop7): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  413.562670][T16354] xt_TPROXY: Can be used only with -p tcp or -p udp
[  413.842724][ T7247] gspca_se401: Too many frame sizes
[  413.919225][ T7247] usb 6-1: USB disconnect, device number 28
[  414.501545][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  415.115615][T16390] loop5: detected capacity change from 0 to 32768
[  415.125688][T16390] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4269 (16390)
[  415.138744][T16390] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  415.142585][T16390] BTRFS info (device loop5): using sha256 checksum algorithm
[  415.160438][ T5622] udevd[5622]: symlink '../../loop5' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:5' failed: Read-only file system
[  415.204299][T16390] BTRFS info (device loop5): setting nodatasum
[  415.206798][T16390] BTRFS info (device loop5): enabling ssd optimizations
[  415.209317][T16390] BTRFS info (device loop5): turning on async discard
[  415.211976][T16390] BTRFS info (device loop5): enabling free space tree
[  415.476771][T16411] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  415.710307][   T33] audit: type=1800 audit(2000000536.723:759): pid=16411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4269" name="file1" dev="loop5" ino=260 res=0 errno=0
[  415.720360][   T33] audit: type=1326 audit(2000000536.913:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16389 comm="syz.5.4269" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5719cdd9 code=0x7ffc0000
[  415.727442][   T33] audit: type=1326 audit(2000000536.913:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16389 comm="syz.5.4269" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5719cdd9 code=0x7ffc0000
[  415.735521][   T33] audit: type=1326 audit(2000000536.913:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16389 comm="syz.5.4269" exe="/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f0a5719cdd9 code=0x7ffc0000
[  415.749352][   T33] audit: type=1326 audit(2000000536.913:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16389 comm="syz.5.4269" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5719cdd9 code=0x7ffc0000
[  415.766927][   T33] audit: type=1326 audit(2000000536.913:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16389 comm="syz.5.4269" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5719cdd9 code=0x7ffc0000
[  415.800784][T16415] netlink: 'syz.7.4272': attribute type 4 has an invalid length.
[  416.054353][T12549] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  416.066857][T16430] loop7: detected capacity change from 0 to 128
[  416.078887][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-label/SYZKALLER.tmp-b7:7' failed: Read-only file system
[  416.084333][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-uuid/1DC8-5927.tmp-b7:7' failed: Read-only file system
[  416.125845][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-label/SYZKALLER.tmp-b7:7' failed: Read-only file system
[  416.135613][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-uuid/1DC8-5927.tmp-b7:7' failed: Read-only file system
[  416.287817][ T5622] udevd[5622]: symlink '../../loop4' '/dev/disk/by-label/SYZKALLER.tmp-b7:7' failed: Read-only file system
[  416.461569][ T5694] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  416.611695][ T5694] usb 6-1: Using ep0 maxpacket: 16
[  416.618632][ T5694] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 511
[  416.634366][ T5694] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  416.639809][ T5694] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.644111][ T5694] usb 6-1: Product: syz
[  416.645805][ T5694] usb 6-1: Manufacturer: syz
[  416.647593][ T5694] usb 6-1: SerialNumber: syz
[  416.686939][T16453] tipc: Started in network mode
[  416.688915][T16453] tipc: Node identity 6eb0d3553945, cluster identity 4711
[  416.691942][T16453] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  416.696690][T16453] tipc: Disabling bearer <eth:syzkaller0>
[  416.877263][ T5694] cdc_ncm 6-1:1.0: bind() failure
[  416.887601][ T5694] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  416.921714][ T5694] cdc_ncm 6-1:1.1: bind() failure
[  416.929516][ T5694] usb 6-1: USB disconnect, device number 29
[  417.988781][T16478] 9p: Bad value for 'rfdno'
[  418.038988][   T33] audit: type=1326 audit(2000000539.263:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16481 comm="syz.1.4299" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb73979cdd9 code=0x0
[  418.054932][T16484] netlink: 112 bytes leftover after parsing attributes in process `syz.5.4300'.
[  418.151416][   T33] audit: type=1326 audit(2000000539.373:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16481 comm="syz.1.4299" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73979cdd9 code=0x7ffc0000
[  418.252826][   T33] audit: type=1326 audit(2000000539.393:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16481 comm="syz.1.4299" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73979cdd9 code=0x7ffc0000
[  418.261858][   T33] audit: type=1326 audit(2000000539.393:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16481 comm="syz.1.4299" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73979cdd9 code=0x7ffc0000
[  420.616433][T16531] loop5: detected capacity change from 0 to 1024
[  420.620072][T16531] EXT4-fs: Ignoring removed bh option
[  420.630653][ T5622] udevd[5622]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  420.637098][ T5622] udevd[5622]: symlink '../../loop5' '/dev/disk/by-uuid/00000000-0000-0000-0000-001000000000.tmp-b7:5' failed: Read-only file system
[  420.647145][ T5622] udevd[5622]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  420.648457][T16531] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  420.651249][ T5622] udevd[5622]: symlink '../../loop5' '/dev/disk/by-uuid/00000000-0000-0000-0000-001000000000.tmp-b7:5' failed: Read-only file system
[  420.721969][T16531] loop5: detected capacity change from 1024 to 64
[  420.733519][ T5622] udevd[5622]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  420.737571][ T5622] udevd[5622]: symlink '../../loop5' '/dev/disk/by-uuid/00000000-0000-0000-0000-001000000000.tmp-b7:5' failed: Read-only file system
[  420.774114][T12549] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /396/file1: bad entry in directory: directory entry overrun - offset=0, inode=1803188595, rec_len=93280, size=1024 fake=0
[  420.804465][T12549] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  420.835009][T16532] kmmpd-loop5: attempt to access beyond end of device
[  420.835009][T16532] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64
[  420.843439][T16532] Buffer I/O error on dev loop5, logical block 64, lost sync page write
[  421.036804][T16536] loop7: detected capacity change from 0 to 4096
[  421.050270][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-uuid/53ef1790-6acb-496c-bd13-8113447d28c8.tmp-b7:7' failed: Read-only file system
[  421.065876][T16537] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  421.765612][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  421.774703][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  421.779327][ T5614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  421.786356][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  421.789124][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  422.070161][T16556] hsr0 speed is unknown, defaulting to 1000
[  422.375291][T16583] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.4330'.
[  422.382175][T16583] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4330'.
[  422.396164][T16556] bridge0: port 1(bridge_slave_0) entered blocking state
[  422.398794][T16556] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.402036][T16556] bridge_slave_0: entered allmulticast mode
[  422.405424][T16556] bridge_slave_0: entered promiscuous mode
[  422.409459][T16556] bridge0: port 2(bridge_slave_1) entered blocking state
[  422.413947][T16556] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.416184][T16556] bridge_slave_1: entered allmulticast mode
[  422.418961][T16556] bridge_slave_1: entered promiscuous mode
[  422.439043][T16556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  422.444019][T16556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  422.459528][T16585] binder: 16584:16585 ioctl c0306201 200000000280 returned -14
[  422.463938][T16556] team0: Port device team_slave_0 added
[  422.467475][T16556] team0: Port device team_slave_1 added
[  422.487339][T16556] batman_adv: batadv0: Adding interface: batadv_slave_0
[  422.492091][T16556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  422.500090][T16556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  422.505247][T16556] batman_adv: batadv0: Adding interface: batadv_slave_1
[  422.507466][T16556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  422.515295][T16556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  422.574377][T16556] hsr_slave_0: entered promiscuous mode
[  422.580228][T16556] hsr_slave_1: entered promiscuous mode
[  422.582893][T16556] debugfs: 'hsr0' already exists in 'hsr'
[  422.584752][T16556] Cannot create hsr debugfs directory
[  422.858952][T16592] lo speed is unknown, defaulting to 1000
[  422.860880][T16592] lo speed is unknown, defaulting to 1000
[  422.870757][T16592] lo speed is unknown, defaulting to 1000
[  422.876991][T16592] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  422.881491][T16592] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  422.886691][T16592] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  422.932363][T16592] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  423.070064][T16592] lo speed is unknown, defaulting to 1000
[  423.083704][T16592] lo speed is unknown, defaulting to 1000
[  423.087011][T16592] lo speed is unknown, defaulting to 1000
[  423.092363][T16592] lo speed is unknown, defaulting to 1000
[  423.109203][T16556] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  423.120776][T16556] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  423.123964][T16556] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  423.138447][T16556] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  423.145614][T16556] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  423.159981][T16556] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  423.170047][T16556] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  423.176854][T16556] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  423.308165][T16556] 8021q: adding VLAN 0 to HW filter on device bond0
[  423.327846][T16556] 8021q: adding VLAN 0 to HW filter on device team0
[  423.337896][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[  423.340701][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[  423.355981][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[  423.358845][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[  423.853240][ T5614] Bluetooth: hci2: command tx timeout
[  423.903913][T16632] loop7: detected capacity change from 0 to 1024
[  423.907398][T16556] 8021q: adding VLAN 0 to HW filter on device batadv0
[  423.918871][T16632] EXT4-fs: Ignoring removed orlov option
[  423.928447][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  423.954411][T16632] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  424.088806][   T33] kauditd_printk_skb: 263 callbacks suppressed
[  424.088821][   T33] audit: type=1326 audit(2000000545.303:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16647 comm="syz.1.4348" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73979cdd9 code=0x7ffc0000
[  424.116022][   T33] audit: type=1326 audit(2000000545.303:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16647 comm="syz.1.4348" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73979cdd9 code=0x7ffc0000
[  424.135097][   T33] audit: type=1326 audit(2000000545.313:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16647 comm="syz.1.4348" exe="/syz-executor" sig=0 arch=c000003e syscall=469 compat=0 ip=0x7fb73979cdd9 code=0x7ffc0000
[  424.145263][   T33] audit: type=1326 audit(2000000545.313:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16647 comm="syz.1.4348" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73979cdd9 code=0x7ffc0000
[  424.162361][   T33] audit: type=1326 audit(2000000545.313:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16647 comm="syz.1.4348" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73979cdd9 code=0x7ffc0000
[  424.180097][T15560] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  424.298036][T16556] veth0_vlan: entered promiscuous mode
[  424.308415][T16556] veth1_vlan: entered promiscuous mode
[  424.358998][T16556] veth0_macvtap: entered promiscuous mode
[  424.367679][T16556] veth1_macvtap: entered promiscuous mode
[  424.386144][T16556] batman_adv: batadv0: Interface activated: batadv_slave_0
[  424.396639][T16556] batman_adv: batadv0: Interface activated: batadv_slave_1
[  424.409516][ T9361] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  424.423790][ T9361] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  424.436379][ T9361] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  424.449418][ T9361] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  424.743504][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  424.746525][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  424.834291][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  424.838811][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  425.049850][T16664] netlink: 'syz.7.4354': attribute type 2 has an invalid length.
[  425.435196][T16683] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4357'.
[  425.714393][T16687] loop7: detected capacity change from 0 to 128
[  425.725689][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-uuid/8AF2-58AF.tmp-b7:7' failed: Read-only file system
[  425.739080][   T33] audit: type=1800 audit(2000000546.963:1037): pid=16687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4364" name="file1" dev="loop7" ino=1048699 res=0 errno=0
[  425.765125][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-uuid/8AF2-58AF.tmp-b7:7' failed: Read-only file system
[  425.931803][ T5614] Bluetooth: hci2: command tx timeout
[  425.956068][T16699] nftables ruleset with unbound set
[  426.148052][T16703] loop7: detected capacity change from 0 to 4096
[  426.176240][T16707] program syz.8.4374 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  426.199771][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  426.239404][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:7' failed: Read-only file system
[  426.263994][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  426.270115][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:7' failed: Read-only file system
[  426.373399][T16720] libceph: resolve '400' (ret=-3): failed
[  426.433956][T16726] loop7: detected capacity change from 0 to 128
[  426.436861][T16726] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  426.457934][T16726] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  426.589388][   T63] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  426.760828][T16743] qnx6: unable to read the first superblock
[  426.774319][T16743] qnx6: unable to read the first superblock
[  426.776381][T16743] qnx6: unable to read the first superblock
[  427.460200][T16782] netlink: 'syz.7.4408': attribute type 1 has an invalid length.
[  427.567693][T16788] loop7: detected capacity change from 0 to 1024
[  428.132096][ T5614] Bluetooth: hci2: command tx timeout
[  428.192246][   T33] audit: type=1326 audit(2000000549.423:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16793 comm="syz.8.4414" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2285b9cdd9 code=0x7ffc0000
[  428.210929][   T33] audit: type=1326 audit(2000000549.423:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16793 comm="syz.8.4414" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2285b9cdd9 code=0x7ffc0000
[  428.226267][   T33] audit: type=1326 audit(2000000549.423:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16793 comm="syz.8.4414" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2285b9cdd9 code=0x7ffc0000
[  428.259112][   T33] audit: type=1326 audit(2000000549.423:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16793 comm="syz.8.4414" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2285b9cdd9 code=0x7ffc0000
[  428.429509][T16800] libceph: resolve '0.' (ret=-3): failed
[  428.624755][T16801] 9pnet_virtio: no channels available for device syz
[  429.068300][T16817] netlink: 2 bytes leftover after parsing attributes in process `syz.7.4423'.
