last executing test programs:

1m13.259351074s ago: executing program 0 (id=748):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a28000000000a010300000000000000000100000008000240000000030900010073797a310000000054000000030a01020000000000000000010000000900030073797a300000000028000480080002400000000008000140000000050700000000000000315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c0002400000000000000001090001"], 0xf0}}, 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022d00010000000009040000035883b200090589000000000000090585"], 0x0)

1m12.629100709s ago: executing program 0 (id=749):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
cachestat(r0, &(0x7f0000000040)={0x405}, &(0x7f000009de80), 0x0)

1m12.478991047s ago: executing program 0 (id=750):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7bfd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x20, 0x31, 0x12, "ee153459ca529beb5d240bd5156f13854a91"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

1m11.909064059s ago: executing program 0 (id=759):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a)
mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000080)='tmpfs\x00', 0x20849b, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0)
mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x24000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)

1m11.908666516s ago: executing program 0 (id=761):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl(r0, 0x3b93, &(0x7f00000000c0)='(')

1m11.62893024s ago: executing program 0 (id=765):
syz_usb_connect(0x3, 0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000202000040ef176161000001020301090230000101008032090400000302020000052400100104240202070581034000100705820200020007050302000200"], &(0x7f0000000100))
symlink(&(0x7f0000000200)='file0\x00', &(0x7f0000000300)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2, 0x0)

1m11.593277584s ago: executing program 32 (id=765):
syz_usb_connect(0x3, 0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000202000040ef176161000001020301090230000101008032090400000302020000052400100104240202070581034000100705820200020007050302000200"], &(0x7f0000000100))
symlink(&(0x7f0000000200)='file0\x00', &(0x7f0000000300)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2, 0x0)

15.459859582s ago: executing program 1 (id=1281):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0xc004, &(0x7f0000003300)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES32], 0x1, 0x5f7, &(0x7f0000000c80)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000001080)=""/79, 0x4f)
getdents(r0, 0xfffffffffffffffd, 0x58)

15.329963223s ago: executing program 1 (id=1282):
syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x101, [{0x4, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "0026000400000000008000eb"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0)

15.100403563s ago: executing program 1 (id=1288):
syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040490d00700100010203010902270001010080320904000003080650000705010200020007058202"], 0x0)

12.048803437s ago: executing program 1 (id=1307):
syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800c10, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1f, 0x242, &(0x7f0000000540)="$eJzs3c1qE1EYBuDPWtvYjd0J4mLEjaug3sEgFcQBITILXTlQ3TSiTDejq1yBO/EevBCvwqvoqrtIM0OnP9aNbU7beR4I85KXge9ASLI4J3l3/+PO9qfdD99//YjRKIuViFnsR2wepM6N7rqyyGtx1CwAgKtmMqny1DNwseo6r25FxPqppvyZZCAAAAAAAAAAAAD+m/3/ADA89v9ff3WdVxvd97fj7P8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0tmfz+/M//FIPR8AcP58/gPA8Lx+8/ZlXhRbkywbRezNmrIp22vbP39RbD3OFjb7u/aaprx52D9p+6wr7z749nkRNrr+6fG+u38tHj1s+4Pu2aviRL8e20tYPwAAAAAAAAAAAAAAAAAAAFwG4+zQX8/3j8dn9W068vsAJ87vr8a91aUtAwAAAAAAAAAAAAAAAAAAAK603S9fd6rp9H3dh9+nnhlMyC7HGMsIt89+AQhCNU38xgQAAAAAAAAAAAAAAAAAAAPUH/pNPQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApNP////FhdRrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACuhz8BAAD//2OqXbs=")
r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000080)='$', 0x1, 0x0, 0x0, 0x0, r2}])

11.769321336s ago: executing program 1 (id=1314):
r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000080)={0x80000000, 0x0, &(0x7f0000000100)=[{{}, {<r1=>0x80000000, <r2=>0x0}}]})
ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={r1, &(0x7f000000a2c0)=[{}, {<r3=>0x80000000, <r4=>0x0}], 0x0})
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000280)={{0x80000000, r2, 0x6, [0x7ff, 0x19a7]}, {r3, r4, 0x3, [0x983, 0x80000000]}, 0x0, [0x0, 0x80000001]})

11.317824596s ago: executing program 1 (id=1321):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000006d00673c2bbd7000fcdbdf2500000000", @ANYBLOB="0110040004e802001800348014003580"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0)

11.275098174s ago: executing program 33 (id=1321):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000006d00673c2bbd7000fcdbdf2500000000", @ANYBLOB="0110040004e802001800348014003580"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0)

2.388853257s ago: executing program 3 (id=1411):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)
sendmsg$802154_dgram(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)

2.325407192s ago: executing program 3 (id=1412):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000007c0)={[{}, {@noblock_validity}, {@acl}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@resgid}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x64a, &(0x7f0000001540)="$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")

2.325035784s ago: executing program 4 (id=1413):
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000240)={0x0, 0x0, 0x0, 'queue1\x00', 0x806})
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e000100"], 0x50}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8000000"], 0x2c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110001000300000000000000000000006400000000000000"], 0x20}}, 0x0)

2.238834828s ago: executing program 3 (id=1414):
add_key$user(0x0, 0x0, &(0x7f0000000080)="269d5dfee993d0b38403e96b97e97a715a61f496e8d05a99f2f7ffb097254c115b53559cdf6bc389", 0x28, 0xfffffffffffffffd)
syz_usb_connect(0x3, 0x48, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000056544820e105080411250102070109023600010000000009040000042ec25d00090502"], 0x0)

1.630111351s ago: executing program 4 (id=1415):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x506, &(0x7f0000002480)="$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")

1.55000094s ago: executing program 4 (id=1416):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12010102000000206b1d010140000102030109027000030104a83f0904000000010100000a2401c5c50a0002010209040100000102000009040101010102000009050109235e0780090725010cfa06000927020000010200000904020101010200000924020103ff0a0809072401100301000905820918021c14020725010c6708000acfd17666274af82fb29d"], &(0x7f00000009c0)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x201, 0x5, 0x0, 0x1, 0x20, 0x6}, 0x0, 0x0})
recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff})
vmsplice(r1, 0x0, 0x0, 0x0)
r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000040)={0xa, @raw_data="5b5cbcce0d62a85e24246ee2114f6073609d9756c71638ff14f32fd4d5a4ba4ca83189c71c83eb6e71068f173786ef1519264cd7c60a92e57dbb8975b2384a6dacec3670589eefc903bd197e3a5e3192d100c8998c84d0e6bd121757c2b605fd2554dd19cfe48de2dc6fa2aaa4b334f62c2db48cee9f3fba61b84b4a096bcf8965cf362347c509e4f655093d0923ec8d9bb3d1d82531c9ecbb2e37888e7ffceafeee71cd063866215507e830219fb60992bf534b801721dc4b073ba75df44f9402219e65e3dafcc0"})
shutdown(r0, 0x1)

1.43722033s ago: executing program 2 (id=1417):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)

1.051267065s ago: executing program 2 (id=1418):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0xffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
syz_mount_image$f2fs(&(0x7f00000105c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0063edcea4", @ANYBLOB="b6a7a29782938426a4c1e016eedf515af3fd5b546aaacf8d3135c386daf856ecccd471f18f3b0c0d8118f2458d7a7797a3a26a1c7303dce38f54e82d58e84a2d90cbc9d4045b09322e0d4829f9a1ed35be0efa8653195ff1650e3c448d671c5d240daa776e54b6c4374d5a1217b928f24a7dcc1d83727e1e2496be90000d0ba16bf0266e2861636b9b86443ca18e70a2c05ef9389ecbff171bb734f3e0855948dfbbc23445ca276bba463e8f60607626b18799cc5aad8e5463878d9aca519ecfdaf99a675112f906be5e7abce02645ef430ef929cc1a2e435fa67b84f2462752b3693914f369a767e1", @ANYRES32=0x0], 0x1, 0x105c7, &(0x7f0000020c40)="$eJzs3EtvG1UbB/DHzdvr25YI9bZBjIRAiVRbcZJWZYNSaFSQSBVxWbACx3Yst7Ynip0L3SHBjo/CBvEBWFSw4HuwQyyQ2CGBPDNBSWmlKnXjpPn9pOn/zJlznjnjKpGOHTmAY2sy+fOPUlyMsxExERHnI7J2qTgyC3lci4jXI+LErqNU9P/bcSoizkXExWHxvGapuHTh0eKj32/dvvTjz6/dnZx46/r4nhoYtzcjoruWt7e6eaatPO8X/bXNdpbd+c0i8wvdB8V5mudWcyWrsFXbGVfLcq6Vj0/XNvrDXO3U6sNstVez/rVefsP+ZmunTjbhfm09O280V7Js99MsWw/zdW0X+bA/yOs0inpfZuVjMNjJvL+53cyfZ+1BlvXeoOjP66aN5vYwN4ssbhf1tNPI1rGy75f50Puw3dvYTjab6/122ktuVKq3KtWb5ep62mgOmvPlWrdxcz6ZanWGw8qDZq270ErTVqdZqafd6WSqVa+Xq9Vk6k5zpV3rJdVqZa4yU74xXbSuJ3fvfZp0GsnUMN9t9zYG7U4/WU3Xk3zGdDJbmXt7Onmjmnz81XKy/NHi4tLyJ5/f+eze7aUP3isG/WdZydTszOxsuTpTnq1OvzTPvzSO57/2fNM57krjXgDA0WP/D4yD/b/9fxzY/vf74m4Hvv89cTie/0D2/2f38/9/Zj+TYIf9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAsfXryR/ezxqT+fn/i/4LRderEXE1Iq5ExOWI+PsJJuLUnpqXIqJUtJ80/uRja/ipFFmF4ZzTxXEuIhaK469XXvSrAAAAAEfeiadd+O6Xr7+JmBg2s3/eOchVMW7FmzZnRlUve8vnf6Oqdikrtj2iapd3So7ElYg4OfnbiKpdHf6Mnv9iRNWeycSeOLMrSnk89XcGAABwdO3dCYxs9wYAAMCh8+24F8DzevwP6p9tfGnX1OKz4NN5FB8Int1zBgAAABxBpXEvAAAAAHjhsv2/7/8DAACAl1v+/X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/sHP3uIkDURzAn2G9y35p0YqPq1CttqTgEDlCypQpktuk4wyRECfIAUiXI0QQYSZSjFBSeCwr6PeTzIwt+OsZqudBAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJsey+X8bn1z2zRnu2smz90AAAAAp2zK5byaDA/nP9P13+nS34iYRsQkIsYRcap378fXWuYoIoo0P/X+8qiG+4gqYf+Zb+n4ERH/0/H8p+1vAQAAAM7XejVbRPT30+rlXxw18pyz9FsPcuVVj3y+5EobVWFXmdLGr5FZTCKiHD5lSptGRO/XRaa09Pzsff3aMHgzFIeh91FCcd2oRAAAoAP1TmDfvT10Wg8AAABtuey6ALpRrdem/+KnteC0cpgWBL/XzgAAAIBPqOi6AAAAAKB1Vf9v/z8AAAA4b4f9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjTplzO16vZomnOdtdMnrsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADghf15R4EQCIMw2Lu+7zR4/2NJg6amJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG9+95f/E1PjTDL32lh6HknWTo2tU2Pv3Dj6w/j6NQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf7cnUAIBEEY7Dv/c1rMPyxp0BhEqIKFjxnmYQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvuh3v/yfmBpnkrnTxtLxSLJ21di6auw9aBw9GG//BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALnbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrA/9ygKA2Ech9/M7rJJvUfYPuzHGWysRI/gBwiBnMEDeCEbK9vgRfQKCjqprSSFz9P8/sUMzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAr+ny8MRbRBSR+pkijTdfp/eI+Ii07brR520Wu/OxLe9ztj9Myv7+9LuKiCqKJ/8EAGAYdd88Vutm+ZP7m/uX+59bz9tmMeSjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4snP/rE2EcRzAnyRNtE52EMFJqYggGpNoyZBFodC3EdsYiqlKmsEWl+4uvgTBQcQtL8HB3UUcBP/MBRVcXJQkl/qUFrkOuYT284Hn8stx3D1PhsD3fpcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCR7O6Ea+M6F0K4MPevHvj44+nqYa9v+4vnxmN54dX3+JyDUxRDCPfXO62bGa5lll1Oedzm1vaDZqfT6ioUCsVeMeEvKAAAjpViMga5/kuxvzLYl2uE8OfF/vx/JapDyvz/7Nvru/G14vxfyWyFsy1t/i/3Nh6XN7e2r69vNNutduvhUu1WpVq9XVsqD2+nlN1UAQAA4D9KyYjzf75xsP9/JqpDyvx/79PnN/G1CvL/AUfv/094QgAAACfYwsVfP3OH7M+VSuFJs9frVkbbvffV0XYKU00vWdCpZMT5v9CY8twAAACATOzu5Pb1/9eiOqTs/5+9874dn7MQQphP+v83Vh911rJbzsyapd//T3ipAAAATNF8MuL+f3H4/H/+0viYfAjh6uKoTv4GMFX+//Du5fn4WvHz/7XsljiT8vXR55Em/w+PrYcwV89gYgAAABxLp5MxyP9fi/2V7u/nyyXP/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwlx07RmkgiAIAutnNKhZiQGysBLUV7awCFoJ4DVEQbOzTeABPkyPYp1VLa0nhDeTP7oik0ICyCfoezP7PzsD8nWr/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN+anhQ7Oa/iMWjysn339Da6iPg8E8PDeHcrRuS9bsteQvWXs/04o+POigEAAOCfqnJ/XxTFSz0+i1gOU/+/H/laOzdab2Lu52f7/hxz7x9j+/X28WOjQbNPdMNX1zeXh5194XLbm3Pdxhxr0l1Cc0NTpaua8vxuc1qnU+/dTyanKyld/VnFAMBvOMixTfL/UcSjRRYGwJ/Vb0fxqf+vhoutCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAL7wEAAP///r1cWg==")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3004009, 0x0, 0x1, 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = open(&(0x7f0000000140)='.\x00', 0x88000, 0x114)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