[  429.071302][T16817] netlink: 2 bytes leftover after parsing attributes in process `syz.7.4423'.
[  429.841799][ T7244] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  430.001605][ T7244] usb 9-1: Using ep0 maxpacket: 16
[  430.006653][ T7244] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  430.183569][ T5614] Bluetooth: hci2: command tx timeout
[  430.244936][ T7244] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  430.247709][ T7244] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  430.254481][ T7244] usb 9-1: config 0 descriptor??
[  430.374195][T16859] kAFS: unparsable volume name
[  430.505699][T16863] netlink: 216 bytes leftover after parsing attributes in process `syz.7.4443'.
[  430.509293][T16863] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4443'.
[  430.513281][T16863] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4443'.
[  430.586731][ T5477] bridge_slave_1: left allmulticast mode
[  430.589795][ T5477] bridge_slave_1: left promiscuous mode
[  430.596287][ T5477] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.603285][ T5477] bridge_slave_0: left allmulticast mode
[  430.605928][ T5477] bridge_slave_0: left promiscuous mode
[  430.608204][ T5477] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.664318][T16867] loop7: detected capacity change from 0 to 4096
[  430.670633][T16867] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512).
[  430.698087][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  430.708743][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-uuid/02AFA4DB32BB7E65.tmp-b7:7' failed: Read-only file system
[  430.736492][ T7244] kone 0003:1E7D:2CED.0011: bogus close delimiter
[  430.738406][ T7244] kone 0003:1E7D:2CED.0011: item 0 0 2 10 parsing failed
[  430.740730][ T7244] kone 0003:1E7D:2CED.0011: parse failed
[  430.744998][ T7244] kone 0003:1E7D:2CED.0011: probe with driver kone failed with error -22
[  430.793178][ T6170] udevd[6170]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  430.815612][T16867] ntfs3(loop7): $Secure::$SDH is corrupted.
[  430.820743][T16867] ntfs3(loop7): Failed to initialize $Secure (-22).
[  430.827185][ T6170] udevd[6170]: symlink '../../loop7' '/dev/disk/by-uuid/02AFA4DB32BB7E65.tmp-b7:7' failed: Read-only file system
[  430.895242][T16875] loop7: detected capacity change from 0 to 1024
[  430.928538][   T24] usb 9-1: USB disconnect, device number 2
[  430.932613][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-label/untitled.tmp-b7:7' failed: Read-only file system
[  430.941715][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-uuid/0f76b7e0-a395-392e-9506-9fb3b29b70e3.tmp-b7:7' failed: Read-only file system
[  430.974227][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-label/untitled.tmp-b7:7' failed: Read-only file system
[  430.984484][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-uuid/0f76b7e0-a395-392e-9506-9fb3b29b70e3.tmp-b7:7' failed: Read-only file system
[  431.013079][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-label/untitled.tmp-b7:7' failed: Read-only file system
[  431.022549][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-uuid/0f76b7e0-a395-392e-9506-9fb3b29b70e3.tmp-b7:7' failed: Read-only file system
[  431.051200][T16877] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4450'.
[  431.068662][ T5477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  431.074590][ T5477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  431.078794][ T5477] bond0 (unregistering): Released all slaves
[  431.184209][T16881] loop7: detected capacity change from 0 to 1024
[  431.188128][T16881] EXT4-fs: Ignoring removed orlov option
[  431.209209][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  431.243614][T16881] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  431.328128][T15560] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  431.443511][ T5356] 8021q: adding VLAN 0 to HW filter on device eth21
[  431.533586][ T5477] hsr_slave_0: left promiscuous mode
[  431.535629][ T5477] hsr_slave_1: left promiscuous mode
[  431.542315][T16897] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4454'.
[  431.543368][ T5477] batman_adv: batadv0: Removing interface: batadv_slave_0
[  431.563434][ T5477] batman_adv: batadv0: Removing interface: batadv_slave_1
[  431.580627][T16898] netlink: 'syz.7.4455': attribute type 58 has an invalid length.
[  431.612387][T16901] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4453'.
[  431.748632][ T7244] libceph: connect (1)[c::]:6789 error -13
[  431.761069][ T7244] libceph: mon0 (1)[c::]:6789 connect error
[  431.792122][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b06cfc00: rx timeout, send abort
[  431.824223][T16893] ceph: No mds server is up or the cluster is laggy
[  431.861947][ T7244] libceph: connect (1)[c::]:6789 error -13
[  431.865917][ T7244] libceph: mon0 (1)[c::]:6789 connect error
[  431.965470][ T5477] team0 (unregistering): Port device team_slave_1 removed
[  431.997793][ T5477] team0 (unregistering): Port device team_slave_0 removed
[  432.146057][ T7244] libceph: connect (1)[c::]:6789 error -13
[  432.148017][ T7244] libceph: mon0 (1)[c::]:6789 connect error
[  432.409048][ T5356] 8021q: adding VLAN 0 to HW filter on device eth22
[  432.621999][T16915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4458'.
[  432.763270][T16927] loop8: detected capacity change from 0 to 256
[  432.834365][ T5477] IPVS: stop unused estimator thread 0...
[  432.948550][ T5356] 8021q: adding VLAN 0 to HW filter on device eth23
[  433.059911][ T7244] IPVS: starting estimator thread 0...
[  433.147867][T16942] loop8: detected capacity change from 0 to 512
[  433.151701][T16938] IPVS: using max 55 ests per chain, 132000 per kthread
[  433.161711][T16942] EXT4-fs error (device loop8): ext4_get_journal_inode:5896: comm syz.8.4468: inode #1792: comm syz.8.4468: iget: illegal inode #
[  433.170423][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-label/\x86\x5b.tmp-b7:8' failed: Read-only file system
[  433.174178][T16942] loop8: lost filesystem error report for type 5 error -117
[  433.180259][T16942] EXT4-fs (loop8): Remounting filesystem read-only
[  433.183219][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  433.183241][    C0] EXT4-fs (loop8): initial error at time 2000000554: ext4_get_journal_inode:5896
[  433.183262][    C0] EXT4-fs (loop8): last error at time 2000000554: ext4_get_journal_inode:5896
[  433.199916][T16942] EXT4-fs (loop8): no journal found
[  433.202063][T16942] EXT4-fs (loop8): can't get journal size
[  433.204996][T16942] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended
[  433.209057][T16942] EXT4-fs (loop8): Errors on filesystem, clearing orphan list.
[  433.215821][T16942] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  433.224026][T16942] EXT4-fs (loop8): shut down requested (1)
[  433.227711][T16942] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000.
[  433.247128][T16556] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  433.364520][ T5356] 8021q: adding VLAN 0 to HW filter on device eth24
[  433.378690][T16951] loop8: detected capacity change from 0 to 1024
[  433.400336][T16951] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  433.409489][T16951] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #3: block 5: comm syz.8.4470: lblock 5 mapped to illegal pblock 5 (length 1)
[  433.415290][T16951] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  433.415569][T16951] __quota_error: 15 callbacks suppressed
[  433.415581][T16951] Quota error (device loop8): write_blk: dquota write failed
[  433.421485][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  433.421506][    C0] EXT4-fs (loop8): initial error at time 2000000554: ext4_map_blocks:833: inode 3: block 5
[  433.421536][    C0] EXT4-fs (loop8): last error at time 2000000554: ext4_map_blocks:833: inode 3: block 5
[  433.437138][T16951] Quota error (device loop8): find_free_dqentry: Can't write quota data block 5
[  433.440814][T16951] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota
[  433.445842][T16951] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.4470: Failed to acquire dquot type 0
[  433.450296][T16951] loop8: lost filesystem error report for type 5 error -117
[  433.450635][T16951] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 5: comm syz.8.4470: lblock 5 mapped to illegal pblock 5 (length 1)
[  433.461716][T16951] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  433.463815][T16951] Quota error (device loop8): do_insert_tree: Can't read tree quota block 5
[  433.481676][T16951] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota
[  433.487283][T16951] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.4470: Failed to acquire dquot type 0
[  433.491806][T16951] loop8: lost filesystem error report for type 5 error -117
[  433.492112][T16951] EXT4-fs error (device loop8): ext4_free_blocks:6718: comm syz.8.4470: Freeing blocks not in datazone - block = 0, count = 4096
[  433.503809][T16951] loop8: lost filesystem error report for type 5 error -117
[  433.504300][T16951] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 5: comm syz.8.4470: lblock 5 mapped to illegal pblock 5 (length 1)
[  433.556509][T16951] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  433.597958][T16951] Quota error (device loop8): do_insert_tree: Can't read tree quota block 5
[  433.620847][T16951] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota
[  433.632444][T16951] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.4470: Failed to acquire dquot type 0
[  433.648204][T16951] loop8: lost filesystem error report for type 5 error -117
[  433.648508][T16951] EXT4-fs (loop8): 1 orphan inode deleted
[  433.688898][T16951] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  433.890873][T16945] loop7: detected capacity change from 0 to 32768
[  434.083015][T16945] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  434.099166][T16945] XFS (loop7): Ending clean mount
[  434.117140][T16556] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  434.165709][T15560] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  434.576149][T16986] loop7: detected capacity change from 0 to 2048
[  434.604290][T16986] NILFS (loop7): too small inode size: 0 bytes
[  434.691558][ T5749] usb 9-1: new full-speed USB device number 3 using dummy_hcd
[  434.734986][T16990] lo: entered allmulticast mode
[  434.842886][ T5749] usb 9-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  434.846142][T16994] loop7: detected capacity change from 0 to 64
[  434.847225][ T5749] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.866453][ T5749] usb 9-1: config 0 descriptor??
[  434.869386][   T33] audit: type=1800 audit(2000000556.093:1057): pid=16994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4483" name="file1" dev="loop7" ino=5 res=0 errno=0
[  434.874067][ T5749] pwc: Samsung MPC-C10 USB webcam detected.
[  434.895347][   T33] audit: type=1800 audit(2000000556.103:1058): pid=16994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4483" name="file1" dev="loop7" ino=5 res=0 errno=0
[  435.077902][ T5749] pwc: send_video_command error -71
[  435.080596][ T5749] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  435.086200][ T5749] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71
[  435.094841][ T5749] usb 9-1: USB disconnect, device number 3
[  435.280014][T17019] loop7: detected capacity change from 0 to 4096
[  435.285764][T17019] EXT4-fs: Ignoring removed nomblk_io_submit option
[  435.294475][T17019] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  435.307571][T17019] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  435.339254][T15560] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  435.510567][T17027] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024)
[  435.514274][T17027] NILFS (loop7): mounting unchecked fs
[  435.517375][T17027] NILFS (loop7): recovery required for readonly filesystem
[  435.520319][T17027] NILFS (loop7): write access will be enabled during recovery
[  435.523913][T17027] NILFS (loop7): invalid segment: Checksum error in super root
[  435.526952][T17027] NILFS (loop7): error -22 while loading super root
[  435.724100][T17035] tmpfs: Bad value for 'mpol'
[  435.964471][T17043] netem: change failed
[  437.441508][   T33] audit: type=1326 audit(2000000558.653:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17066 comm="syz.8.4514" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2285b9cdd9 code=0x0
[  439.392740][T17136] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4544'.
[  439.542671][   T33] audit: type=1326 audit(2000000560.773:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17140 comm="syz.1.4546" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb73979cdd9 code=0x0
[  440.341118][T17165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4556'.
[  440.533969][  T796] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[  440.684929][  T796] usb 9-1: unable to get BOS descriptor or descriptor too short
[  440.688224][  T796] usb 9-1: not running at top speed; connect to a high speed hub
[  440.692779][  T796] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  440.696737][  T796] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  440.701209][  T796] usb 9-1: too many endpoints for config 1 interface 1 altsetting 23: 170, using maximum allowed: 30
[  440.706007][  T796] usb 9-1: config 1 interface 1 altsetting 23 has 0 endpoint descriptors, different from the interface descriptor's value: 170
[  440.710949][  T796] usb 9-1: config 1 interface 1 has no altsetting 0
[  440.717736][  T796] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  440.721151][  T796] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  440.724879][  T796] usb 9-1: Product: syz
[  440.726559][  T796] usb 9-1: Manufacturer: syz
[  440.728260][  T796] usb 9-1: SerialNumber: syz
[  440.734067][T17163] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  440.944578][  T796] cdc_acm 9-1:1.0: probe with driver cdc_acm failed with error -22
[  440.955503][  T796] usb 9-1: USB disconnect, device number 4
[  441.717901][T17205] bond1: invalid ARP target 0.0.0.0 specified for addition
[  441.720817][T17205] bond1: option arp_ip_target: invalid value (0)
[  441.726458][T17205] bond1 (unregistering): Released all slaves
[  441.976745][T17212] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4578'.