1.046779268s ago: executing program 3 (id=1419):
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
truncate(&(0x7f0000000140)='./file0\x00', 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

602.787665ms ago: executing program 2 (id=1420):
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0}, 0x20)

169.74441ms ago: executing program 2 (id=1421):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

169.552798ms ago: executing program 3 (id=1422):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1, &(0x7f0000000180)=ANY=[], 0x3, 0xa53, &(0x7f0000000bc0)="$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")
openat(0xffffffffffffff9c, 0x0, 0x0, 0x172)
syz_mount_image$fuse(0x0, 0x0, 0x200040, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})

169.436073ms ago: executing program 2 (id=1423):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001d00), 0x2e03, 0x0)
ioctl$PTP_CLOCK_GETCAPS(r0, 0x43403d0e, &(0x7f0000001d40))

82.978685ms ago: executing program 2 (id=1424):
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_DO_IT(r0, 0xab03)
landlock_restrict_self(0xffffffffffffffff, 0xc)

63.693992ms ago: executing program 4 (id=1425):
pidfd_send_signal(0xffffffffffffffff, 0xc, 0x0, 0x0)

61.462358ms ago: executing program 4 (id=1426):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4e23, @multicast1}}, 0xa, 0x5}, 0x90)

164.81µs ago: executing program 3 (id=1427):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r0, 0x20000000c, 0x0, 0x0, 0x16, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r1, 0x7211, 0x3a1a, 0x1, 0x0, 0x0)

0s ago: executing program 4 (id=1428):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
sendto$inet6(r0, &(0x7f0000000500)="600000040014334000000000000000000000000000000001000000000000000000000200a52af834", 0x28, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)

0s ago: executing program 4 (id=1430):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006)

kernel console output (not intermixed with test programs):

8853][ T5594] R13: 00007fb19ac34474 R14: 0000000000012017 R15: 00007ffcd2b99e70
[   73.998891][ T5594]  </TASK>
[   73.998897][ T5594] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   74.058913][ T6286] set_capacity_and_notify: 2 callbacks suppressed
[   74.058923][ T6286] loop2: detected capacity change from 0 to 131072
[   74.105064][ T6286] xfs: Deprecated parameter 'ikeep'
[   74.106687][ T6286] XFS: ikeep mount option is deprecated.
[   74.147743][ T6286] XFS (loop2): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[   74.195353][ T6286] XFS (loop2): Starting recovery (logdev: internal)
[   74.215728][ T6286] XFS (loop2): Ending recovery (logdev: internal)
[   74.220527][ T6286] XFS (loop2): Quotacheck needed: Please wait.
[   74.246326][ T6286] XFS (loop2): Quotacheck: Done.
[   74.269954][ T6301] trusted_key: encrypted_key: keyword 'neХQ6fT㼬6"<#w' not recognized
[   74.349089][ T5603] XFS (loop2): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[   74.921300][ T5029] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   75.071258][ T5029] usb 3-1: Using ep0 maxpacket: 8
[   75.074554][ T5029] usb 3-1: config 252 has an invalid interface number: 255 but max is 0
[   75.077814][ T5029] usb 3-1: config 252 has no interface number 0
[   75.080641][ T5029] usb 3-1: too many endpoints for config 252 interface 255 altsetting 255: 255, using maximum allowed: 30
[   75.084285][ T5029] usb 3-1: config 252 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[   75.088937][ T5029] usb 3-1: config 252 interface 255 has no altsetting 0
[   75.091420][ T5029] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[   75.094680][ T5029] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.107579][ T5029] pvrusb2: Hardware description: Terratec Grabster AV400
[   75.110034][ T5029] pvrusb2: **********
[   75.111430][ T5029] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[   75.114548][ T5029] pvrusb2: Important functionality might not be entirely working.
[   75.117047][ T5029] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[   75.120603][ T5029] pvrusb2: **********
[   75.122435][ T5029] usb 3-1: selecting invalid altsetting 0
[   75.124600][ T2413] pvrusb2: Invalid write control endpoint
[   75.163330][ T2413] pvrusb2: Invalid write control endpoint
[   75.165776][ T2413] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[   75.169489][ T2413] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[   75.173370][ T2413] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[   75.177166][ T2413] pvrusb2: Device being rendered inoperable
[   75.180334][ T2413] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[   75.185191][ T2413] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[   75.197007][ T2413] pvrusb2: Attached sub-driver cx25840
[   75.199236][ T2413] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[   75.203291][ T2413] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[   75.306465][ T5029] usb 3-1: USB disconnect, device number 7
[   75.957022][ T6324] loop2: detected capacity change from 0 to 512
[   75.988022][ T6324] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.240: casefold flag without casefold feature
[   75.996284][ T6324] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   75.997265][ T6324] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.240: couldn't read orphan inode 15 (err -117)
[   76.005319][    C1] EXT4-fs (loop2): error count since last fsck: 1
[   76.007865][    C1] EXT4-fs (loop2): initial error at time 1787630943: ext4_orphan_get:1399: inode 15
[   76.011359][    C1] EXT4-fs (loop2): last error at time 1787630943: ext4_orphan_get:1399: inode 15
[   76.015672][ T6324] loop2: lost filesystem error report for type 5 error -117
[   76.016744][ T6324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[   76.024270][ T6324] ext4 filesystem being mounted at /63/qY3aK supports timestamps until 2038-01-19 (0x7fffffff)
[   76.062662][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[   76.681330][ T2372] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   76.831317][ T2372] usb 3-1: Using ep0 maxpacket: 8
[   76.836281][ T2372] usb 3-1: unable to get BOS descriptor or descriptor too short
[   76.840739][ T2372] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   76.845328][ T2372] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   76.852010][ T2372] usb 3-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40
[   76.855871][ T2372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.859206][ T2372] usb 3-1: Product: syz
[   76.860997][ T2372] usb 3-1: Manufacturer: syz
[   76.866113][ T2372] usb 3-1: SerialNumber: syz
[   77.093709][ T2372] usb 3-1: 0:1 : does not exist
[   77.117446][ T2372] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71
[   77.123473][ T2372] usb 3-1: USB disconnect, device number 8
[   77.138877][ T5718] udevd[5718]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[   77.392678][ T6352] loop1: detected capacity change from 0 to 512
[   77.416179][ T6352] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.560680][ T5594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.083748][ T6367] netlink: 'syz.1.258': attribute type 2 has an invalid length.
[   78.233044][ T6375] loop1: detected capacity change from 0 to 256
[   78.361096][ T6377] loop1: detected capacity change from 0 to 4096
[   78.378501][ T6377] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[   78.402593][ T6377] ntfs3(loop1): ino=19, mi_enum_attr
[   78.404681][ T6377] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   78.658335][ T6389] loop1: detected capacity change from 0 to 32768
[   78.665652][ T6389] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.269 (6389)
[   78.675806][ T6389] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   78.679121][ T6389] BTRFS info (device loop1): using crc32c checksum algorithm
[   78.698567][ T6389] BTRFS info (device loop1): allowing degraded mounts
[   78.700788][ T6389] BTRFS info (device loop1): enabling ssd optimizations
[   78.704784][ T6389] BTRFS info (device loop1): turning on flush-on-commit
[   78.707457][ T6389] BTRFS info (device loop1): enabling free space tree
[   78.709619][ T6389] BTRFS info (device loop1): force zlib compression, level 3
[   78.731279][ T5029] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   78.809187][ T5594] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   78.884625][ T5029] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[   78.893341][ T5029] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[   78.914295][ T5029] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[   78.920293][ T5029] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.924641][ T5029] usb 3-1: Product: syz
[   78.926098][ T5029] usb 3-1: Manufacturer: syz
[   78.927603][ T5029] usb 3-1: SerialNumber: syz
[   79.115623][ T6407] loop1: detected capacity change from 0 to 32768
[   79.142948][ T6407] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   79.165464][ T5029] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   79.176029][ T6407] XFS (loop1): Ending clean mount
[   79.246579][ T6417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   79.247938][ T5029] usb 3-1: USB disconnect, device number 9
[   79.256983][ T6417] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   79.266532][ T5594] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   79.313762][ T6079] udevd[6079]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[   79.728361][ T6428] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   79.878456][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.281'.
[   79.908341][ T6439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   79.912582][ T6439] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.557416][ T6447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.286'.
[   81.238963][ T6467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   81.245034][ T6467] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   81.589634][   T10] cfg80211: failed to load regulatory.db
[   81.999263][   T13] nci: nci_ntf_packet: unknown ntf opcode 0xe23
[   82.755339][ T6475] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   83.089632][ T6497] loop2: detected capacity change from 0 to 32768
[   83.114832][   T34] audit: type=1800 audit(1787630950.539:13): pid=6497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.309" name="file1" dev="loop2" ino=4 res=0 errno=0
[   83.169206][ T6505] Zero length message leads to an empty skb
[   83.171565][   T34] audit: type=1800 audit(1787630950.589:14): pid=6506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.309" name="file1" dev="loop2" ino=4 res=0 errno=0
[   83.249320][ T6510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.255662][ T6510] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.393796][ T6497] ERROR: (device loop2): dbAdjCtl: the maximum free buddy is not the old root
[   83.393796][ T6497] 
[   83.398800][ T6497] ERROR: (device loop2): remounting filesystem as read-only
[   83.819515][ T6512] capability: warning: `syz.0.315' uses deprecated v2 capabilities in a way that may be insecure
[   83.883025][ T6516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.897474][ T6516] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   84.024399][ T6526] loop1: detected capacity change from 0 to 4096
[   84.060585][ T6526] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[   84.268958][ T6534] loop1: detected capacity change from 0 to 256
[   84.394078][ T6536] loop1: detected capacity change from 0 to 2048
[   85.226297][ T6563] wg0: entered allmulticast mode
[   85.228453][ T6563] wg0: left allmulticast mode
[   85.350983][ T6568] loop2: detected capacity change from 0 to 512
[   85.363297][ T6568] EXT4-fs (loop2): Test dummy encryption mode enabled
[   85.373817][ T6568] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.337: inode has both inline data and extents flags
[   85.384033][ T6568] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   85.384310][ T6568] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.337: couldn't read orphan inode 15 (err -117)
[   85.391614][    C1] EXT4-fs (loop2): error count since last fsck: 1
[   85.391626][    C1] EXT4-fs (loop2): initial error at time 1787630952: ext4_orphan_get:1399: inode 15
[   85.391639][    C1] EXT4-fs (loop2): last error at time 1787630952: ext4_orphan_get:1399: inode 15
[   85.400433][ T6568] loop2: lost filesystem error report for type 5 error -117
[   85.403162][ T6568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.434371][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.912125][ T6593] loop2: detected capacity change from 0 to 128
[   85.915200][ T6593] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   86.166664][ T6611] loop1: detected capacity change from 0 to 8192
[   86.177784][ T6611] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   86.341330][   T32] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   86.363329][ T6629] program syz.1.366 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   86.443503][ T6637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.448114][ T6637] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   86.491359][   T32] usb 3-1: Using ep0 maxpacket: 8
[   86.497524][   T32] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[   86.501073][   T32] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   86.507672][   T32] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   86.516574][   T32] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   86.523269][   T32] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   86.528685][   T32] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   86.538810][   T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.755351][   T32] usb 3-1: usb_control_msg returned -32
[   86.757839][   T32] usbtmc 3-1:16.0: can't read capabilities
[   86.849733][ T6643] loop1: detected capacity change from 0 to 40427
[   86.853816][ T6643] F2FS-fs (loop1): invalid crc value
[   86.891159][ T6643] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   86.896978][ T6643] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   86.997069][ T6646] binder_alloc: 6645: binder_alloc_buf, no vma
[   86.999817][ T6646] binder: 6645:6646 ioctl c0306201 200000000640 returned -14
[   87.315416][ T6650] usbtmc 3-1:16.0: INITIATE_ABORT_BULK_IN returned 0
[   87.519139][ T5658] usb 3-1: USB disconnect, device number 10
[   87.824520][ T6673] loop1: detected capacity change from 0 to 1024
[   88.229721][ T6689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.235905][ T6689] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.250360][ T6689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.254223][ T6689] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.263789][ T6689] GUP no longer grows the stack in syz.0.393 (6689): 200000004000-20000000a000 (200000002000)
[   88.268975][ T6689] CPU: 1 UID: 0 PID: 6689 Comm: syz.0.393 Not tainted syzkaller #0 PREEMPT(full) 
[   88.268993][ T6689] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   88.269001][ T6689] Call Trace:
[   88.269007][ T6689]  <TASK>
[   88.269012][ T6689]  dump_stack_lvl+0xe8/0x150
[   88.269036][ T6689]  __get_user_pages+0x23b6/0x2750
[   88.269079][ T6689]  get_user_pages_remote+0x307/0xb10
[   88.269099][ T6689]  ? __pfx_mtree_load+0x10/0x10
[   88.269119][ T6689]  ? __pfx_get_user_pages_remote+0x10/0x10
[   88.269140][ T6689]  ? __access_remote_vm+0x42c/0x6f0
[   88.269157][ T6689]  __access_remote_vm+0x222/0x6f0