[  442.686495][T17232] netlink: 180 bytes leftover after parsing attributes in process `syz.7.4587'.
[  442.690049][T17232] netlink: 'syz.7.4587': attribute type 2 has an invalid length.
[  442.696330][T17232] netlink: 'syz.7.4587': attribute type 1 has an invalid length.
[  442.750705][T17234] set_capacity_and_notify: 1 callbacks suppressed
[  442.750720][T17234] loop7: detected capacity change from 0 to 512
[  442.779603][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  442.791182][T17234] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  442.805114][T17234] EXT4-fs (loop7): 1 truncate cleaned up
[  442.807522][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  442.811753][T17234] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  442.817429][T17234] EXT4-fs error (device loop7): ext4_get_parent:1836: comm syz.7.4588: inode #2: comm syz.7.4588: iget: illegal inode #
[  442.855424][T15560] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  443.108422][T17247] loop8: detected capacity change from 0 to 21
[  443.127803][T17247] jffs2: rp_size unrepresentable
[  443.137582][T17249] vivid-000: disconnect
[  443.150634][T17248] vivid-000: reconnect
[  443.385016][T17264] netlink: 212320 bytes leftover after parsing attributes in process `syz.8.4602'.
[  443.503665][T17275] loop7: detected capacity change from 0 to 8
[  443.525944][T17275] SQUASHFS error: zlib decompression failed, data probably corrupt
[  443.543302][T17275] SQUASHFS error: Failed to read block 0x9b: -5
[  443.548339][T17275] SQUASHFS error: Unable to read metadata cache entry [99]
[  443.553618][T17275] SQUASHFS error: Unable to read inode 0x127
[  443.589343][T17280] bond4: entered promiscuous mode
[  443.591269][T17280] 8021q: adding VLAN 0 to HW filter on device bond4
[  443.644850][   T33] audit: type=1326 audit(2000000564.863:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17283 comm="syz.7.4611" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ea879cdd9 code=0x0
[  443.746989][T17295] x_tables: duplicate underflow at hook 4
[  443.774400][T17297] loop8: detected capacity change from 0 to 16
[  443.777844][T17297] erofs (device loop8): invalid lz4 cfgs, size=5
[  443.790994][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-uuid/dc080000-0000-0000-00db-a5c46e0e7dba.tmp-b7:8' failed: Read-only file system
[  443.847228][T17301] loop8: detected capacity change from 0 to 2048
[  444.171516][ T5694] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  444.187416][T17311] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  444.195713][T17311] overlayfs: failed to set xattr on upper
[  444.197435][T17311] overlayfs: ...falling back to redirect_dir=nofollow.
[  444.199441][T17311] overlayfs: ...falling back to uuid=null.
[  444.321875][ T5694] usb 9-1: Using ep0 maxpacket: 32
[  444.326867][ T5694] usb 9-1: config 51 has an invalid interface number: 9 but max is 0
[  444.330104][ T5694] usb 9-1: config 51 has no interface number 0
[  444.334902][ T5694] usb 9-1: config 51 interface 9 altsetting 8 endpoint 0xA has invalid wMaxPacketSize 0
[  444.338748][ T5694] usb 9-1: config 51 interface 9 altsetting 8 bulk endpoint 0xA has invalid maxpacket 0
[  444.344756][ T5694] usb 9-1: config 51 interface 9 has no altsetting 0
[  444.350377][ T5694] usb 9-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=29.08
[  444.354847][ T5694] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  444.358173][ T5694] usb 9-1: Product: syz
[  444.359965][ T5694] usb 9-1: Manufacturer: syz
[  444.363159][ T5694] usb 9-1: SerialNumber: syz
[  444.649209][ T5694] redrat3 9-1:51.9: Couldn't find all endpoints
[  444.699401][ T5694] usb 9-1: USB disconnect, device number 5
[  444.728206][T17318] loop7: detected capacity change from 0 to 1024
[  444.754211][T17318] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  444.772481][ T6170] udevd[6170]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  444.781157][T17318] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869)
[  444.806056][T17318] EXT4-fs (loop7): journal inode is deleted
[  444.825770][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  445.232114][ T1377] ieee802154 phy0 wpan0: encryption failed: -22
[  445.234691][ T1377] ieee802154 phy1 wpan1: encryption failed: -22
[  445.242007][T17335] netlink: 'syz.8.4630': attribute type 1 has an invalid length.
[  445.245460][T17335] netlink: 76 bytes leftover after parsing attributes in process `syz.8.4630'.
[  445.382003][T17340] bond1: entered promiscuous mode
[  445.384221][T17340] 8021q: adding VLAN 0 to HW filter on device bond1
[  445.476227][T17348] loop8: detected capacity change from 0 to 512
[  445.478751][T17348] EXT4-fs: Ignoring removed nobh option
[  445.485503][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system
[  445.514042][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system
[  445.525444][T17348] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  445.528995][T17348] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  445.548174][T17348] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  445.576403][T16556] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  445.792030][T17364] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4638'.
[  446.114111][T17367] loop8: detected capacity change from 0 to 32768
[  446.142621][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:8' failed: Read-only file system
[  446.160626][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:8' failed: Read-only file system
[  446.298123][T17376] netlink: 'syz.1.4643': attribute type 21 has an invalid length.
[  446.302340][T17376] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4643'.
[  446.306044][T17376] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4643'.
[  446.339794][T17378] netlink: 35 bytes leftover after parsing attributes in process `syz.8.4642'.
[  446.343282][T17378] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4642'.
[  446.399097][T17380] xt_CT: You must specify a L4 protocol and not use inversions on it
[  446.654795][T17382] loop8: detected capacity change from 0 to 32768
[  446.678886][T17382] ocfs2: Slot 0 on device (7,8) was already allocated to this node!
[  446.683616][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:8' failed: Read-only file system
[  446.689233][T17382] JBD2: Ignoring recovery information on journal
[  446.718960][T17382] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  446.761934][T17382] (syz.8.4645,17382,0):ocfs2_rename:1700 ERROR: status = -39
[  446.809510][T16556] ocfs2: Unmounting device (7,8) on (node local)
[  447.123855][T17398] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4652'.
[  447.172660][T17400] binder: 17399:17400 ioctl c018620c 200000000100 returned -22
[  447.265427][T17402] hsr0 speed is unknown, defaulting to 1000
[  447.280445][T17402] lo speed is unknown, defaulting to 1000
[  447.623318][T16997] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  447.801592][T16997] usb 9-1: Using ep0 maxpacket: 16
[  447.805888][T16997] usb 9-1: unable to get BOS descriptor or descriptor too short
[  447.809821][T16997] usb 9-1: config index 0 descriptor too short (expected 58990, got 43)
[  447.812898][T16997] usb 9-1: config 231 has too many interfaces: 216, using maximum allowed: 32
[  447.815508][T16997] usb 9-1: config 231 has an invalid descriptor of length 0, skipping remainder of the config
[  447.818455][T16997] usb 9-1: config 231 has 1 interface, different from the descriptor's value: 216
[  447.821297][T16997] usb 9-1: config 231 has no interface number 0
[  447.823316][T16997] usb 9-1: config 231 interface 112 altsetting 73 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  447.827568][T16997] usb 9-1: config 231 interface 112 has no altsetting 0
[  447.833321][T16997] usb 9-1: string descriptor 0 read error: -22
[  447.835491][T16997] usb 9-1: New USB device found, idVendor=0df6, idProduct=061c, bcdDevice=94.d8
[  447.838204][T16997] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.846233][T16997] asix 9-1:231.112: probe with driver asix failed with error -22
[  448.289348][T16997] usb 9-1: USB disconnect, device number 6
[  448.637929][T17443] loop7: detected capacity change from 0 to 32768
[  448.655867][T17443] ocfs2: Slot 0 on device (7,7) was already allocated to this node!
[  448.663226][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:7' failed: Read-only file system
[  448.671905][T17443] JBD2: Ignoring recovery information on journal
[  448.687182][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:7' failed: Read-only file system
[  448.709078][T17443] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  448.760214][T15560] ocfs2: Unmounting device (7,7) on (node local)
[  449.328725][T17482] team_slave_1: Caught tx_queue_len zero misconfig
[  449.538265][T17478] loop8: detected capacity change from 0 to 40427
[  449.543428][T17478] F2FS-fs (loop8): invalid crc value
[  449.567258][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:8' failed: Read-only file system
[  449.583938][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:8' failed: Read-only file system
[  449.603325][T17478] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  449.616375][T17478] F2FS-fs (loop8): Start checkpoint disabled!
[  449.631582][T17478] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0
[  449.638671][T17478] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  449.977837][T17488] loop8: detected capacity change from 0 to 4096
[  449.984404][T17488] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  450.006395][T17488] ntfs3(loop8): ino=3, ntfs_set_state failed, -22.
[  450.008959][T17488] ntfs3(loop8): Failed to initialize $Secure::$SII (-22).
[  450.012100][T17488] ntfs3(loop8): Failed to initialize $Secure (-22).
[  450.014976][T17488] ntfs3(loop8): ino=3, ntfs3_write_inode failed, -22.
[  450.242982][T17498] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4697'.
[  451.734647][T17540] loop8: detected capacity change from 0 to 1764
[  451.779178][   T33] audit: type=1800 audit(2000000573.003:1062): pid=17540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4716" name="file0" dev="loop8" ino=1923 res=0 errno=0
[  452.488306][T17568] loop7: detected capacity change from 0 to 512
[  452.492648][T17568] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  452.499624][T17568] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.4727: bad orphan inode 131083
[  452.505591][T17568] loop7: lost filesystem error report for type 5 error -117
[  452.507982][T17568] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  452.535483][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  452.554194][T17566] EXT4-fs error (device loop7): ext4_empty_dir:3125: inode #2: block 13: comm syz.7.4727: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  452.578608][T17566] EXT4-fs error (device loop7): ext4_find_dest_de:2050: inode #2: block 13: comm syz.7.4727: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  452.702681][T17576] loop8: detected capacity change from 0 to 256
[  453.365610][T15560] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  453.405387][T17586] input: syz0 as /devices/virtual/input/input26
[  453.760610][T17596] loop7: detected capacity change from 0 to 4096
[  453.806784][T17599] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  453.816192][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-uuid/53ef1790-6acb-496c-bd13-8113447d28c8.tmp-b7:7' failed: Read-only file system
[  453.989199][T17605] netlink: 248 bytes leftover after parsing attributes in process `syz.8.4745'.
[  454.051505][T17607] xt_hashlimit: size too large, truncated to 1048576
[  455.265303][T17641] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4761'.
[  455.636347][T17652] syz_tun: refused to change device tx_queue_len
[  455.641438][T17652] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  455.664077][T17652] syz_tun: refused to change device tx_queue_len
[  455.666510][T17652] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  455.671721][T16997] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  455.824514][T16997] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  455.827391][T16997] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  455.832919][T16997] usb 9-1: config 0 descriptor??
[  455.840369][T16997] cp210x 9-1:0.0: cp210x converter detected
[  456.445079][T16997] cp210x 9-1:0.0: failed to get vendor val 0x370c size 73: -71
[  456.447742][T16997] cp210x 9-1:0.0: GPIO initialisation failed: -71
[  456.458193][T16997] usb 9-1: cp210x converter now attached to ttyUSB0
[  456.461611][T16997] usb 9-1: USB disconnect, device number 7
[  456.465807][T16997] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  456.468449][T16997] cp210x 9-1:0.0: device disconnected
[  457.000096][T17661] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4770'.
[  457.004806][T17661] netlink: 'syz.8.4770': attribute type 3 has an invalid length.
[  457.007423][T17661] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4770'.