[   88.269177][ T6689]  ? __pfx___access_remote_vm+0x10/0x10
[   88.269191][ T6689]  ? proc_pid_cmdline_read+0x41c/0x900
[   88.269209][ T6689]  ? proc_pid_cmdline_read+0x41c/0x900
[   88.269229][ T6689]  proc_pid_cmdline_read+0x46b/0x900
[   88.269245][ T6689]  ? __asan_memset+0x22/0x50
[   88.269262][ T6689]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[   88.269280][ T6689]  ? rw_verify_area+0x24a/0x4c0
[   88.269294][ T6689]  vfs_readv+0x57c/0x850
[   88.269312][ T6689]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[   88.269332][ T6689]  ? __pfx_vfs_readv+0x10/0x10
[   88.269355][ T6689]  ? __fget_files+0x2a/0x420
[   88.269368][ T6689]  ? __fget_files+0x3a2/0x420
[   88.269377][ T6689]  ? __fget_files+0x2a/0x420
[   88.269392][ T6689]  __x64_sys_preadv+0x19c/0x2b0
[   88.269416][ T6689]  ? __pfx___x64_sys_preadv+0x10/0x10
[   88.269437][ T6689]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.269450][ T6689]  do_syscall_64+0x174/0x580
[   88.269463][ T6689]  ? trace_irq_disable+0x3b/0x140
[   88.269479][ T6689]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.269490][ T6689] RIP: 0033:0x7f0019f9e0d9
[   88.269500][ T6689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   88.269511][ T6689] RSP: 002b:00007f001aef9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[   88.269526][ T6689] RAX: ffffffffffffffda RBX: 00007f001a225fa0 RCX: 00007f0019f9e0d9
[   88.269535][ T6689] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000005
[   88.269541][ T6689] RBP: 00007f001a035024 R08: 00000000fffffff9 R09: 0000000000000000
[   88.269548][ T6689] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000
[   88.269554][ T6689] R13: 00007f001a226038 R14: 00007f001a225fa0 R15: 00007ffd6ada9ff8
[   88.269573][ T6689]  </TASK>
[   88.574977][ T6703] loop1: detected capacity change from 0 to 512
[   88.585263][ T6703] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   88.588981][ T6703] EXT4-fs (loop1): invalid journal inode
[   88.590841][ T6703] EXT4-fs (loop1): can't get journal size
[   88.597253][ T6703] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002]
[   88.600143][ T6703] System zones: 1-12, 13-13
[   88.606929][ T6703] EXT4-fs (loop1): 1 truncate cleaned up
[   88.610187][ T6703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.650988][ T5594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.913771][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.403'.
[   89.011412][ T6720] nbd: must specify an index to disconnect
[   89.270586][ T6729] loop1: detected capacity change from 0 to 40427
[   89.277797][ T6729] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[   89.281887][ T6729] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   89.287541][ T6729] F2FS-fs (loop1): invalid crc value
[   89.319759][ T6729] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   89.328315][ T6729] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   89.331081][ T6729] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   89.536905][ T6745] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 2, id = 0
[   89.663132][ T5596] Bluetooth: hci0: ACL packet too small
[   91.884953][   T10] IPVS: starting estimator thread 0...
[   91.971267][ T6793] IPVS: using max 84 ests per chain, 201600 per kthread
[   91.994525][ T5658] kernel write not supported for file /sequencer2 (pid: 5658 comm: kworker/1:4)
[   92.905734][ T6815] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   93.008541][ T6822] loop2: detected capacity change from 0 to 256
[   93.014280][ T6822] exfat: Deprecated parameter 'utf8'
[   93.017243][ T6822] exfat: Deprecated parameter 'utf8'
[   93.026068][ T6822] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   93.463153][ T6836] netlink: 48 bytes leftover after parsing attributes in process `syz.2.453'.
[   93.539591][ T6843] netlink: 16 bytes leftover after parsing attributes in process `syz.2.454'.
[   93.543118][ T6843] netlink: 144 bytes leftover after parsing attributes in process `syz.2.454'.
[   93.545954][ T6843] netlink: 16 bytes leftover after parsing attributes in process `syz.2.454'.
[   93.607393][ T6845] loop2: detected capacity change from 0 to 4096
[   93.619255][ T6845] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[   93.623670][ T6845] UDF-fs: Scanning with blocksize 512 failed
[   93.629333][ T6845] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   93.972647][ T5658] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   93.980741][ T6852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.993598][ T6852] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.123179][ T5658] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   94.127242][ T5658] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[   94.130546][ T5658] usb 3-1: config 1 has no interface number 0
[   94.133468][ T5658] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.137763][ T5658] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[   94.143346][ T5658] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   94.146745][ T5658] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.149755][ T5658] usb 3-1: Product: syz
[   94.151652][ T5658] usb 3-1: Manufacturer: syz
[   94.153721][ T5658] usb 3-1: SerialNumber: syz
[   94.528292][ T6854] netlink: 32 bytes leftover after parsing attributes in process `syz.0.459'.
[   94.531959][ T6854] netlink: 32 bytes leftover after parsing attributes in process `syz.0.459'.
[   94.766922][ T5658] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS
[   94.769872][ T5658] cdc_ncm 3-1:1.1: bind() failure
[   94.784560][ T5658] usb 3-1: USB disconnect, device number 11
[   95.966122][ T6907] loop2: detected capacity change from 0 to 4096
[   96.058369][ T6913] loop2: detected capacity change from 0 to 512
[   96.079024][ T6913] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   96.086870][ T6915] mmap: syz.0.484 (6915) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   96.093938][ T6913] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.483: bg 0: block 4: invalid block bitmap
[   96.101576][ T6913] loop2: lost filesystem error report for type 5 error -117
[   96.105899][ T6913] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem
[   96.112208][    C0] EXT4-fs (loop2): error count since last fsck: 1
[   96.112222][    C0] EXT4-fs (loop2): initial error at time 2000000010: ext4_validate_block_bitmap:432
[   96.112238][    C0] EXT4-fs (loop2): last error at time 2000000010: ext4_validate_block_bitmap:432
[   96.124800][ T6913] loop2: lost filesystem error report for type 5 error -117
[   96.125199][ T6913] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.483: invalid indirect mapped block 1 (level 1)
[   96.133932][ T6913] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   96.136103][ T6913] EXT4-fs (loop2): 1 truncate cleaned up
[   96.147543][ T6913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.183627][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.265173][   T34] audit: type=1326 audit(2000000010.290:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.0.487" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0019f9e0d9 code=0x0
[   96.370933][ T6924] loop2: detected capacity change from 0 to 32768
[   96.374688][ T6924] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: i_blkno is 33554497
[   96.380407][ T6924] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   96.383832][ T6924] OCFS2: File system is now read-only.
[   96.385611][ T6924] (syz.2.488,6924,0):ocfs2_read_locked_inode:633 ERROR: status = -30
[   96.388459][ T6924] (syz.2.488,6924,0):ocfs2_init_global_system_inodes:444 ERROR: status = -30
[   96.391687][ T6924] (syz.2.488,6924,0):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[   96.394831][ T6924] (syz.2.488,6924,0):ocfs2_initialize_super:2195 ERROR: status = -30
[   96.398007][ T6924] (syz.2.488,6924,0):ocfs2_fill_super:1177 ERROR: status = -30
[   96.771306][   T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[   96.931273][   T10] usb 3-1: Using ep0 maxpacket: 8
[   96.936174][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[   96.940579][   T10] usb 3-1: config 6 has an invalid interface number: 73 but max is 0
[   96.944802][   T10] usb 3-1: config 6 has an invalid interface descriptor of length 2, skipping
[   96.948490][   T10] usb 3-1: config 6 has an invalid interface association descriptor of length 2, skipping
[   96.953332][   T10] usb 3-1: config 6 has no interface number 0
[   96.956005][   T10] usb 3-1: config 6 interface 73 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   96.961160][   T10] usb 3-1: config 6 interface 73 has no altsetting 0
[   96.967218][   T10] usb 3-1: New USB device found, idVendor=2001, idProduct=200c, bcdDevice=a6.b5
[   96.970927][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.974885][   T10] usb 3-1: Product: syz
[   96.976733][   T10] usb 3-1: Manufacturer: syz
[   96.978702][   T10] usb 3-1: SerialNumber: syz
[   97.192767][   T10] pegasus 3-1:6.73: Missing or invalid endpoints
[   97.203136][ T6942] random: crng reseeded on system resumption
[   97.213299][ T6942] Restarting kernel threads ...
[   97.215859][ T6942] Done restarting kernel threads.
[   97.229819][   T10] usb 3-1: USB disconnect, device number 12
[   98.039070][ T6973] io-wq is not configured for unbound workers
[   98.082252][ T5497] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[   98.241985][ T5497] usb 3-1: Using ep0 maxpacket: 32
[   98.246680][ T5497] usb 3-1: unable to get BOS descriptor or descriptor too short
[   98.250995][ T5497] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   98.255419][ T5497] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   98.264808][ T5497] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[   98.273680][ T5497] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.280323][ T5497] usb 3-1: Product: syz
[   98.285904][ T5497] usb 3-1: Manufacturer: syz
[   98.290049][ T5497] usb 3-1: SerialNumber: syz
[   98.328522][ T6980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.513'.
[   98.332806][ T6980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.513'.
[   98.536709][ T5497] usb 3-1: unit 0 not found!
[   98.555028][ T6991] bridge_slave_0: left allmulticast mode
[   98.559615][ T6991] bridge_slave_0: left promiscuous mode
[   98.563938][ T6991] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.583405][ T5497] usb 3-1: USB disconnect, device number 13
[   98.663825][ T6991] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   98.729137][ T5718] udevd[5718]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[   99.078665][ T7003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.620799][ T7024] loop1: detected capacity change from 0 to 16
[   99.630866][ T7024] erofs (device loop1): mounted with root inode @ nid 36.
[   99.661950][ T7024] syz.1.533: attempt to access beyond end of device
[   99.661950][ T7024] loop1: rw=8912896, sector=1342177272, nr_sectors = 32 limit=16
[   99.662930][ T7026] netlink: 'syz.0.534': attribute type 2 has an invalid length.
[   99.676021][ T7024] syz.1.533: attempt to access beyond end of device
[   99.676021][ T7024] loop1: rw=8388608, sector=1342177272, nr_sectors = 8 limit=16
[   99.689501][   T34] audit: type=1800 audit(2000000013.710:16): pid=7024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.533" name="file1" dev="loop1" ino=86 res=0 errno=0
[   99.742429][ T7032] : renamed from vlan0 (while UP)
[   99.944527][ T7042] loop2: detected capacity change from 0 to 512
[   99.950838][ T7042] EXT4-fs: Ignoring removed i_version option
[   99.962163][ T7042] EXT4-fs: Ignoring removed bh option
[   99.977373][ T7042] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.539: inode #13: comm syz.2.539: iget: illegal inode #
[   99.984624][ T7042] loop2: lost filesystem error report for type 5 error -117
[   99.986140][ T7042] EXT4-fs (loop2): Remounting filesystem read-only
[   99.992619][ T7042] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.027658][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.132456][ T7048] loop2: detected capacity change from 0 to 256
[  100.148398][ T7048] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[  100.764504][ T7068] loop2: detected capacity change from 0 to 32768
[  100.771788][ T7073] loop1: detected capacity change from 0 to 256
[  101.000990][ T7068] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  101.072017][ T5603] ocfs2: Unmounting device (7,2) on (node local)
[  101.215797][ T7088] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  101.219124][ T7088] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  101.261053][ T7090] loop2: detected capacity change from 0 to 4096
[  101.267113][ T7090] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  101.270304][ T7090] ntfs3(loop2): ino=3, mi_enum_attr
[  101.410555][ T7080] loop1: detected capacity change from 0 to 131072
[  101.414919][ T7080] F2FS-fs (loop1): invalid crc value
[  101.424149][ T7090] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  101.438861][ T7090] ntfs3(loop2): Failed to initialize $Secure::$SDH (-22).
[  101.443743][ T7090] ntfs3(loop2): Failed to initialize $Secure (-22).
[  101.445753][ T7080] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  101.451771][ T7080] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  101.501387][   T34] audit: type=1800 audit(2000000015.520:17): pid=7080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.555" name="file1" dev="loop1" ino=7 res=0 errno=0
[  101.669732][ T7111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.677517][ T7111] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.794566][ T7119] loop2: detected capacity change from 0 to 1024