[  457.376133][T17677] Attempt to restore checkpoint with obsolete wellknown handles
[  457.432883][T17681] comedi comedi3: 8255: I/O base address not correctly aligned
[  457.496227][T17685] loop8: detected capacity change from 0 to 8
[  457.518812][T17685] SQUASHFS error: Failed to read block 0x6fc: -5
[  457.520761][T17685] SQUASHFS error: Unable to read metadata cache entry [6fa]
[  457.524576][T17685] SQUASHFS error: Unable to read metadata cache entry [6fa]
[  458.650965][T17700] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  459.061549][T16997] psmouse serio4: Failed to reset mouse on : -5
[  459.828166][T17727] loop7: detected capacity change from 0 to 32768
[  459.832878][T17727] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4801 (17727)
[  459.840882][T17727] BTRFS info (device loop7): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  459.846337][T17727] BTRFS info (device loop7): using xxhash64 checksum algorithm
[  459.849256][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-uuid/e417788f-7a09-42b2-9266-8ddc5d5d35d2.tmp-b7:7' failed: Read-only file system
[  459.979596][T17727] BTRFS info (device loop7): enabling ssd optimizations
[  459.982713][T17727] BTRFS info (device loop7): turning on flush-on-commit
[  459.985420][T17727] BTRFS info (device loop7): turning on async discard
[  459.988063][T17727] BTRFS info (device loop7): enabling free space tree
[  459.991038][T17727] BTRFS info (device loop7): force zlib compression, level 3
[  459.995483][T17727] BTRFS info (device loop7): max_inline set to 4096
[  460.039868][T15560] BTRFS info (device loop7): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  460.567011][T17754] loop7: detected capacity change from 0 to 256
[  460.595169][T17754] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d)
[  460.624233][T17754] exFAT-fs (loop7): start_clu is invalid cluster(0xffffffff)
[  460.667581][T17754] exfat: Unknown parameter ''
[  461.165610][T17777] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4818'.
[  461.256411][T17783] loop7: detected capacity change from 0 to 2048
[  461.266053][T17783] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  461.270208][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-label/LinuxUDF.tmp-b7:7' failed: Read-only file system
[  461.279156][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-uuid/1234567812345678.tmp-b7:7' failed: Read-only file system
[  461.291156][   T33] audit: type=1800 audit(2000000582.513:1063): pid=17783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4821" name="bus" dev="loop7" ino=1367 res=0 errno=0
[  461.293969][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-label/LinuxUDF.tmp-b7:7' failed: Read-only file system
[  461.306391][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-uuid/1234567812345678.tmp-b7:7' failed: Read-only file system
[  461.968175][T17803] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  462.831728][T16997] misc userio: Buffer overflowed, userio client isn't keeping up
[  463.340292][T17840] Invalid ELF header magic: != ELF
[  463.890461][T16997] input: PS/2 Generic Mouse as /devices/serio4/input/input27
[  464.122929][T16997] psmouse serio4: Failed to enable mouse on 
[  464.304275][T17850] binder: 17849:17850 ioctl c00c620f 200000000080 returned -22
[  464.307407][T17852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4854'.
[  464.310358][T17852] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4854'.
[  464.314471][T17852] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4854'.
[  464.503249][T17862] overlayfs: failed to clone upperpath
[  464.726201][T17854] loop8: detected capacity change from 0 to 32768
[  465.666031][T17881] loop7: detected capacity change from 0 to 32768
[  465.701846][  T796] usb 9-1: new full-speed USB device number 8 using dummy_hcd
[  465.717202][ T6170] udevd[6170]: symlink '../../loop7' '/dev/disk/by-uuid/d7dc424e-7990-42cb-9f91-9cb7200a101d.tmp-b7:7' failed: Read-only file system
[  465.811477][ T6170] udevd[6170]: symlink '../../loop7' '/dev/disk/by-uuid/d7dc424e-7990-42cb-9f91-9cb7200a101d.tmp-b7:7' failed: Read-only file system
[  465.825306][T17881] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  465.842112][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-uuid/d7dc424e-7990-42cb-9f91-9cb7200a101d.tmp-b7:7' failed: Read-only file system
[  465.855035][T17881] XFS (loop7): Ending clean mount
[  465.863972][  T796] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  465.874430][  T796] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  465.888084][  T796] usb 9-1: config 0 descriptor??
[  465.899282][T15560] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  465.908599][  T796] cp210x 9-1:0.0: cp210x converter detected
[  465.970425][T17897] fuse: fd is not a fuse device
[  466.323801][  T796] usb 9-1: cp210x converter now attached to ttyUSB0
[  466.428433][ T5680] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  466.475426][ T5680] hid-generic 0000:0000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  466.526516][T16997] usb 9-1: USB disconnect, device number 8
[  466.534485][T16997] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  466.543459][T16997] cp210x 9-1:0.0: device disconnected
[  467.530069][T17932] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4886'.
[  467.574138][T17927] loop7: detected capacity change from 0 to 4096
[  467.607831][ T6170] udevd[6170]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  467.628491][ T6170] udevd[6170]: symlink '../../loop7' '/dev/disk/by-uuid/399AA58E54924951.tmp-b7:7' failed: Read-only file system
[  467.659603][ T6170] udevd[6170]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  467.674441][ T6170] udevd[6170]: symlink '../../loop7' '/dev/disk/by-uuid/399AA58E54924951.tmp-b7:7' failed: Read-only file system
[  467.680231][T17936] sit0: entered promiscuous mode
[  467.695100][T17936] netlink: 'syz.8.4888': attribute type 1 has an invalid length.
[  467.704828][T17936] netlink: 1 bytes leftover after parsing attributes in process `syz.8.4888'.
[  467.882842][   T33] audit: type=1804 audit(2000000589.113:1064): pid=17938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4883" name="/newroot/226/bus/file0" dev="loop7" ino=34 res=1 errno=0
[  468.638154][T17950] loop8: detected capacity change from 0 to 736
[  468.722560][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-label/CDROM.tmp-b7:8' failed: Read-only file system
[  468.800652][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-label/CDROM.tmp-b7:8' failed: Read-only file system
[  469.026016][T16763] ntfs3(loop7): ino=5, mi_enum_attr
[  470.453960][T17981] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4907'.
[  470.777516][T17994] netlink: 'syz.8.4913': attribute type 1 has an invalid length.
[  470.788199][T17994] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4913'.
[  470.820029][T17995] loop7: detected capacity change from 0 to 4096
[  470.848254][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-uuid/53ef1790-6acb-496c-bd13-8113447d28c8.tmp-b7:7' failed: Read-only file system
[  470.915165][ T5622] udevd[5622]: symlink '../../loop7' '/dev/disk/by-uuid/53ef1790-6acb-496c-bd13-8113447d28c8.tmp-b7:7' failed: Read-only file system
[  470.944859][T18000] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  471.069593][T18002] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  471.945215][T18032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4928'.
[  472.196933][T18044] loop8: detected capacity change from 0 to 8192
[  472.215930][T18045] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  472.220122][ T6170] udevd[6170]: symlink '../../loop8' '/dev/disk/by-uuid/e11d3933-a15c-4622-bdf4-dfe84debe28c.tmp-b7:8' failed: Read-only file system
[  472.232583][T18047] loop7: detected capacity change from 0 to 256
[  472.247595][ T6170] udevd[6170]: symlink '../../loop8' '/dev/disk/by-uuid/e11d3933-a15c-4622-bdf4-dfe84debe28c.tmp-b7:8' failed: Read-only file system
[  472.269225][T18047] FAT-fs (loop7): Directory bread(block 64) failed
[  472.273166][T18047] FAT-fs (loop7): Directory bread(block 65) failed
[  472.277031][T18047] FAT-fs (loop7): Directory bread(block 66) failed
[  472.287796][T18047] FAT-fs (loop7): Directory bread(block 67) failed
[  472.293554][T18047] FAT-fs (loop7): Directory bread(block 68) failed
[  472.299869][T18047] FAT-fs (loop7): Directory bread(block 69) failed
[  472.305971][T18047] FAT-fs (loop7): Directory bread(block 70) failed
[  472.308780][T18047] FAT-fs (loop7): Directory bread(block 71) failed
[  472.311803][T18047] FAT-fs (loop7): Directory bread(block 72) failed
[  472.314123][T18047] FAT-fs (loop7): Directory bread(block 73) failed
[  472.457245][T18057] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4940'.
[  472.460107][T18057] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4940'.
[  473.174301][   T33] audit: type=1326 audit(2000000594.393:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18074 comm="syz.8.4948" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2285b9cdd9 code=0x0
[  473.645618][T18082] netlink: 'syz.7.4950': attribute type 4 has an invalid length.
[  474.789948][T18101] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  474.795025][T18101] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  475.593836][T18119] netlink: 'syz.7.4967': attribute type 1 has an invalid length.
[  475.596793][T18119] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  477.001109][T18154] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4981'.
[  477.293355][T18162] overlayfs: overlapping lowerdir path
[  477.336246][T18162] loop8: detected capacity change from 0 to 256
[  477.353516][T18162] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x726cdf83, utbl_chksum : 0xe619d30d)
[  477.666011][T18178] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4992'.
[  477.671612][T18178] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4992'.
[  477.682296][T18178] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4992'.
[  477.683215][T18180] fuse: Bad value for 'fd'
[  477.686797][T18178] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4992'.
[  478.133501][T18196] loop8: detected capacity change from 0 to 64
[  478.140094][T18196] minix: block size(59136) > page size(4096) not supported by filesystem
[  478.319032][T18201] xt_bpf: check failed: parse error
[  478.464104][T18209] vivid-007: =================  START STATUS  =================
[  478.471536][T18209] vivid-007: Enable Output Cropping: true grabbed
[  478.478747][T18209] vivid-007: Enable Output Composing: true grabbed
[  478.486191][T18209] vivid-007: Enable Output Scaler: true grabbed
[  478.489172][T18209] vivid-007: Tx RGB Quantization Range: Automatic grabbed
[  478.493782][T18209] vivid-007: Transmit Mode: HDMI grabbed
[  478.495777][T18209] vivid-007: Hotplug Present: 0x00000000
[  478.497404][T18209] vivid-007: RxSense Present: 0x00000000
[  478.498923][T18209] vivid-007: EDID Present: 0x00000000
[  478.500706][T18209] vivid-007: ==================  END STATUS  ==================
[  478.734249][T18222] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5014'.
[  479.112835][T18224] loop8: detected capacity change from 0 to 32768
[  479.169302][T18224] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  479.179235][T18241] openvswitch: netlink: IPv4 tunnel dst address is zero
[  479.190156][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-uuid/d7dc424e-7990-42cb-9f91-9cb7200a101d.tmp-b7:8' failed: Read-only file system
[  479.242830][T18224] XFS (loop8): Ending clean mount
[  479.274984][T18249] PKCS8: Unsupported PKCS#8 version
[  479.344941][T16556] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  479.709526][T18272] PKCS7: Unknown OID: [4] (bad)
[  479.711617][T18272] PKCS7: Only support pkcs7_signedData type
[  479.767484][T18275] netlink: 'syz.8.5036': attribute type 16 has an invalid length.
[  479.783077][T18275] netlink: 'syz.8.5036': attribute type 17 has an invalid length.
[  479.786280][T18275] netlink: 3 bytes leftover after parsing attributes in process `syz.8.5036'.
[  481.111620][T17017] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  481.282111][T17017] usb 9-1: Using ep0 maxpacket: 8
[  481.289184][T17017] usb 9-1: config 179 has an invalid interface number: 65 but max is 0
[  481.301589][T17017] usb 9-1: config 179 has no interface number 0
[  481.305430][T17017] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  481.313523][T17017] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  481.321029][T17017] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  481.340169][T17017] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  481.348896][T18346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5069'.
[  481.356828][T17017] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  481.369742][T17017] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  481.376670][T17017] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.388619][T18331] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  481.834462][T18366] batadv_slave_0: entered promiscuous mode
[  481.840950][T18365] batadv_slave_0: left promiscuous mode
[  483.706751][ T7244] usb 9-1: USB disconnect, device number 9
[  483.706759][    C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  483.712875][    C1] dummy_hcd dummy_hcd.8: timer fired with no URBs pending?
[  484.058605][T18455] cgroup: noprefix used incorrectly
[  484.412586][T18479] loop8: detected capacity change from 0 to 2048
[  484.420674][T18479] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024)
[  484.439090][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:8' failed: Read-only file system
[  484.472488][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:8' failed: Read-only file system
[  484.480861][T18482] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  484.517103][T18484] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  484.766290][T18498] netlink: 'syz.1.5138': attribute type 83 has an invalid length.
[  484.913060][T18505] vlan0: entered allmulticast mode
[  484.915141][T18505] bridge_slave_0: entered allmulticast mode
[  484.917679][T18505] bridge0: port 1(vlan0) entered blocking state
[  484.920419][T18505] bridge0: port 1(vlan0) entered disabled state
[  484.935830][T18505] vlan0: entered promiscuous mode
[  484.939459][T18505] bridge_slave_0: entered promiscuous mode
[  485.228457][T18519] fuse: Bad value for 'fd'
[  485.874597][T18543] xt_hashlimit: size too large, truncated to 1048576
[  486.209531][T18553] loop8: detected capacity change from 0 to 128
[  486.274840][T18553] omfs: sysblock number (f784317bf884317b) is out of range
[  486.448784][T18570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5170'.
[  486.720832][T18591] netlink: 'syz.1.5179': attribute type 11 has an invalid length.
[  487.484995][T18630] netlink: 104 bytes leftover after parsing attributes in process `syz.7.5197'.
[  487.879385][T18644] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  488.433857][T18657] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.5207'.
[  488.498742][T18661] x_tables: duplicate underflow at hook 2
[  488.809509][T18678] kernel read not supported for file /file0 (pid: 18678 comm: syz.7.5217)
[  488.812786][   T33] audit: type=1800 audit(2000000610.043:1066): pid=18678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.5217" name="file0" dev="mqueue" ino=52002 res=0 errno=0
[  490.005156][T18692] loop8: detected capacity change from 0 to 32768
[  490.039751][T18692] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  490.065446][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:8' failed: Read-only file system
[  490.082079][T18692] XFS (loop8): Ending clean mount
[  490.109939][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:8' failed: Read-only file system
[  490.175563][T16556] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  490.376738][T18712] Invalid ELF header len 5
[  490.498537][T18718] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5231'.
[  490.503758][T18718] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5231'.
[  490.720911][T18731] netlink: 'syz.8.5236': attribute type 3 has an invalid length.
[  491.079371][T18755] overlayfs: cannot append lower layer
[  491.427042][T18767] loop8: detected capacity change from 0 to 32768
[  491.433683][T18767] btrfs: Deprecated parameter 'usebackuproot'
[  491.435756][T18767] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  491.445758][T18767] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.5254 (18767)
[  491.452379][T18767] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  491.455414][T18767] BTRFS info (device loop8): using crc32c checksum algorithm
[  491.526346][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:8' failed: Read-only file system
[  491.676644][   T29] BTRFS warning (device loop8): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  491.690324][T18767] BTRFS error (device loop8): failed to load root extent
[  491.694965][T18767] BTRFS warning (device loop8): try to load backup roots slot 1
[  491.698206][   T51] BTRFS warning (device loop8): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  491.707548][T18767] BTRFS warning (device loop8): couldn't read tree root
[  491.710209][T18767] BTRFS warning (device loop8): try to load backup roots slot 2
[  491.713560][ T3332] BTRFS error (device loop8): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  491.720395][T18767] BTRFS warning (device loop8): couldn't read tree root
[  491.723004][T18767] BTRFS warning (device loop8): try to load backup roots slot 3
[  491.734887][T18767] BTRFS info (device loop8): rebuilding free space tree
[  491.756412][T18767] BTRFS info (device loop8): checking UUID tree
[  491.760165][T18767] BTRFS info (device loop8): enabling ssd optimizations
[  491.762853][T18767] BTRFS info (device loop8): turning on async discard
[  491.765400][T18767] BTRFS info (device loop8): enabling free space tree
[  491.767880][T18767] BTRFS info (device loop8): force clearing of disk cache
[  491.770457][T18767] BTRFS info (device loop8): enabling auto defrag
[  491.773367][T18767] BTRFS info (device loop8): trying to use backup root at mount time
[  491.776188][T18767] BTRFS info (device loop8): use zstd compression, level 3
[  492.010117][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:8' failed: Read-only file system
[  493.108645][T16556] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  493.579278][T18817] loop8: detected capacity change from 0 to 32768
[  493.623108][T18817] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  493.667051][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:8' failed: Read-only file system
[  493.700848][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:8' failed: Read-only file system
[  493.810912][T18817] (syz.8.5259,18817,0):ocfs2_rename:1287 ERROR: status = -2
[  493.815955][T18817] (syz.8.5259,18817,0):ocfs2_rename:1700 ERROR: status = -2
[  493.836797][T18817] syz.8.5259 (18817) used greatest stack depth: 19064 bytes left
[  493.918212][T18832] all (unregistering): Released all slaves
[  493.920187][T16556] ocfs2: Unmounting device (7,8) on (node local)
[  493.974427][T18837] netlink: 'syz.7.5273': attribute type 8 has an invalid length.
[  494.199961][T18851] loop8: detected capacity change from 0 to 256
[  495.547657][T18870] loop8: detected capacity change from 0 to 512
[  495.559653][T18870] EXT4-fs (loop8): 1 truncate cleaned up
[  495.561840][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system
[  495.570169][T18870] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  495.576290][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system
[  495.601141][T16556] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  496.415704][T18892] tipc: Can't bind to reserved service type 1
[  496.440565][T17017] usb 9-1: new full-speed USB device number 10 using dummy_hcd
[  496.603793][T17017] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  496.608479][T17017] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  496.614989][T17017] usb 9-1: New USB device found, idVendor=1430, idProduct=07bb, bcdDevice= 0.00
[  496.618822][T17017] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  496.625439][T17017] usb 9-1: config 0 descriptor??
[  496.628757][T18888] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  497.089370][T17017] sony 0003:1430:07BB.0013: unknown main item tag 0x0
[  497.092195][T17017] sony 0003:1430:07BB.0013: unknown main item tag 0x0
[  497.094496][T17017] sony 0003:1430:07BB.0013: unknown main item tag 0x0
[  497.097413][T17017] sony 0003:1430:07BB.0013: unknown main item tag 0x0
[  497.099724][T17017] sony 0003:1430:07BB.0013: unknown main item tag 0x0
[  497.103060][T17017] sony 0003:1430:07BB.0013: unknown main item tag 0x0
[  497.105376][T17017] sony 0003:1430:07BB.0013: unknown main item tag 0x0
[  497.107260][T17017] sony 0003:1430:07BB.0013: unknown main item tag 0x0
[  497.109072][T17017] sony 0003:1430:07BB.0013: unknown main item tag 0x0
[  497.110983][T17017] sony 0003:1430:07BB.0013: unknown main item tag 0x0
[  497.118107][T17017] sony 0003:1430:07BB.0013: hidraw0: USB HID v0.24 Device [HID 1430:07bb] on usb-dummy_hcd.8-1/input0
[  497.121278][T17017] sony 0003:1430:07BB.0013: failed to claim input
[  497.246300][ T7244] usb 9-1: USB disconnect, device number 10
[  497.855745][T18936] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5316'.
[  498.076796][T18944] loop8: detected capacity change from 0 to 2048
[  498.134379][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-label/LinuxUDF.tmp-b7:8' failed: Read-only file system
[  498.140497][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-uuid/1234567812345678.tmp-b7:8' failed: Read-only file system
[  498.147251][T18944] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  498.150536][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-label/LinuxUDF.tmp-b7:8' failed: Read-only file system
[  498.151113][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-uuid/1234567812345678.tmp-b7:8' failed: Read-only file system
[  498.380450][T18963] netlink: 3 bytes leftover after parsing attributes in process `syz.8.5329'.
[  498.837631][T18994] loop8: detected capacity change from 0 to 128
[  498.856300][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:8' failed: Read-only file system
[  498.884188][T18994] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  498.892471][T18994] ext4 filesystem being mounted at /302/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  498.938131][T16556] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  499.593412][T19001] loop8: detected capacity change from 0 to 131072
[  499.597266][T19001] F2FS-fs (loop8): invalid crc value
[  499.633233][T19001] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  499.640473][T19001] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[  499.652864][T19001] F2FS-fs (loop8): invalid namelen(0), ino:8, run fsck to fix.
[  499.717205][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-uuid/0dc345c3-ee38-4114-bfc6-1d471003262c.tmp-b7:8' failed: Read-only file system
[  499.772713][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-uuid/0dc345c3-ee38-4114-bfc6-1d471003262c.tmp-b7:8' failed: Read-only file system
[  500.417604][T19039] bond3: option downdelay: invalid value (18446744073709551609)
[  500.427575][T19039] bond3: option downdelay: allowed values 0 - 2147483647
[  500.443591][T19039] bond3 (unregistering): Released all slaves
[  500.935579][T19057] loop8: detected capacity change from 0 to 32768
[  500.955942][T19057] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  500.962890][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:8' failed: Read-only file system
[  500.983740][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:8' failed: Read-only file system
[  500.985565][T19057] XFS (loop8): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  501.005623][T19057] XFS (loop8): Starting recovery (logdev: internal)
[  501.027434][T19057] XFS (loop8): Ending recovery (logdev: internal)
[  501.050083][   T33] audit: type=1800 audit(2000000622.273:1067): pid=19057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5368" name="file1" dev="loop8" ino=4422 res=0 errno=0
[  501.214786][   T33] audit: type=1326 audit(2000000622.443:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19087 comm="syz.1.5378" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb73979cdd9 code=0x0
[  501.229901][   T33] audit: type=1800 audit(2000000622.453:1069): pid=19085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5368" name="file1" dev="loop8" ino=4422 res=0 errno=0
[  501.782769][T16556] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  502.480586][T19120] loop8: detected capacity change from 0 to 1024
[  502.486397][T19120] EXT4-fs: Ignoring removed nomblk_io_submit option
[  502.494330][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system
[  502.506639][T19120] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  502.629123][T19127] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5392'.
[  502.679066][T19127] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5392'.
[  502.877872][T19136] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.5396'.
[  502.990920][T19138] bond5: entered promiscuous mode
[  503.070936][T16556] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  503.207989][T19148] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  503.381425][ T5619] Bluetooth: hci0: command tx timeout
[  503.616350][T19181] netlink: 'syz.1.5417': attribute type 1 has an invalid length.
[  503.619323][T19181] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5417'.
[  503.622909][T19181] netlink: 658 bytes leftover after parsing attributes in process `syz.1.5417'.
[  503.626447][T19181] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5417'.
[  503.780183][T19194] tmpfs: Bad value for 'mpol'
[  504.733701][T17017] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  504.887907][T17017] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  504.893214][T17017] usb 9-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  504.897613][T17017] usb 9-1: Product: syz
[  504.899318][T17017] usb 9-1: Manufacturer: syz
[  504.901092][T17017] usb 9-1: SerialNumber: syz
[  504.906226][T17017] usb 9-1: config 0 descriptor??
[  504.912838][T17017] ch341 9-1:0.0: ch341-uart converter detected
[  505.209135][T19277] nbd: couldn't find a device at index 17
[  505.526577][T19281] veth0_to_bridge: Caught tx_queue_len zero misconfig
[  505.530277][T19281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5466'.
[  505.967170][T17017] usb 9-1: ch341-uart converter now attached to ttyUSB0
[  506.313993][  T796] usb 9-1: USB disconnect, device number 11
[  506.373558][  T796] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[  506.379395][  T796] ch341 9-1:0.0: device disconnected
[  506.653107][ T1377] ieee802154 phy0 wpan0: encryption failed: -22
[  506.655592][ T1377] ieee802154 phy1 wpan1: encryption failed: -22
[  506.892741][T19316] netlink: 277 bytes leftover after parsing attributes in process `syz.7.5481'.
[  506.971057][T19321] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5483'.
[  507.199238][T19334] input: syz1 as /devices/virtual/input/input29
[  507.752694][T19353] loop8: detected capacity change from 0 to 512
[  507.771731][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system
[  507.791270][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system
[  507.798856][T19353] EXT4-fs: Mount option(s) incompatible with ext2
[  508.743990][ T5619] Bluetooth: hci0: command 0x0406 tx timeout
[  509.187691][   T33] audit: type=1326 audit(2000000630.413:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19407 comm="syz.8.5524" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2285b9cdd9 code=0x7ffc0000
[  509.207925][   T33] audit: type=1326 audit(2000000630.413:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19407 comm="syz.8.5524" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2285b9cdd9 code=0x7ffc0000
[  509.232224][   T33] audit: type=1326 audit(2000000630.413:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19407 comm="syz.8.5524" exe="/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f2285b9cdd9 code=0x7ffc0000
[  509.245941][T19412] loop8: detected capacity change from 0 to 128
[  509.249183][T19412] adfs: Bad value for 'gid'
[  509.250975][T19412] adfs: Bad value for 'gid'
[  509.270257][   T33] audit: type=1326 audit(2000000630.413:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19407 comm="syz.8.5524" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2285b9cdd9 code=0x7ffc0000
[  509.314758][T19413] loop8: detected capacity change from 0 to 128
[  509.328493][   T33] audit: type=1326 audit(2000000630.413:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19407 comm="syz.8.5524" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2285b9cdd9 code=0x7ffc0000
[  509.376715][   T33] audit: type=1326 audit(2000000630.413:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19407 comm="syz.8.5524" exe="/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f2285b9cdd9 code=0x7ffc0000
[  509.474808][T19413] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[  509.481287][T19413] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  509.484358][   T33] audit: type=1326 audit(2000000630.703:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19407 comm="syz.8.5524" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2285b9cdd9 code=0x7ffc0000
[  509.515502][   T33] audit: type=1326 audit(2000000630.703:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19407 comm="syz.8.5524" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2285b9cdd9 code=0x7ffc0000
[  509.532703][   T33] audit: type=1326 audit(2000000630.723:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19407 comm="syz.8.5524" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2285b9cdd9 code=0x7ffc0000
[  509.539844][   T33] audit: type=1326 audit(2000000630.723:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19407 comm="syz.8.5524" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2285b9cdd9 code=0x7ffc0000
[  509.559366][T19416] overlayfs: failed to clone upperpath
[  509.571029][T19418] netlink: 830 bytes leftover after parsing attributes in process `syz.7.5527'.