[  101.824076][ T7119] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5
[  101.828504][ T7119] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  101.832835][ T7119] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.573: Failed to acquire dquot type 0
[  101.837360][ T7119] loop2: lost filesystem error report for type 5 error -117
[  101.838581][ T7119] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, 
[  101.841810][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  101.841824][    C1] EXT4-fs (loop2): initial error at time 2000000015: ext4_acquire_dquot:7041
[  101.841840][    C1] EXT4-fs (loop2): last error at time 2000000015: ext4_acquire_dquot:7041
[  101.857984][ T7119] inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  101.866505][ T7119] EXT4-fs (loop2): 1 truncate cleaned up
[  101.870188][ T7119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.893490][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.010845][ T7133] usb usb7: usbfs: process 7133 (syz.1.578) did not claim interface 0 before use
[  102.107609][ T7141] netlink: 104 bytes leftover after parsing attributes in process `syz.2.581'.
[  102.250137][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.587'.
[  102.333309][ T7164] netlink: 'syz.1.589': attribute type 6 has an invalid length.
[  102.806456][ T7176] loop1: detected capacity change from 0 to 32768
[  102.813577][ T7176] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  102.854233][ T7176] syz.1.593 (7176) used greatest stack depth: 19688 bytes left
[  102.871962][ T5594] ocfs2: Unmounting device (7,1) on (node local)
[  102.953978][ T7180] loop1: detected capacity change from 0 to 128
[  102.964152][ T7180] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  102.972461][ T7180] ext4 filesystem being mounted at /200/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  103.006228][ T5594] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  103.441716][   T10] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  103.592906][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  103.597554][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  103.602538][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  103.607032][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  103.614970][   T10] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  103.618857][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.626835][   T10] usb 3-1: Product: syz
[  103.630079][   T10] usb 3-1: Manufacturer: syz
[  103.635249][   T10] usb 3-1: SerialNumber: syz
[  103.641328][   T10] usb 3-1: config 0 descriptor??
[  103.863393][   T10] adutux 3-1:0.0: Could not retrieve serial number
[  103.866256][   T10] adutux 3-1:0.0: probe with driver adutux failed with error -5
[  104.069708][   T10] usb 3-1: USB disconnect, device number 14
[  105.697041][ T7274] loop2: detected capacity change from 0 to 256
[  106.062271][   T32] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  106.227441][   T32] usb 3-1: unable to get BOS descriptor or descriptor too short
[  106.235813][   T32] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  106.239787][   T32] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  106.247268][   T32] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  106.250968][   T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.256841][   T32] usb 3-1: Product: syz
[  106.258635][   T32] usb 3-1: Manufacturer: syz
[  106.260503][   T32] usb 3-1: SerialNumber: syz
[  106.653317][ T7303] gadgetfs: bound to dummy_udc driver
[  106.664744][ T7303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.668395][ T7303] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.682891][   T10] usb 3-1: USB disconnect, device number 15
[  107.057242][ T7311] syzkaller1: entered promiscuous mode
[  107.059333][ T7311] syzkaller1: entered allmulticast mode
[  107.242486][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.655'.
[  109.769748][ T7354] binder: BINDER_SET_CONTEXT_MGR already set
[  109.773985][ T7354] binder: 7353:7354 ioctl 4018620d 0 returned -16
[  110.108077][ T7359] EXT4-fs (nbd1): unable to read superblock
[  110.346794][ T7364] syz_tun: entered allmulticast mode
[  110.351149][ T7364] lo: entered allmulticast mode
[  110.392094][ T7363] syz_tun: left allmulticast mode
[  110.394539][ T7363] lo: left allmulticast mode
[  110.516893][ T7372] loop1: detected capacity change from 0 to 2048
[  111.001379][   T32] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  111.058868][ T7406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.066211][ T7406] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.069174][ T7400] loop1: detected capacity change from 0 to 32768
[  111.094967][ T7400] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  111.118758][   T34] audit: type=1800 audit(2000000025.140:18): pid=7400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.692" name="file1" dev="loop1" ino=17058 res=0 errno=0
[  111.156488][   T32] usb 3-1: Using ep0 maxpacket: 8
[  111.159326][ T5594] ocfs2: Unmounting device (7,1) on (node local)
[  111.160536][   T32] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  111.164978][   T32] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  111.168712][   T32] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  111.183289][   T32] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  111.187704][   T32] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  111.198527][   T32] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  111.202503][   T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.415705][   T32] usb 3-1: usb_control_msg returned -32
[  111.419195][   T32] usbtmc 3-1:16.0: can't read capabilities
[  111.513456][ T7412] loop1: detected capacity change from 0 to 32768
[  111.520931][ T7412] 
[  111.520931][ T7412]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  111.520931][ T7412] 
[  111.536988][ T7412] JFS: metapage_get_blocks failed
[  111.539925][ T7412] ERROR: (device loop1): release_metapage: metapage_write_one() failed
[  111.539925][ T7412] 
[  111.545864][ T7412] ERROR: (device loop1): remounting filesystem as read-only
[  111.551914][ T7412] ERROR: (device loop1): diWrite: ixpxd invalid
[  111.551914][ T7412] 
[  111.555275][ T7412] ERROR: (device loop1): txCommit: 
[  111.555275][ T7412] 
[  111.782723][ T7416] usbtmc 3-1:16.0: control status returned 0
[  111.987530][ T5029] usb 3-1: USB disconnect, device number 16
[  112.214516][ T7418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'.
[  112.335328][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.702'.
[  112.441079][ T7428] loop1: detected capacity change from 0 to 512
[  112.493734][ T7428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.503806][ T7428] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  112.537218][   T34] audit: type=1800 audit(2000000026.560:19): pid=7428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.704" name="file1" dev="loop1" ino=15 res=0 errno=0
[  112.543872][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.706'.
[  112.548272][ T7435] netlink: 44 bytes leftover after parsing attributes in process `syz.2.706'.
[  112.607822][ T5594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.678504][ T7447] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0)
[  113.112370][ T7457] loop1: detected capacity change from 0 to 32768
[  113.127211][ T7457] ERROR: (device loop1): diNewExt: no free extents
[  113.127211][ T7457] 
[  113.132587][ T7457] ERROR: (device loop1): remounting filesystem as read-only
[  113.135168][ T7457] ialloc: diAlloc returned -5!
[  113.490594][ T7467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.719'.
[  113.513834][ T7467] netlink: 144 bytes leftover after parsing attributes in process `syz.1.719'.
[  113.521707][ T7467] netlink: 64 bytes leftover after parsing attributes in process `syz.1.719'.
[  113.554707][ T7471] loop1: detected capacity change from 0 to 512
[  113.558481][ T7471] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  113.567719][ T7471] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.721: invalid indirect mapped block 4294967295 (level 0)
[  113.576345][ T7471] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  113.581894][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  113.587469][    C1] EXT4-fs (loop1): initial error at time 2000000027: ext4_free_branches:1023: inode 16
[  113.589974][ T7469] bond1: Unable to set peer notification delay as MII monitoring is disabled
[  113.591970][    C1] EXT4-fs (loop1): last error at time 2000000027: ext4_free_branches:1023: inode 16
[  113.599863][ T7471] EXT4-fs (loop1): Remounting filesystem read-only
[  113.603558][ T7471] EXT4-fs (loop1): 1 orphan inode deleted
[  113.605800][ T7471] EXT4-fs (loop1): 1 truncate cleaned up
[  113.607519][ T7469] bond1 (unregistering): Released all slaves
[  113.608913][ T7471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.643331][ T5594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.845042][ T7483] loop2: detected capacity change from 0 to 32768
[  113.852966][ T7483] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.726 (7483)
[  113.869445][ T7483] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  113.879444][ T7483] BTRFS info (device loop2): using sha256 checksum algorithm
[  113.978439][ T5658] logitech-hidpp-device 0005:046D:B012.0003: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0
[  113.998057][ T7483] BTRFS info (device loop2): enabling ssd optimizations
[  114.004822][ T7483] BTRFS info (device loop2): turning on async discard
[  114.011467][ T7483] BTRFS info (device loop2): enabling free space tree
[  114.898672][ T5603] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  115.997613][ T7528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.002807][ T7528] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.063565][ T7532] netlink: 20 bytes leftover after parsing attributes in process `syz.2.742'.
[  116.209014][ T7540] Bluetooth: (null): Invalid header checksum
[  116.641431][ T5658] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  116.679511][ T7544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.684470][ T7544] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.797527][ T5658] usb 3-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00
[  116.800675][ T5658] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.859529][ T5658] usb-storage 3-1:32.0: USB Mass Storage device detected
[  116.885457][ T7525] netlink: 32 bytes leftover after parsing attributes in process `syz.1.739'.
[  116.906169][ T5658] usb-storage 3-1:32.0: Quirks match for vid 057b pid 0000: 1
[  117.054055][ T5658] usb 3-1: USB disconnect, device number 17
[  117.359955][ T7550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.372281][ T7550] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.713928][ T7558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.755'.
[  117.717229][ T7558] netlink: 20 bytes leftover after parsing attributes in process `syz.2.755'.
[  118.029508][ T5598] bridge0: port 3(syz_tun) entered disabled state
[  118.048734][ T5598] syz_tun (unregistering): left allmulticast mode
[  118.050812][ T5598] syz_tun (unregistering): left promiscuous mode
[  118.053909][ T5598] bridge0: port 3(syz_tun) entered disabled state
[  118.081864][ T5497] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  118.235554][ T5497] usb 3-1: not running at top speed; connect to a high speed hub
[  118.240628][ T5497] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  118.246488][ T5497] usb 3-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40
[  118.249398][ T5497] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.252220][ T5497] usb 3-1: Product: syz
[  118.253608][ T5497] usb 3-1: Manufacturer: syz
[  118.255072][ T5497] usb 3-1: SerialNumber: syz
[  118.264463][ T5497] oti6858 3-1:1.0: oti6858 converter detected
[  118.275381][ T5497] usb 3-1: oti6858 converter now attached to ttyUSB0
[  118.326100][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  118.334613][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  118.338064][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  118.342293][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  118.345225][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  118.697244][ T2372] usb 3-1: USB disconnect, device number 18
[  118.717705][ T2372] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0
[  118.725152][ T2372] oti6858 3-1:1.0: device disconnected
[  118.739648][ T7579] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.745081][ T7579] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.747527][ T7579] bridge_slave_0: entered allmulticast mode
[  118.750501][ T7579] bridge_slave_0: entered promiscuous mode
[  118.754509][ T7579] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.756811][ T7579] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.759238][ T7579] bridge_slave_1: entered allmulticast mode
[  118.763556][ T7579] bridge_slave_1: entered promiscuous mode
[  118.784046][ T7579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  118.789393][ T7579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  118.808812][ T7579] team0: Port device team_slave_0 added
[  118.812351][ T7579] team0: Port device team_slave_1 added
[  118.828481][ T7579] batman_adv: batadv0: Adding interface: batadv_slave_0