[  511.029581][T19460] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.5546'.
[  511.596746][T19476] loop8: detected capacity change from 0 to 1024
[  511.616736][T19476] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  511.634485][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-label/untitled.tmp-b7:8' failed: Read-only file system
[  511.647843][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-uuid/88f7f356-8ba5-38d7-8a9c-d989bbc7e05c.tmp-b7:8' failed: Read-only file system
[  511.684186][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-label/untitled.tmp-b7:8' failed: Read-only file system
[  511.702417][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-uuid/88f7f356-8ba5-38d7-8a9c-d989bbc7e05c.tmp-b7:8' failed: Read-only file system
[  512.113226][T19489] vti0: entered allmulticast mode
[  512.391939][ T5749] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  512.551863][ T5749] usb 9-1: Using ep0 maxpacket: 32
[  512.558895][ T5749] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  512.570913][ T5749] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  512.576246][ T5749] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  512.579831][ T5749] usb 9-1: Product: syz
[  512.582790][ T5749] usb 9-1: Manufacturer: syz
[  512.584447][ T5749] usb 9-1: SerialNumber: syz
[  512.588363][ T5749] usb 9-1: config 0 descriptor??
[  512.593206][T19496] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  512.601322][ T5749] hub 9-1:0.0: bad descriptor, ignoring hub
[  512.606474][ T5749] hub 9-1:0.0: probe with driver hub failed with error -5
[  512.922553][ T7248] usb 9-1: USB disconnect, device number 12
[  513.400571][T19563] fuse: fd is not a fuse device
[  513.414313][T19565] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5594'.
[  513.586364][T19573] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5598'.
[  513.686671][T19582] fuse: fd is not a fuse device
[  513.965033][T19604] No such timeout policy "syz0"
[  514.567592][T19620] kAFS: unable to lookup cell 'էKyy
[  514.567592][T19620] 
[  514.567592][T19620] =6%*;eܲ5;Z*d{iElZSjUF/k!btF\_vfVnDPPB1%A)X\YT"8ώdJ_.5d#ۜhGp6"5ͺ*,ImI-(WA?WZ)n[qGjnڇ%(J-%ؘccʵ{|6ZA5k@a+oST;]5!G3{K,'
[  514.629962][T19622] netlink: 'syz.8.5620': attribute type 3 has an invalid length.
[  515.736284][T19661] netlink: 'syz.8.5634': attribute type 10 has an invalid length.
[  515.951018][T19661] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  515.958561][T19661] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  516.093070][T19676] syz_tun: entered allmulticast mode
[  516.124032][T19676] syz_tun (unregistering): left allmulticast mode
[  516.251997][ T7247] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  516.363645][T19680] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5641'.
[  516.401868][ T7247] usb 9-1: Using ep0 maxpacket: 16
[  516.406149][ T7247] usb 9-1: too many endpoints for config 0 interface 0 altsetting 64: 129, using maximum allowed: 30
[  516.415123][ T7247] usb 9-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  516.426248][ T7247] usb 9-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[  516.430051][ T7247] usb 9-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  516.436987][ T7247] usb 9-1: config 0 interface 0 has no altsetting 0
[  516.439486][ T7247] usb 9-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00
[  516.443419][ T7247] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  516.449503][ T7247] usb 9-1: config 0 descriptor??
[  516.587798][T19687] netlink: 'syz.1.5644': attribute type 12 has an invalid length.
[  516.892275][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  517.020094][T19694] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.5646'.
[  517.031502][T19694] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5646'.
[  517.061272][  T796] usb 9-1: USB disconnect, device number 13
[  517.748997][T19704] loop8: detected capacity change from 0 to 1024
[  517.754648][T19706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5652'.
[  517.759387][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system
[  517.781188][T19704] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  517.789446][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system
[  517.841154][T16556] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  518.288045][T19742] xt_hashlimit: size too large, truncated to 1048576
[  519.386418][   T33] kauditd_printk_skb: 36 callbacks suppressed
[  519.386464][   T33] audit: type=1326 audit(2000000640.613:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19762 comm="syz.1.5675" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73979cdd9 code=0x7ffc0000
[  519.425673][   T33] audit: type=1326 audit(2000000640.613:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19762 comm="syz.1.5675" exe="/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fb73979cdd9 code=0x7ffc0000
[  519.460951][   T33] audit: type=1326 audit(2000000640.613:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19762 comm="syz.1.5675" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73979cdd9 code=0x7ffc0000
[  519.490618][   T33] audit: type=1326 audit(2000000640.613:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19762 comm="syz.1.5675" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73979cdd9 code=0x7ffc0000
[  519.594614][T19769] 9pnet: p9_errstr2errno: server reported unknown error 0x000000
[  519.997190][T19787] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5683'.
[  520.606868][T19791] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  520.841220][T19801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5691'.
[  520.910032][   T33] audit: type=1326 audit(2000000642.133:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19806 comm="syz.7.5695" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea879cdd9 code=0x7ffc0000
[  520.933671][   T33] audit: type=1326 audit(2000000642.133:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19806 comm="syz.7.5695" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea879cdd9 code=0x7ffc0000
[  520.953838][   T33] audit: type=1326 audit(2000000642.133:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19806 comm="syz.7.5695" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea879cdd9 code=0x7ffc0000
[  520.973160][   T33] audit: type=1326 audit(2000000642.133:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19806 comm="syz.7.5695" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4ea879cdd9 code=0x7ffc0000
[  520.993897][   T33] audit: type=1326 audit(2000000642.133:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19806 comm="syz.7.5695" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea879cdd9 code=0x7ffc0000
[  521.018560][   T33] audit: type=1326 audit(2000000642.133:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19806 comm="syz.7.5695" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea879cdd9 code=0x7ffc0000
[  521.562959][T19830] loop8: detected capacity change from 0 to 512
[  521.568577][T19830] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  521.572753][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system
[  521.588220][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system
[  521.608494][T19830] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  521.620022][T19830] ext4 filesystem being mounted at /389/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  521.745831][T16556] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  521.814375][T19835] netlink: 'syz.8.5704': attribute type 1 has an invalid length.
[  521.817568][T19835] netlink: 224 bytes leftover after parsing attributes in process `syz.8.5704'.
[  522.202709][T19844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5708'.
[  522.256035][T19846] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5710'.
[  523.626697][T19879] loop8: detected capacity change from 0 to 512
[  523.633813][T19879] EXT4-fs: Ignoring removed i_version option
[  523.646662][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system
[  523.652376][T19879] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  523.669779][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system
[  523.683450][T19879] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  523.698124][T19879] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.5723: Failed to acquire dquot type 1
[  523.702412][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  523.702433][    C0] EXT4-fs (loop8): initial error at time 2000000644: ext4_mb_generate_buddy:1317
[  523.702450][    C0] EXT4-fs (loop8): last error at time 2000000644: ext4_mb_generate_buddy:1317
[  523.723007][T19879] loop8: lost filesystem error report for type 5 error -28
[  523.723634][T19879] EXT4-fs (loop8): 1 truncate cleaned up
[  523.731613][T19879] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  523.805200][T19879] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.5723: Failed to acquire dquot type 1
[  523.852824][T16556] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  524.114931][T19902] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  524.738500][T19916] 9p: Bad value for 'rfdno'
[  524.823232][T19910] loop8: detected capacity change from 0 to 32768
[  524.849748][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:8' failed: Read-only file system
[  524.869544][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:8' failed: Read-only file system
[  525.163292][ T7248] usb 9-1: new low-speed USB device number 14 using dummy_hcd
[  525.310389][T19941] bridge_slave_1: entered promiscuous mode
[  525.327329][ T7248] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8
[  525.336716][ T7248] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  525.342401][ T7248] usb 9-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00
[  525.347840][ T7248] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  525.355560][ T7248] usb 9-1: config 0 descriptor??
[  525.359259][T19923] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  525.580375][T19923] loop8: detected capacity change from 0 to 1024
[  525.588842][T19923] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  525.596338][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system
[  525.602580][T19923] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  525.619089][T19923] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  525.625399][T19923] EXT4-fs error (device loop8): ext4_get_journal_inode:5896: inode #32: comm syz.8.5741: iget: special inode unallocated
[  525.630806][T19923] loop8: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117
[  525.631311][T19923] EXT4-fs (loop8): no journal found
[  525.636008][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system
[  525.639250][T19923] EXT4-fs (loop8): can't get journal size
[  525.642882][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  525.642896][    C0] EXT4-fs (loop8): initial error at time 2000000646: ext4_get_journal_inode:5896: inode 32
[  525.642911][    C0] EXT4-fs (loop8): last error at time 2000000646: ext4_get_journal_inode:5896: inode 32
[  525.668147][T19923] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  525.737707][T19954] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  525.741840][T19954] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  525.853298][T19957] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5756'.
[  525.881203][ T7248] hid_parser_main: 27 callbacks suppressed
[  525.881216][ T7248] lg-g15 0003:046D:C22D.0015: unknown main item tag 0x0
[  525.893264][ T7248] lg-g15 0003:046D:C22D.0015: unknown main item tag 0x0
[  525.897786][ T7248] lg-g15 0003:046D:C22D.0015: unknown main item tag 0x0
[  525.902819][ T7248] lg-g15 0003:046D:C22D.0015: unknown main item tag 0x0
[  525.907802][ T7248] lg-g15 0003:046D:C22D.0015: unknown main item tag 0x0
[  525.911668][ T7248] lg-g15 0003:046D:C22D.0015: unknown main item tag 0x0
[  525.915681][ T7248] lg-g15 0003:046D:C22D.0015: unknown main item tag 0x0
[  525.920578][ T7248] lg-g15 0003:046D:C22D.0015: unknown main item tag 0x0
[  525.923788][ T7248] lg-g15 0003:046D:C22D.0015: unknown main item tag 0x0
[  525.926436][ T7248] lg-g15 0003:046D:C22D.0015: unknown main item tag 0x0
[  525.930723][ T7248] lg-g15 0003:046D:C22D.0015: hidraw0: USB HID v0.08 Device [HID 046d:c22d] on usb-dummy_hcd.8-1/input0
[  526.084777][ T7248] usb 9-1: USB disconnect, device number 14
[  526.618488][T16556] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  526.829334][T20009] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5779'.
[  527.956985][T17017] hid-generic 0003:0004:FFFFFFFE.0016: hidraw0: USB HID v4.00 Device [syz0] on syz1
[  528.352720][T20065] netlink: 'syz.1.5805': attribute type 2 has an invalid length.
[  528.458723][T20071] netlink: 'syz.8.5808': attribute type 3 has an invalid length.
[  528.639601][T20085] netlink: 'syz.8.5815': attribute type 21 has an invalid length.
[  528.643365][T20085] netlink: 128 bytes leftover after parsing attributes in process `syz.8.5815'.
[  528.646868][T20085] netlink: 'syz.8.5815': attribute type 4 has an invalid length.
[  528.649809][T20085] netlink: 3 bytes leftover after parsing attributes in process `syz.8.5815'.
[  529.088450][T20093] loop8: detected capacity change from 0 to 32768
[  529.119067][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:8' failed: Read-only file system
[  529.132482][T20093] ERROR: (device loop8): diAllocAG: numfree > numinos
[  529.132482][T20093] 
[  529.142522][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:8' failed: Read-only file system
[  529.154551][T20093] ERROR: (device loop8): remounting filesystem as read-only
[  529.156809][T20093] ialloc: diAlloc returned -5!
[  529.486155][T20115] bridge0: port 3(vlan2) entered blocking state
[  529.488253][T20115] bridge0: port 3(vlan2) entered disabled state
[  529.490287][T20115] vlan2: entered allmulticast mode
[  529.492740][T20115] bridge0: entered allmulticast mode
[  529.497482][T20115] vlan2: left allmulticast mode
[  529.498956][T20115] bridge0: left allmulticast mode
[  529.629403][T20122] loop8: detected capacity change from 0 to 256
[  529.665446][T20125] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5834'.
[  529.787101][T20129] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5835'.
[  530.057414][T20147] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5843'.
[  530.935386][T20177] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed.
[  532.141213][T20240] netlink: 'syz.1.5887': attribute type 1 has an invalid length.
[  532.700468][T20254] gre2: entered promiscuous mode
[  532.704026][T20254] gre2: entered allmulticast mode
[  532.914842][ T5749] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  533.071554][ T5749] usb 9-1: Using ep0 maxpacket: 16
[  533.078658][ T5749] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  533.086766][ T5749] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  533.092987][ T5749] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  533.096731][ T5749] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.100168][ T5749] usb 9-1: Product: syz
[  533.102966][ T5749] usb 9-1: Manufacturer: syz
[  533.104778][ T5749] usb 9-1: SerialNumber: syz
[  533.262433][ T5749] usb 9-1: 0:2 : does not exist
[  533.364673][T20270] netlink: 17780 bytes leftover after parsing attributes in process `syz.7.5900'.
[  533.702376][ T5749] usb 9-1: 5:0: cannot get min/max values for control 4 (id 5)
[  533.731575][ T5749] usb 9-1: 5:0: cannot get min/max values for control 5 (id 5)
[  533.739683][ T5749] usb 9-1: 5:0: cannot get min/max values for control 5 (id 5)
[  533.747711][ T5749] usb 9-1: 5:0: failed to get current value for ch 1 (-22)
[  533.772948][ T5749] usb 9-1: 5:0: cannot get min/max values for control 5 (id 5)
[  533.797923][ T5749] usb 9-1: USB disconnect, device number 15
[  533.835336][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  534.833166][T20311] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  534.898723][T20288] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  534.967148][T20316] pim6reg: entered allmulticast mode
[  535.139118][T20322] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  536.979814][T20381] can0: slcan on ttyS3.
[  537.004740][T20385] fuse: fd is not a fuse device
[  537.122007][T20381] can0 (unregistered): slcan off ttyS3.
[  537.291750][ T7247] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  537.473705][ T7247] usb 9-1: config 10 has an invalid interface number: 178 but max is 0
[  537.492586][ T7247] usb 9-1: config 10 has no interface number 0
[  537.497771][ T7247] usb 9-1: config 10 interface 178 has no altsetting 0
[  537.504723][ T7247] usb 9-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=4b.50
[  537.508413][ T7247] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  537.517341][ T7247] usb 9-1: Product: syz
[  537.519497][ T7247] usb 9-1: Manufacturer: syz
[  537.526341][ T7247] usb 9-1: SerialNumber: syz
[  537.556840][T20431] 9p: Bad value for 'rfdno'
[  537.725989][T20439] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5967'.
[  537.780780][ T7247] usb 9-1: USB disconnect, device number 16
[  538.111292][T20450] geneve1: entered promiscuous mode
[  538.382031][T20459] loop8: detected capacity change from 0 to 4096
[  538.420680][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-uuid/ab2f6cf2-a99d-4328-b186-08168e7a6b7e.tmp-b7:8' failed: Read-only file system
[  538.468131][T20462] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  538.736551][T20480] IPv6: NLM_F_REPLACE set, but no existing node found!
[  539.302739][T20493] loop8: detected capacity change from 0 to 2048
[  539.316159][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system
[  539.335387][T20493] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  539.339995][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system
[  539.381200][T16556] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  539.492360][T20500] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5993'.
[  539.496292][T20500] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5993'.
[  539.559795][T20502] netlink: 'syz.8.5994': attribute type 10 has an invalid length.
[  539.595300][T20502] bond0: (slave netdevsim1): Releasing backup interface
[  539.608748][T20502] bridge0: port 3(netdevsim1) entered blocking state
[  539.620447][T20502] bridge0: port 3(netdevsim1) entered disabled state
[  539.624054][T20502] netdevsim netdevsim8 netdevsim1: entered allmulticast mode
[  539.629391][T20502] netdevsim netdevsim8 netdevsim1: entered promiscuous mode
[  539.660798][ T5749] libceph: connect (1)[c::]:6789 error -13
[  539.667746][ T5749] libceph: mon0 (1)[c::]:6789 connect error
[  539.685204][T20504] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  539.729873][T20505] ceph: No mds server is up or the cluster is laggy
[  540.151541][   T33] kauditd_printk_skb: 13 callbacks suppressed
[  540.151559][   T33] audit: type=1800 audit(2000000661.343:1133): pid=20519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5998" name="bus" dev="tmpfs" ino=2409 res=0 errno=0
[  540.873820][T20525] dlm: plock device version mismatch: kernel (1.2.0), user (619199281.1581691892.1258375512)
[  541.301535][ T7247] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  541.430213][T20549] xt_hashlimit: size too large, truncated to 1048576
[  541.476546][ T7247] usb 9-1: unable to get BOS descriptor or descriptor too short
[  541.481086][ T7247] usb 9-1: config 63 has an invalid interface number: 66 but max is 0
[  541.483943][ T7247] usb 9-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[  541.487441][T20551] x9: renamed from bridge_slave_0 (while UP)
[  541.489385][ T7247] usb 9-1: config 63 has no interface number 0
[  541.493526][ T7247] usb 9-1: config 63 interface 66 has no altsetting 0
[  541.503521][ T7247] usb 9-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[  541.506566][ T7247] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.509073][ T7247] usb 9-1: Product: syz
[  541.510325][ T7247] usb 9-1: Manufacturer: syz
[  541.512606][ T7247] usb 9-1: SerialNumber: syz
[  541.739105][ T7247] uvcvideo 9-1:63.66: probe with driver uvcvideo failed with error -22
[  541.744634][T20561] overlayfs: failed to clone upperpath
[  541.747771][ T7247] usb 9-1: USB disconnect, device number 17
[  541.790597][T20563] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6019'.
[  541.793578][T20563] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6019'.
[  541.908074][T20573] fuse: Bad value for 'fd'
[  541.941567][T20576] futex_wake_op: syz.7.6025 tries to shift op by 144; fix this program
[  541.986453][T20579] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.6028'.
[  543.629843][T20618] bridge0: port 2(bridge_slave_1) entered disabled state
[  543.633154][T20618] bridge0: port 1(1x9) entered disabled state
[  543.908748][T20618] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  543.916930][T20618] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  543.964272][T20647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6050'.
[  544.181763][ T5749] lo speed is unknown, defaulting to 1000
[  544.190832][ T9360] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  544.197526][ T9360] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  544.214559][ T9360] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  544.221822][ T9360] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  544.225977][ T5749] syz0: Port: 1 Link DOWN
[  544.256908][T20656] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6054'.
[  544.456765][T20667] loop8: detected capacity change from 0 to 2048
[  544.478735][T20667] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  544.493156][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-label/LinuxUDF.tmp-b7:8' failed: Read-only file system
[  544.507189][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-uuid/1234567812345678.tmp-b7:8' failed: Read-only file system
[  544.539489][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-label/LinuxUDF.tmp-b7:8' failed: Read-only file system
[  544.553172][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-uuid/1234567812345678.tmp-b7:8' failed: Read-only file system
[  544.708110][T20685] sit0: left promiscuous mode
[  544.798946][T20685] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  544.825502][T20685] bond1: left promiscuous mode
[  544.894255][T20602] Bluetooth: hci2: command 0x0406 tx timeout
[  545.028276][T20702] loop8: detected capacity change from 0 to 8
[  545.361645][ T7247] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  545.512454][ T7247] usb 9-1: Using ep0 maxpacket: 8
[  545.517120][ T7247] usb 9-1: config 0 has an invalid interface number: 6 but max is 2
[  545.520044][ T7247] usb 9-1: config 0 has an invalid interface number: 176 but max is 2
[  545.525345][ T7247] usb 9-1: config 0 has no interface number 1
[  545.527674][ T7247] usb 9-1: config 0 has no interface number 2
[  545.530003][ T7247] usb 9-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  545.537926][ T7247] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  545.543845][ T7247] usb 9-1: config 0 descriptor??
[  545.756288][ T7247] qcserial 9-1:0.6: Qualcomm USB modem converter detected
[  545.964660][ T7247] usb 9-1: USB disconnect, device number 18
[  545.976672][ T7247] qcserial 9-1:0.6: device disconnected
[  546.329749][   T33] audit: type=1326 audit(2000000667.553:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20710 comm="syz.1.6079" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73979cdd9 code=0x7fc00000
[  546.558121][T20745] syzkaller1: entered promiscuous mode
[  546.559891][T20745] syzkaller1: entered allmulticast mode
[  546.972775][T20602] Bluetooth: hci2: command 0x0406 tx timeout
[  546.981517][T20644] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  547.134425][T20644] usb 9-1: unable to get BOS descriptor or descriptor too short
[  547.142160][T20644] usb 9-1: New USB device found, idVendor=1c9e, idProduct=9603, bcdDevice=f3.0a
[  547.145826][T20644] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  547.148934][T20644] usb 9-1: Product: syz
[  547.150545][T20644] usb 9-1: Manufacturer: syz
[  547.153315][T20644] usb 9-1: SerialNumber: syz
[  547.410672][T20644] option 9-1:4.0: GSM modem (1-port) converter detected
[  547.424551][T20644] usb 9-1: USB disconnect, device number 19
[  547.438309][T20644] option 9-1:4.0: device disconnected
[  547.999342][T20781] loop8: detected capacity change from 0 to 512
[  548.005885][T20781] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  548.017183][T20781] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.6111: bad orphan inode 131083
[  548.022135][T20781] loop8: lost filesystem error report for type 5 error -117
[  548.028023][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system
[  548.058955][T20781] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  548.072381][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system
[  548.101881][T16556] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  548.217423][T20785] loop8: detected capacity change from 0 to 512
[  548.220601][T20785] ext4: Unknown parameter 'smackfshat'
[  548.232507][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system
[  548.824523][T20805] netlink: 104 bytes leftover after parsing attributes in process `syz.7.6121'.
[  549.006690][T20809] block nbd0: server does not support multiple connections per device.
[  549.009623][T20809] block nbd0: shutting down sockets
[  549.867138][T20643] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  550.025820][T20643] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  550.030156][T20643] usb 9-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  550.035180][T20643] usb 9-1: config 2 interface 0 has no altsetting 0
[  550.039906][T20643] usb 9-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47
[  550.043841][T20643] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  550.046953][T20643] usb 9-1: Product: syz
[  550.048601][T20643] usb 9-1: Manufacturer: syz
[  550.050347][T20643] usb 9-1: SerialNumber: syz
[  550.275039][T20643] ims_pcu 9-1:2.0: probe with driver ims_pcu failed with error -22
[  550.284781][T20643] usb 9-1: USB disconnect, device number 20
[  551.663522][T20862] xt_connbytes: Forcing CT accounting to be enabled
[  551.665878][T20862] xt_NFQUEUE: number of total queues is 0
[  551.698285][T20865] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6147'.
[  551.713332][T20865] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6147'.
[  551.716472][T20865] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6147'.
[  551.903449][T20875] netlink: 65039 bytes leftover after parsing attributes in process `syz.8.6153'.
[  552.200221][T20902] fuse: fd is not a fuse device
[  552.200388][T20900] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6163'.
[  552.364002][T20916] loop8: detected capacity change from 0 to 256
[  552.367278][T20916] exfat: Deprecated parameter 'namecase'
[  552.381434][T20916] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d)
[  552.407178][T20916] exFAT-fs (loop8): error, in sector 160, dentry 5 should be unused, but 0xc1
[  552.741550][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  552.878447][T20928] bond2: entered allmulticast mode
[  552.880921][T20928] 8021q: adding VLAN 0 to HW filter on device bond2
[  553.864442][T20956] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0
[  553.979867][T20961] overlay: filesystem on ./file0 is read-only
[  554.109655][T20971] Cannot find set identified by id 0 to match
[  554.380504][ T7247] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[  554.540717][ T7247] usb 9-1: Using ep0 maxpacket: 16
[  554.547387][ T7247] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  554.557006][ T7247] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  554.563826][ T7247] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  554.576479][ T7247] usb 9-1: New USB device found, idVendor=145e, idProduct=07da, bcdDevice= 0.00
[  554.584023][ T7247] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  554.594475][ T7247] usb 9-1: config 0 descriptor??