[  118.831013][ T7579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  118.839074][ T7579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  118.843759][ T7579] batman_adv: batadv0: Adding interface: batadv_slave_1
[  118.845815][ T7579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  118.853908][ T7579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  118.882122][ T7579] hsr_slave_0: entered promiscuous mode
[  118.884943][ T7579] hsr_slave_1: entered promiscuous mode
[  118.887835][ T7579] debugfs: 'hsr0' already exists in 'hsr'
[  118.890120][ T7579] Cannot create hsr debugfs directory
[  119.041840][ T7579] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  119.048659][ T7579] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  119.054207][ T7579] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  119.059461][ T7579] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  119.066248][ T7579] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  119.076889][ T7579] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  119.080531][ T7579] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  119.086500][ T7579] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  119.136890][ T7579] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.149019][ T7579] 8021q: adding VLAN 0 to HW filter on device team0
[  119.157824][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.160131][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  119.163547][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.165796][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  119.445467][ T7579] 8021q: adding VLAN 0 to HW filter on device batadv0
[  119.508195][ T7579] veth0_vlan: entered promiscuous mode
[  119.517525][ T7579] veth1_vlan: entered promiscuous mode
[  119.556511][ T7579] veth0_macvtap: entered promiscuous mode
[  119.564880][ T7579] veth1_macvtap: entered promiscuous mode
[  119.587251][ T7579] batman_adv: batadv0: Interface activated: batadv_slave_0
[  119.605869][ T7579] batman_adv: batadv0: Interface activated: batadv_slave_1
[  119.620603][ T5667] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.631275][ T5667] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.635042][ T5667] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.645438][ T5667] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.714152][ T7625] kAFS: unable to lookup cell 'էKyy
[  119.714152][ T7625] 
[  119.714152][ T7625] =6%*;eܲ5;Z*d{iElZSjUF/k!btF\_vfVnDPPB1%A)X\YT"8ώdJ_.5d#ۜhGp6"5ͺ*,ImI-(WA?WZ)n[qGjnڇ%(J-%ؘccʵ{|6ZA5k@a+oST;]5!G3{K,'
[  119.767965][ T7627] loop2: detected capacity change from 0 to 512
[  119.799999][ T7627] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.804383][ T7627] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.816076][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.820767][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.849827][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.853696][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.857235][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.003553][ T7639] loop2: detected capacity change from 0 to 8192
[  120.381792][ T5596] Bluetooth: hci1: command tx timeout
[  120.807353][ T7656] loop2: detected capacity change from 0 to 2048
[  120.838024][ T7656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.886917][   T34] audit: type=1800 audit(2000000034.910:20): pid=7656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.786" name="bus" dev="loop2" ino=18 res=0 errno=0
[  120.933773][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.380391][ T5658] IPVS: starting estimator thread 0...
[  121.531328][ T7677] IPVS: using max 84 ests per chain, 201600 per kthread
[  121.782404][ T5497] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  121.964693][ T5497] usb 4-1: unable to get BOS descriptor or descriptor too short
[  121.970451][ T5497] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=5a.9d
[  121.976223][ T5497] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.993817][ T5497] usb 4-1: Product: syz
[  121.995315][ T5497] usb 4-1: Manufacturer: syz
[  121.999456][ T5497] usb 4-1: SerialNumber: syz
[  122.003188][ T5497] usb 4-1: config 0 descriptor??
[  122.214501][ T5497] gspca_main: sn9c2028-2.14.0 probing 0c45:800a
[  122.220630][ T5497] gspca_sn9c2028: read1 error -71
[  122.225164][ T5497] gspca_sn9c2028: read1 error -71
[  122.227405][ T5497] gspca_sn9c2028: read1 error -71
[  122.229414][ T5497] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71
[  122.235913][ T5497] usb 4-1: USB disconnect, device number 2
[  122.461886][ T5596] Bluetooth: hci1: command tx timeout
[  122.768993][ T7720] loop2: detected capacity change from 0 to 512
[  122.788684][ T7720] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  122.820138][ T7720] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.810: corrupted in-inode xattr: e_value size too large
[  122.829652][ T7720] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  122.831056][ T7720] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.810: couldn't read orphan inode 15 (err -117)
[  122.834405][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  122.834415][    C0] EXT4-fs (loop2): initial error at time 2000000036: ext4_iget_extra_inode:5180: inode 15
[  122.834429][    C0] EXT4-fs (loop2): last error at time 2000000036: ext4_iget_extra_inode:5180: inode 15
[  122.848587][ T7720] loop2: lost filesystem error report for type 5 error -117
[  122.849608][ T7720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.897182][ T7726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.813'.
[  122.904022][ T7726] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.952985][ T7726] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.765244][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.080102][ T7746] program syz.2.817 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  124.541776][ T5596] Bluetooth: hci1: command tx timeout
[  124.798981][ T7771] loop1: detected capacity change from 0 to 32768
[  124.806646][ T7771] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.822 (7771)
[  124.859781][ T7771] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  124.866217][ T7771] BTRFS info (device loop1): using blake2b checksum algorithm
[  124.900055][ T7771] BTRFS info (device loop1): enabling ssd optimizations
[  124.903143][ T7771] BTRFS info (device loop1): enabling free space tree
[  124.950213][ T5594] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  125.072720][ T5658] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  125.221438][ T5658] usb 4-1: Using ep0 maxpacket: 8
[  125.239992][ T5658] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  125.244263][ T5658] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.247558][ T5658] usb 4-1: Product: syz
[  125.252079][ T5658] usb 4-1: Manufacturer: syz
[  125.256915][ T5658] usb 4-1: SerialNumber: syz
[  125.280393][ T5658] usb 4-1: config 0 descriptor??
[  125.297012][ T5658] gspca_main: se401-2.14.0 probing 047d:5003
[  126.301037][ T7817] loop1: detected capacity change from 0 to 131072
[  126.330135][ T7817] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[  126.333423][ T7817] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  126.347106][ T7817] F2FS-fs (loop1): invalid crc value
[  126.365855][ T5658] gspca_se401: write req failed req 0x57 val 0x00 error -71
[  126.371661][ T5658] se401 4-1:0.0: probe with driver se401 failed with error -71
[  126.377332][ T5658] usb 4-1: USB disconnect, device number 3
[  126.437567][ T7817] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  126.453711][ T7817] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  126.456663][ T7817] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  126.621885][ T5596] Bluetooth: hci1: command tx timeout
[  127.347321][ T7837] netlink: 'syz.1.836': attribute type 6 has an invalid length.
[  127.362920][ T7833] netlink: 'syz.1.836': attribute type 6 has an invalid length.
[  127.385040][ T7839] syz.3.843 uses obsolete (PF_INET,SOCK_PACKET)
[  127.608807][ T7849] binder: 7848:7849 ioctl c0306201 200000000080 returned -14
[  127.660748][ T7851] loop1: detected capacity change from 0 to 4096
[  127.667303][ T7851] ntfs3(loop1): ino=0, mi_enum_attr
[  127.674384][ T7851] ntfs3(loop1): ino=0, mi_enum_attr
[  127.676185][ T7851] ntfs3(loop1): ino=0, mi_enum_attr
[  127.690286][ T7851] ntfs3(loop1): failed to convert "0080" to cp864
[  127.693514][ T7851] ntfs3(loop1): ino=1e, mi_enum_attr
[  127.726337][ T7855] netlink: 56 bytes leftover after parsing attributes in process `syz.2.851'.
[  127.831386][ T5029] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  127.890857][ T7863] loop2: detected capacity change from 0 to 8192
[  127.960557][ T7857] loop1: detected capacity change from 0 to 32768
[  127.983167][ T5029] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  127.987489][ T7857] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  127.990349][ T5029] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  128.003680][ T5029] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  128.012691][ T7857] XFS (loop1): Ending clean mount
[  128.014398][ T5029] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  128.020537][ T5029] usb 4-1: SerialNumber: syz
[  128.096622][ T5594] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  128.250883][ T5029] usb 4-1: USB disconnect, device number 4
[  128.292557][ T7886] loop2: detected capacity change from 0 to 2048
[  128.521326][ T7890] loop2: detected capacity change from 0 to 32768
[  128.536092][ T7890] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.864 (7890)
[  128.556537][ T7890] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  128.560784][ T7890] BTRFS info (device loop2): using sha256 checksum algorithm
[  128.593074][ T7890] BTRFS info (device loop2): enabling ssd optimizations
[  128.596637][ T7890] BTRFS info (device loop2): turning on async discard
[  128.599283][ T7890] BTRFS info (device loop2): enabling free space tree
[  128.628836][ T5603] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  129.111941][ T7919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.871'.
[  129.135687][ T7922] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  129.224173][ T7916] loop3: detected capacity change from 0 to 32768
[  129.250609][ T7916] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  129.263100][ T7916] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  129.306821][ T7916] XFS (loop3): Ending clean mount
[  129.311688][ T7916] XFS (loop3): Quotacheck needed: Please wait.
[  129.349696][ T7916] XFS (loop3): Quotacheck: Done.
[  129.368878][ T7941] loop1: detected capacity change from 0 to 512
[  129.404249][ T7941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.414741][ T7941] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.444673][ T7941] EXT4-fs error (device loop1): ext4_empty_dir:3085: inode #12: comm syz.1.877: Directory hole found for htree leaf block 0
[  129.456954][ T7579] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  129.470395][ T5594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.593858][   T34] audit: type=1326 audit(2000000043.610:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7951 comm="syz.1.883" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19ab9e0d9 code=0x7ffc0000
[  129.629951][   T34] audit: type=1326 audit(2000000043.610:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7951 comm="syz.1.883" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19ab9e0d9 code=0x7ffc0000
[  129.662274][   T34] audit: type=1326 audit(2000000043.610:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7951 comm="syz.1.883" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19ab9e0d9 code=0x7ffc0000
[  129.670750][   T34] audit: type=1326 audit(2000000043.610:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7951 comm="syz.1.883" exe="/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7fb19ab9e0d9 code=0x7ffc0000
[  129.697500][   T34] audit: type=1326 audit(2000000043.610:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7951 comm="syz.1.883" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19ab9e0d9 code=0x7ffc0000
[  129.705952][   T34] audit: type=1326 audit(2000000043.610:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7951 comm="syz.1.883" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19ab9e0d9 code=0x7ffc0000
[  129.713525][   T34] audit: type=1326 audit(2000000043.610:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7951 comm="syz.1.883" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb19ab9e0d9 code=0x7ffc0000
[  129.720554][   T34] audit: type=1326 audit(2000000043.610:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7951 comm="syz.1.883" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb19ab9e0d9 code=0x7ffc0000
[  129.754947][ T7961] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  129.760461][ T7961] SET target dimension over the limit!
[  129.869064][ T7967] loop3: detected capacity change from 0 to 512
[  129.887852][ T7967] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  129.896721][ T7967] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.888: invalid indirect mapped block 256 (level 1)
[  129.902394][ T7967] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  129.902833][ T7967] EXT4-fs (loop3): Remounting filesystem read-only
[  129.910166][ T7967] EXT4-fs (loop3): 1 truncate cleaned up
[  129.912086][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  129.912097][    C1] EXT4-fs (loop3): initial error at time 2000000043: ext4_free_branches:1023: inode 13