[  555.014628][ T7247] hid-generic 0003:145E:07DA.0017: ignoring exceeding usage max
[  555.022326][ T7247] hid-generic 0003:145E:07DA.0017: ignoring exceeding usage max
[  555.034287][ T7247] hid-generic 0003:145E:07DA.0017: hidraw0: USB HID v0.00 Device [HID 145e:07da] on usb-dummy_hcd.8-1/input0
[  555.237504][T20632] usb 9-1: USB disconnect, device number 21
[  555.459293][T21010] syz_tun: entered allmulticast mode
[  555.461788][T21009] syz_tun: left allmulticast mode
[  556.040382][T20632] usb 9-1: new full-speed USB device number 22 using dummy_hcd
[  556.213409][T20632] usb 9-1: config index 0 descriptor too short (expected 6427, got 27)
[  556.217138][T20632] usb 9-1: config 0 has an invalid interface number: 21 but max is 0
[  556.221548][T20632] usb 9-1: config 0 has no interface number 0
[  556.226859][T20632] usb 9-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0x17, changing to 0x7
[  556.242886][T20632] usb 9-1: config 0 interface 21 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10
[  556.249180][T20632] usb 9-1: config 0 interface 21 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  556.256187][T21038] fuse: fd is not a fuse device
[  556.260554][T20632] usb 9-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  556.266844][T20632] usb 9-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0
[  556.271489][T20632] usb 9-1: Product: syz
[  556.272747][T20632] usb 9-1: Manufacturer: syz
[  556.275705][T20632] usb 9-1: config 0 descriptor??
[  556.485950][T20643] usb 9-1: USB disconnect, device number 22
[  556.853168][T21074] trusted_key: encrypted_key: key trusted:syz not found
[  556.906390][T21078] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6247'.
[  557.119319][T21088] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6252'.
[  557.123543][T21088] netem: invalid attributes len -8
[  557.125656][T21088] netem: change failed
[  557.776784][T21112] 8021q: adding VLAN 0 to HW filter on device bond0
[  557.840928][T21114] overlayfs: missing 'lowerdir'
[  557.989739][T21124] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6267'.
[  558.011769][T21128] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6271'.
[  558.014585][T21128] bridge: RTM_NEWNEIGH with invalid ether address
[  558.079384][T21132] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6273'.
[  558.131057][   T10] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  558.270367][ T5673] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  558.302146][T21148] program syz.8.6281 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  558.441162][T21157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6284'.
[  558.552715][T21165] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6287'.
[  558.598030][T21165] bond3 (unregistering): Released all slaves
[  558.887544][T21176] 9p: Bad value for 'rfdno'
[  558.900319][T20632] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  559.292105][ T9355] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  559.301755][ T9355] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  559.342735][T20643] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  559.833888][T21210] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6308'.
[  559.949630][T21216] loop8: detected capacity change from 0 to 128
[  559.959315][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:8' failed: Read-only file system
[  559.973554][T21216] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  559.982700][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:8' failed: Read-only file system
[  559.991214][T21216] ext4 filesystem being mounted at /537/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  560.020603][T16556] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  560.420007][T20632] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[  560.452954][T21234] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  560.581840][T20632] usb 9-1: Using ep0 maxpacket: 16
[  560.588435][T20632] usb 9-1: config 0 has no interfaces?
[  560.607553][T20632] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  560.619183][T20632] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  560.632197][T20632] usb 9-1: Product: syz
[  560.636211][T20632] usb 9-1: Manufacturer: syz
[  560.639747][T20632] usb 9-1: SerialNumber: syz
[  560.658884][T20632] usb 9-1: config 0 descriptor??
[  560.702767][T21242] syz_tun: entered allmulticast mode
[  560.720385][T21242] dvmrp1: entered allmulticast mode
[  560.727290][T21241] syz_tun: left allmulticast mode
[  561.706873][T21266] netlink: 'syz.1.6330': attribute type 2 has an invalid length.
[  561.710000][T21266] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6330'.
[  562.583878][T21285] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6342'.
[  563.050218][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  563.211001][T20643] usb 9-1: USB disconnect, device number 23
[  564.280927][T21332] netlink: 1508 bytes leftover after parsing attributes in process `syz.1.6364'.
[  564.443829][T21338] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6368'.
[  564.600381][T21355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6374'.
[  564.846473][T21371] sch_tbf: burst 20736 is lower than device lo mtu (65550) !
[  564.910155][T21375] netdevsim netdevsim8 netdevsim0: IPsec offload requires 128 bit authentication
[  565.645674][T21391] loop8: detected capacity change from 0 to 512
[  565.656907][T21391] EXT4-fs (loop8): orphan cleanup on readonly fs
[  565.661285][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system
[  565.663483][T21391] EXT4-fs warning (device loop8): ext4_xattr_inode_get:546: inode #11: comm syz.8.6389: ea_inode file size=4 entry size=6
[  565.672100][T21391] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  565.692969][ T5622] udevd[5622]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system
[  565.810337][T21391] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #15: comm syz.8.6389: corrupted inode contents
[  565.818229][T21391] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  565.818509][T21391] EXT4-fs (loop8): Remounting filesystem read-only
[  565.821347][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  565.821360][    C1] EXT4-fs (loop8): initial error at time 2000000006: ext4_do_update_inode:5690: inode 15
[  565.821374][    C1] EXT4-fs (loop8): last error at time 2000000006: ext4_do_update_inode:5690: inode 15
[  565.849568][T21391] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -30)
[  565.858353][T21391] EXT4-fs (loop8): 1 orphan inode deleted
[  565.865165][T21391] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  566.410483][    C1] ------------[ cut here ]------------
[  566.415604][    C1] sk->sk_forward_alloc
[  566.415615][    C1] WARNING: net/ipv4/af_inet.c:162 at inet_sock_destruct+0x62d/0x740, CPU#1: ksoftirqd/1/23
[  566.420003][    C1] Modules linked in:
[  566.421585][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  566.424755][    C1] Tainted: [L]=SOFTLOCKUP
[  566.426040][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  566.429405][    C1] RIP: 0010:inet_sock_destruct+0x62d/0x740
[  566.431243][    C1] Code: 0f 0b 90 e9 58 fe ff ff e8 40 ed 9e f7 90 0f 0b 90 e9 8b fe ff ff e8 32 ed 9e f7 90 0f 0b 90 e9 b1 fe ff ff e8 24 ed 9e f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc
[  566.437290][    C1] RSP: 0018:ffffc900001d7ae0 EFLAGS: 00010246
[  566.439184][    C1] RAX: ffffffff8a26b71c RBX: dffffc0000000000 RCX: ffff8881604f5880
[  566.441403][    C1] RDX: 0000000000000100 RSI: 0000000000000120 RDI: 0000000000000000
[  566.444105][    C1] RBP: 0000000000000120 R08: ffff888173c8f127 R09: 1ffff1102e791e24
[  566.446901][    C1] R10: dffffc0000000000 R11: ffffed102e791e25 R12: ffff888173c8ee80
[  566.449666][    C1] R13: ffff888173c8f388 R14: ffff888173c8f10c R15: ffffffff8feae440
[  566.452580][    C1] FS:  0000000000000000(0000) GS:ffff8882a9293000(0000) knlGS:0000000000000000
[  566.455708][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  566.458032][    C1] CR2: 0000200000000380 CR3: 00000001bf602000 CR4: 00000000000006f0
[  566.460885][    C1] Call Trace:
[  566.462111][    C1]  <TASK>
[  566.463177][    C1]  ? __pfx_udp_destruct_sock+0x10/0x10
[  566.465094][    C1]  __sk_destruct+0x8d/0x9d0
[  566.466770][    C1]  ? rcu_core+0x751/0x1070
[  566.468353][    C1]  ? __pfx___sk_destruct+0x10/0x10
[  566.470295][    C1]  rcu_core+0x7cd/0x1070
[  566.471782][    C1]  ? __pfx_rcu_core+0x10/0x10
[  566.473308][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[  566.475011][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[  566.476812][    C1]  handle_softirqs+0x22a/0x840
[  566.478583][    C1]  ? schedule+0x90/0x360
[  566.480341][    C1]  ? run_ksoftirqd+0x36/0x60
[  566.482293][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[  566.484389][    C1]  run_ksoftirqd+0x36/0x60
[  566.486169][    C1]  smpboot_thread_fn+0x541/0xa50
[  566.488202][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[  566.490045][    C1]  kthread+0x388/0x470
[  566.491531][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  566.493731][    C1]  ? __pfx_kthread+0x10/0x10
[  566.495661][    C1]  ret_from_fork+0x514/0xb70
[  566.497574][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  566.499549][    C1]  ? __switch_to+0xc79/0x1410
[  566.501335][    C1]  ? __pfx_kthread+0x10/0x10
[  566.502735][    C1]  ret_from_fork_asm+0x1a/0x30
[  566.504345][    C1]  </TASK>
[  566.505461][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  566.508146][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  566.511863][    C1] Tainted: [L]=SOFTLOCKUP
[  566.513485][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  566.517082][    C1] Call Trace:
[  566.518294][    C1]  <TASK>
[  566.519391][    C1]  vpanic+0x56c/0xa60
[  566.520827][    C1]  ? __pfx__printk+0x10/0x10
[  566.522455][    C1]  ? __pfx_vpanic+0x10/0x10
[  566.523990][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  566.525983][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  566.527912][    C1]  panic+0xc5/0xd0
[  566.529369][    C1]  ? __pfx_panic+0x10/0x10
[  566.531008][    C1]  ? ret_from_fork_asm+0x1a/0x30
[  566.532690][    C1]  __warn+0x315/0x4c0
[  566.534132][    C1]  ? inet_sock_destruct+0x62d/0x740
[  566.535944][    C1]  ? inet_sock_destruct+0x62d/0x740
[  566.537818][    C1]  __report_bug+0x29a/0x540
[  566.539445][    C1]  ? kasan_save_track+0x3e/0x80
[  566.541208][    C1]  ? kasan_save_free_info+0x46/0x50
[  566.543090][    C1]  ? __kasan_slab_free+0x5c/0x80
[  566.544899][    C1]  ? inet_sock_destruct+0x62d/0x740
[  566.546843][    C1]  ? __pfx___report_bug+0x10/0x10
[  566.548659][    C1]  ? inet_sock_destruct+0x62d/0x740
[  566.550560][    C1]  report_bug+0x16a/0x220
[  566.552215][    C1]  ? inet_sock_destruct+0x62d/0x740
[  566.554128][    C1]  ? inet_sock_destruct+0x62f/0x740
[  566.555933][    C1]  handle_bug+0x9c/0x200
[  566.557476][    C1]  exc_invalid_op+0x1a/0x50
[  566.559128][    C1]  asm_exc_invalid_op+0x1a/0x20
[  566.560768][    C1] RIP: 0010:inet_sock_destruct+0x62d/0x740
[  566.562851][    C1] Code: 0f 0b 90 e9 58 fe ff ff e8 40 ed 9e f7 90 0f 0b 90 e9 8b fe ff ff e8 32 ed 9e f7 90 0f 0b 90 e9 b1 fe ff ff e8 24 ed 9e f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc
[  566.569984][    C1] RSP: 0018:ffffc900001d7ae0 EFLAGS: 00010246
[  566.571828][    C1] RAX: ffffffff8a26b71c RBX: dffffc0000000000 RCX: ffff8881604f5880
[  566.574272][    C1] RDX: 0000000000000100 RSI: 0000000000000120 RDI: 0000000000000000
[  566.577157][    C1] RBP: 0000000000000120 R08: ffff888173c8f127 R09: 1ffff1102e791e24
[  566.580003][    C1] R10: dffffc0000000000 R11: ffffed102e791e25 R12: ffff888173c8ee80
[  566.582932][    C1] R13: ffff888173c8f388 R14: ffff888173c8f10c R15: ffffffff8feae440
[  566.585825][    C1]  ? inet_sock_destruct+0x62c/0x740
[  566.587735][    C1]  ? __pfx_udp_destruct_sock+0x10/0x10
[  566.589901][    C1]  __sk_destruct+0x8d/0x9d0
[  566.591513][    C1]  ? rcu_core+0x751/0x1070
[  566.592933][    C1]  ? __pfx___sk_destruct+0x10/0x10
[  566.594571][    C1]  rcu_core+0x7cd/0x1070
[  566.596139][    C1]  ? __pfx_rcu_core+0x10/0x10
[  566.597661][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[  566.599262][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[  566.601079][    C1]  handle_softirqs+0x22a/0x840
[  566.602848][    C1]  ? schedule+0x90/0x360
[  566.604415][    C1]  ? run_ksoftirqd+0x36/0x60
[  566.606443][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[  566.608355][    C1]  run_ksoftirqd+0x36/0x60
[  566.610011][    C1]  smpboot_thread_fn+0x541/0xa50
[  566.611583][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[  566.612980][    C1]  kthread+0x388/0x470
[  566.614386][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  566.616312][    C1]  ? __pfx_kthread+0x10/0x10
[  566.617822][    C1]  ret_from_fork+0x514/0xb70
[  566.619333][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  566.620784][    C1]  ? __switch_to+0xc79/0x1410
[  566.622091][    C1]  ? __pfx_kthread+0x10/0x10
[  566.623366][    C1]  ret_from_fork_asm+0x1a/0x30
[  566.624812][    C1]  </TASK>
[  566.626349][    C1] Kernel Offset: disabled
[  566.627598][    C1] Rebooting in 86400 seconds..