[  129.912111][    C1] EXT4-fs (loop3): last error at time 2000000043: ext4_free_branches:1023: inode 13
[  129.921132][ T7967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.944941][ T7579] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.236745][ T7974] loop3: detected capacity change from 0 to 40427
[  130.243869][ T7974] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  130.253281][ T7974] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  130.300668][ T7974] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  130.311563][ T7974] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  130.313989][ T7974] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  130.321017][ T5658] kernel read not supported for file / (pid: 5658 comm: kworker/1:4)
[  130.793031][    T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  130.961779][    T9] usb 3-1: Using ep0 maxpacket: 16
[  130.966784][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.973753][    T9] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[  130.977722][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.981037][    T9] usb 3-1: Product: syz
[  130.983009][    T9] usb 3-1: Manufacturer: syz
[  130.985202][    T9] usb 3-1: SerialNumber: syz
[  130.992158][    T9] usb 3-1: config 0 descriptor??
[  131.000570][    T9] pegasus_notetaker 3-1:0.0: Invalid number of endpoints
[  131.003841][    T9] pegasus_notetaker 3-1:0.0: probe with driver pegasus_notetaker failed with error -22
[  131.215759][ T5658] usb 3-1: USB disconnect, device number 19
[  131.809197][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.900'.
[  132.196311][ T8007] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  132.198908][ T8007] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  132.275133][ T8011] macsec1: entered promiscuous mode
[  132.276842][ T8011] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  132.283636][ T8011] macsec1: entered allmulticast mode
[  132.285371][ T8011] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  132.288822][ T8011] 8021q: adding VLAN 0 to HW filter on device macsec1
[  132.293814][ T8011] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  132.302513][ T5660] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  132.589027][ T8020] Bluetooth: Invalid esc byte 0x04
[  132.597672][ T8020] Bluetooth: ISO socket layer initialized
[  132.607773][   T51] Bluetooth: (null): Invalid header checksum
[  132.673509][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'.
[  132.711770][ T1113] Bluetooth: (null): Invalid header checksum
[  132.785139][ T1371] ieee802154 phy0 wpan0: encryption failed: -22
[  132.788577][ T1371] ieee802154 phy1 wpan1: encryption failed: -22
[  132.824435][ T1113] Bluetooth: (null): Invalid header checksum
[  132.841393][    T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  133.002645][    T9] usb 3-1: Using ep0 maxpacket: 8
[  133.006430][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  133.010036][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  133.016796][    T9] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[  133.019669][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.023276][    T9] usb 3-1: Product: syz
[  133.025107][    T9] usb 3-1: Manufacturer: syz
[  133.027123][    T9] usb 3-1: SerialNumber: syz
[  133.036035][    T9] usb 3-1: config 0 descriptor??
[  133.048933][    T9] radioshark 3-1:0.0: Invalid radioSHARK device
[  133.051794][    T9] radioshark 3-1:0.0: probe with driver radioshark failed with error -22
[  133.055586][    T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  133.098743][ T8030] loop3: detected capacity change from 0 to 32768
[  133.101863][ T8030] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.912 (8030)
[  133.116737][ T8030] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  133.120814][ T8030] BTRFS info (device loop3): using crc32c checksum algorithm
[  133.184484][ T8030] BTRFS info (device loop3): rebuilding free space tree
[  133.206126][ T8030] BTRFS info (device loop3): enabling ssd optimizations
[  133.208853][ T8030] BTRFS info (device loop3): turning on async discard
[  133.211572][ T8030] BTRFS info (device loop3): enabling free space tree
[  133.214117][ T8030] BTRFS info (device loop3): force clearing of disk cache
[  133.216556][ T8030] BTRFS info (device loop3): use lzo compression, level 1
[  133.249338][    T9] usb 3-1: USB disconnect, device number 20
[  133.291295][ T7579] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  133.652776][ T8051] loop3: detected capacity change from 0 to 4096
[  133.684759][ T8051] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  133.693681][ T8051] ntfs3(loop3): Failed to load $Extend (-22).
[  133.700386][ T8051] ntfs3(loop3): Failed to initialize $Extend.
[  133.722318][ T7579] ntfs3(loop3): ino=9, ntfs_sync_fs failed, -22.
[  133.804510][ T8061] loop3: detected capacity change from 0 to 512
[  133.811860][ T8063] loop2: detected capacity change from 0 to 64
[  133.819488][ T8061] EXT4-fs: Ignoring removed i_version option
[  133.829886][ T8063] Bad inode number on dev loop2: 2 is out of range
[  133.861058][ T8061] EXT4-fs (loop3): 1 orphan inode deleted
[  133.866503][ T8061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.900842][ T7579] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.289978][ T8081] loop3: detected capacity change from 0 to 1024
[  134.293066][ T8081] EXT4-fs: Invalid want_extra_isize 2
[  134.589333][ T5029] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  134.686509][ T8087] loop1: detected capacity change from 0 to 512
[  134.694285][ T8087] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  134.703858][ T8087] EXT4-fs (loop1): orphan cleanup on readonly fs
[  134.709279][ T8087] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #3: comm syz.1.930: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0)
[  134.716667][ T8087] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  134.717386][ T8087] EXT4-fs error (device loop1): ext4_quota_enable:7235: comm syz.1.930: Bad quota inode: 3, type: 0
[  134.725285][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  134.725305][    C0] EXT4-fs (loop1): initial error at time 2000000048: ext4_ext_check_inode:521: inode 3
[  134.725365][    C0] EXT4-fs (loop1): last error at time 2000000048: ext4_ext_check_inode:521: inode 3
[  134.736418][ T8087] loop1: lost filesystem error report for type 5 error -117
[  134.737101][ T8087] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  134.745256][ T8087] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  134.748987][ T8087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  134.756169][ T5029] usb 3-1: not running at top speed; connect to a high speed hub
[  134.762699][ T5029] usb 3-1: config 1 interface 0 altsetting 49 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  134.771380][ T5029] usb 3-1: config 1 interface 0 has no altsetting 0
[  134.780874][ T5029] usb 3-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40
[  134.784543][ T5029] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.791337][ T5029] usb 3-1: Product: syz
[  134.793084][ T5029] usb 3-1: Manufacturer: syz
[  134.794887][ T5029] usb 3-1: SerialNumber: syz
[  134.804238][ T5594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.873095][ T8092] loop1: detected capacity change from 0 to 4096
[  134.900462][ T8093] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  135.060582][ T5029] usbhid 3-1:1.0: can't add hid device: -71
[  135.067717][ T5029] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  135.077895][   T34] audit: type=1400 audit(2000000049.090:29): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=8098 comm="syz.3.935" name="unknown" offset=16
[  135.084102][ T5029] usb 3-1: USB disconnect, device number 21
[  135.391381][ T2372] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  135.551367][ T2372] usb 4-1: Using ep0 maxpacket: 16
[  135.555568][ T2372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  135.559805][ T2372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  135.563868][ T2372] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  135.568839][ T2372] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  135.572838][ T2372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.586475][ T2372] usb 4-1: config 0 descriptor??
[  135.622090][ T8105] loop2: detected capacity change from 0 to 512
[  135.626461][ T8105] EXT4-fs: Ignoring removed nobh option
[  135.653243][ T8105] fscrypt (loop2, inode 2): Error -61 getting encryption context
[  135.658992][ T8105] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61
[  135.663744][ T8105] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #13: comm syz.2.938: inode has both inline data and extents flags
[  135.668527][ T8105] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  135.668887][ T8105] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.938: couldn't read orphan inode 13 (err -117)
[  135.672490][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  135.672502][    C1] EXT4-fs (loop2): initial error at time 2000000049: ext4_orphan_get:1399: inode 13
[  135.672521][    C1] EXT4-fs (loop2): last error at time 2000000049: ext4_orphan_get:1399: inode 13
[  135.687309][ T8105] loop2: lost filesystem error report for type 5 error -117
[  135.688813][ T8105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.726705][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.829178][ T8111] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  135.837826][ T8111] overlayfs: overlapping lowerdir path
[  136.035626][ T2372] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0004/input/input5
[  136.140259][ T2372] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  136.236663][ T2372] usb 4-1: USB disconnect, device number 5
[  138.304593][ T8167] netlink: 'syz.2.964': attribute type 1 has an invalid length.
[  138.307202][ T8167] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.628186][ T8175] loop2: detected capacity change from 0 to 512
[  138.639588][ T8175] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  138.650923][ T8175] EXT4-fs (loop2): invalid journal inode
[  138.653482][ T8175] EXT4-fs (loop2): can't get journal size
[  138.672241][ T8175] EXT4-fs error (device loop2): ext4_protect_reserved_inode:182: inode #2: comm syz.2.967: blocks 4-4 from inode overlap system zone
[  138.676552][ T8175] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  138.677151][ T8175] EXT4-fs (loop2): Remounting filesystem read-only
[  138.682020][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  138.682029][    C1] EXT4-fs (loop2): initial error at time 2000000052: ext4_protect_reserved_inode:182: inode 2
[  138.682042][    C1] EXT4-fs (loop2): last error at time 2000000052: ext4_protect_reserved_inode:182: inode 2
[  138.691597][ T8175] EXT4-fs (loop2): failed to initialize system zone (-117)
[  138.694998][ T8175] EXT4-fs (loop2): mount failed
[  139.023279][ T8180] loop1: detected capacity change from 0 to 256
[  139.025730][ T8180] exfat: Deprecated parameter 'utf8'
[  139.027362][ T8180] exfat: Deprecated parameter 'namecase'
[  139.029113][ T8180] exfat: Deprecated parameter 'namecase'
[  139.038533][ T8180] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  140.187415][ T8200] loop2: detected capacity change from 0 to 8
[  140.197165][ T8200] SQUASHFS error: lzo decompression failed, data probably corrupt
[  140.200482][ T8200] SQUASHFS error: Failed to read block 0x144: -5
[  140.207791][ T8200] SQUASHFS error: Unable to read metadata cache entry [142]
[  140.213695][ T8200] SQUASHFS error: Unable to read inode 0x11f
[  140.288704][ T8202] netlink: Failed to add H helper -22
[  140.291046][ T8202] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.391147][ T8207] input: syz1 as /devices/virtual/input/input6
[  141.093329][ T8213] loop3: detected capacity change from 0 to 1024
[  141.117324][ T8213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.133118][ T8213] EXT4-fs error (device loop3): ext4_get_first_dir_block:3560: inode #11: comm syz.3.981: directory missing '..'
[  141.144189][ T8213] EXT4-fs (loop3): Remounting filesystem read-only
[  141.159475][ T7579] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.197936][ T8218] gadgetfs: bound to dummy_udc driver
[  141.772429][ T5497] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  141.821452][    T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  141.923329][ T5497] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  141.927773][ T5497] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  141.933064][ T5497] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  141.936730][ T5497] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.942287][ T5497] usb 3-1: config 0 descriptor??
[  141.983920][    T9] usb 4-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[  141.990728][    T9] usb 4-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00
[  141.996857][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.000174][    T9] usb 4-1: Product: syz
[  142.002211][    T9] usb 4-1: Manufacturer: syz
[  142.005075][    T9] usb 4-1: SerialNumber: syz
[  142.227604][    T9] usb 4-1: USB disconnect, device number 6
[  142.353700][ T5497] logitech 0003:046D:C20E.0005: rdesc size test failed for formula gp
[  142.357534][ T5497] logitech 0003:046D:C20E.0005: global environment stack underflow
[  142.360630][ T5497] logitech 0003:046D:C20E.0005: item 0 4 1 11 parsing failed
[  142.364243][ T5497] logitech 0003:046D:C20E.0005: parse failed
[  142.366688][ T5497] logitech 0003:046D:C20E.0005: probe with driver logitech failed with error -22
[  142.556862][ T5497] usb 3-1: USB disconnect, device number 22
[  142.756740][ T8237] netlink: 72 bytes leftover after parsing attributes in process `syz.3.991'.
[  142.760804][ T8237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.991'.
[  142.766900][ T8237] netlink: 20 bytes leftover after parsing attributes in process `syz.3.991'.
[  143.051324][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  143.221506][    T9] usb 4-1: Using ep0 maxpacket: 8
[  143.227453][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15
[  143.238100][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  143.242383][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  143.245696][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  143.253515][    T9] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  143.267398][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.271589][    T9] usb 4-1: Product: syz
[  143.273103][    T9] usb 4-1: Manufacturer: syz
[  143.274840][    T9] usb 4-1: SerialNumber: syz
[  143.280583][    T9] usb 4-1: config 0 descriptor??
[  143.313145][ T8239] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  143.338607][ T8255] input: syz0 as /devices/virtual/input/input7
[  143.530758][    T9] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[  143.547289][    T9] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8
[  143.677063][ T8253] loop2: detected capacity change from 0 to 131072
[  143.682939][ T8253] F2FS-fs (loop2): invalid crc value
[  143.714601][ T8253] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  143.722809][ T8253] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  143.986637][    C0] powermate: config urb returned -71
[  143.988995][    C0] powermate: config urb returned -71
[  143.991413][    C0] powermate: config urb returned -71
[  144.002352][    T9] usb 4-1: USB disconnect, device number 7
[  144.004828][    C0] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  144.540597][ T8282] loop3: detected capacity change from 0 to 512
[  144.556645][ T8282] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  144.560244][ T8282] System zones: 0-2, 18-18, 34-34
[  144.574201][ T8282] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1010: bg 0: block 248: padding at end of block bitmap is not set
[  144.582878][ T8282] loop3: lost filesystem error report for type 5 error -117
[  144.584726][ T8282] Quota error (device loop3): write_blk: dquota write failed
[  144.590649][ T8282] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  144.594191][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  144.594208][    C1] EXT4-fs (loop3): last error at time 2000000058: ext4_validate_block_bitmap:441
[  144.601322][ T5029] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  144.602688][ T8282] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.1010: Failed to acquire dquot type 1
[  144.607360][ T8282] loop3: lost filesystem error report for type 5 error -117
[  144.616156][ T8282] EXT4-fs (loop3): 1 truncate cleaned up
[  144.619209][ T8282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.625399][ T8282] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  144.652231][ T7579] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.763680][ T5029] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  144.767563][ T5029] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  144.771097][ T5029] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.777980][ T5029] usb 3-1: config 0 descriptor??
[  144.783616][ T5029] pwc: Askey VC010 type 2 USB webcam detected.
[  144.837419][ T8297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1015'.
[  144.973177][ T8299] loop1: detected capacity change from 0 to 2048
[  144.992882][ T8299] EXT4-fs (loop1): failed to initialize system zone (-117)
[  144.995607][ T8299] EXT4-fs (loop1): mount failed
[  145.187329][ T5029] pwc: recv_control_msg error -32 req 02 val 2b00
[  145.199619][ T5029] pwc: recv_control_msg error -32 req 02 val 2700
[  145.206768][ T5029] pwc: recv_control_msg error -32 req 02 val 2c00
[  145.211938][ T5029] pwc: recv_control_msg error -32 req 04 val 1000
[  145.219041][ T5029] pwc: recv_control_msg error -32 req 04 val 1300
[  145.229427][ T5029] pwc: recv_control_msg error -32 req 04 val 1400
[  145.237692][ T5029] pwc: recv_control_msg error -32 req 02 val 2000
[  145.316096][ T5029] pwc: recv_control_msg error -32 req 02 val 2100
[  145.319625][ T5029] pwc: recv_control_msg error -32 req 04 val 1500
[  145.323705][ T5029] pwc: recv_control_msg error -32 req 02 val 2500
[  145.409347][ T8311] binder: 8310:8311 ioctl c0306201 2000000006c0 returned -14
[  145.531876][ T5029] pwc: recv_control_msg error -71 req 02 val 2600
[  145.534412][ T5029] pwc: recv_control_msg error -71 req 02 val 2900
[  145.541864][ T5029] pwc: recv_control_msg error -71 req 02 val 2800
[  145.544518][ T5029] pwc: recv_control_msg error -71 req 04 val 1100
[  145.547263][ T5029] pwc: recv_control_msg error -71 req 04 val 1200
[  145.554227][ T5029] pwc: Registered as video103.
[  145.560260][ T5029] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9
[  145.570798][ T5029] usb 3-1: USB disconnect, device number 23
[  145.739449][ T8327] loop1: detected capacity change from 0 to 16
[  145.775912][ T8327] erofs (device loop1): mounted with root inode @ nid 36.
[  146.046635][ T8347] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1037'.
[  146.050971][ T8347] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1037'.
[  146.067440][ T8349] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1038'.
[  146.074267][ T8347] netlink: 'syz.3.1037': attribute type 32 has an invalid length.
[  146.077502][ T8347] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1037'.
[  146.197845][ T8354] loop2: detected capacity change from 0 to 1024
[  148.457009][ T8360] loop2: detected capacity change from 0 to 131072
[  148.464414][ T8360] F2FS-fs (loop2): Invalid log sectorsize (67108873)
[  148.467246][ T8360] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  148.471510][ T8360] F2FS-fs (loop2): invalid crc value
[  148.554167][ T8360] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  148.563541][ T8360] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  148.566499][ T8360] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  148.919412][ T8370] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  148.923410][ T8370] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  148.959859][ T8372] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  148.967307][ T8372] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  149.211378][ T8374] loop1: detected capacity change from 0 to 32768
[  149.223147][ T8374] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1049 (8374)
[  149.262055][ T8385] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10
[  149.270807][ T8374] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  149.279395][ T8374] BTRFS info (device loop1): using blake2b checksum algorithm
[  149.401098][ T8374] BTRFS info (device loop1): enabling ssd optimizations
[  149.406019][ T8374] BTRFS info (device loop1): turning on async discard
[  149.410233][ T8374] BTRFS info (device loop1): enabling free space tree
[  149.413174][ T8374] BTRFS info (device loop1): use zstd compression, level 3
[  149.488258][   T34] audit: type=1800 audit(2000000063.510:30): pid=8374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1049" name="bus" dev="loop1" ino=263 res=0 errno=0
[  149.577589][ T8412] serio: Serial port ptm0
[  149.660763][ T8418] program syz.3.1057 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  149.708903][ T8420] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1058'.
[  149.794681][ T5594] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  150.081663][ T5497] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  150.147706][ T8440] loop1: detected capacity change from 0 to 2048
[  150.153306][ T8440] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  150.155829][ T5718] udevd[5718]: incorrect nilfs2 checksum on /dev/loop1
[  150.156929][ T8440] NILFS (loop1): mounting unchecked fs
[  150.175747][ T8440] NILFS (loop1): recovery complete
[  150.178572][ T8443] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  150.236193][ T5497] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  150.241874][ T5497] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  150.249670][ T5497] usb 4-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40
[  150.255407][ T5497] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.259552][ T5497] usb 4-1: Product: syz
[  150.260908][ T5497] usb 4-1: Manufacturer: syz
[  150.266225][ T5497] usb 4-1: SerialNumber: syz
[  150.298715][ T8449] loop2: detected capacity change from 0 to 128
[  150.323584][ T8449] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  150.334102][ T8447] loop1: detected capacity change from 0 to 4096
[  150.337997][ T8449] ext4 filesystem being mounted at /344/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  150.347014][ T8447] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  150.373581][ T8447] ntfs3(loop1): ino=18, mi_enum_attr
[  150.376034][ T8449] syz.2.1071 (pid 8449) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  150.381914][ T8447] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  150.407098][ T5603] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  150.437419][ T8453] loop1: detected capacity change from 0 to 8
[  150.442714][ T8453] SQUASHFS error: zlib decompression failed, data probably corrupt
[  150.448774][ T8453] SQUASHFS error: Failed to read block 0x9b: -5
[  150.451790][ T8453] SQUASHFS error: Unable to read metadata cache entry [99]
[  150.454705][ T8453] SQUASHFS error: Unable to read inode 0x127
[  150.492523][ T5497] usb 4-1: 0:1 : does not exist
[  150.500352][ T5497] usb 4-1: unit 5 not found!
[  150.513014][ T8457] netlink: 'syz.2.1073': attribute type 10 has an invalid length.
[  150.599038][ T5497] usb 4-1: USB disconnect, device number 8
[  150.613270][ T5718] udevd[5718]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[  150.671598][ T8464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1077'.
[  150.759967][   T34] audit: type=1400 audit(2000000064.780:31): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name=":" pid=8467 comm="syz.1.1079" name=":" offset=58
[  150.975028][ T8474] input: syz0 as /devices/virtual/input/input11
[  151.145729][ T8478] loop1: detected capacity change from 0 to 512
[  151.156148][ T8478] EXT4-fs (loop1): Test dummy encryption mode enabled
[  151.171948][ T8478] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.1084: inode has both inline data and extents flags
[  151.178222][ T8478] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  151.179271][ T8478] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1084: couldn't read orphan inode 15 (err -117)
[  151.183815][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  151.183827][    C1] EXT4-fs (loop1): initial error at time 2000000065: ext4_orphan_get:1399: inode 15
[  151.183840][    C1] EXT4-fs (loop1): last error at time 2000000065: ext4_orphan_get:1399: inode 15
[  151.185620][ T8481] netdevsim netdevsim3: loading /lib/firmware// failed with error -22
[  151.188512][ T8478] loop1: lost filesystem error report for type 5 error -117
[  151.208184][ T8478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.234832][ T8481] netdevsim netdevsim3: Direct firmware load for / failed with error -22
[  151.238221][ T8481] netdevsim netdevsim3: Falling back to sysfs fallback for: /
[  151.274153][ T8478] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-lib)))"
[  151.362394][ T8478] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-lib))"
[  151.407735][ T5594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.488951][ T8491] loop1: detected capacity change from 0 to 128
[  152.162836][ T8502] syz.3.1092 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  152.481449][ T5497] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  152.633232][ T5497] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  152.636837][ T5497] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.645375][ T5497] usb 4-1: config 0 descriptor??
[  152.651820][ T5497] cp210x 4-1:0.0: cp210x converter detected
[  152.909813][ T8508] loop2: detected capacity change from 0 to 256
[  153.060804][ T5497] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  153.076525][ T5497] usb 4-1: cp210x converter now attached to ttyUSB0
[  153.269566][ T5497] usb 4-1: USB disconnect, device number 9
[  153.274959][ T5497] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  153.289247][ T5497] cp210x 4-1:0.0: device disconnected
[  153.863645][ T8518] loop3: detected capacity change from 0 to 2048
[  153.897023][ T8518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  153.940639][ T7579] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.809105][ T8541] loop2: detected capacity change from 0 to 1024
[  155.815088][ T8541] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  155.885395][ T8543] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1110'.
[  155.889611][ T8543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1110'.
[  155.895483][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1110'.
[  156.079271][ T8553] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  156.169292][ T8559] loop2: detected capacity change from 0 to 64
[  156.191903][ T8559] BFS-fs: bfs_fill_super(): Inode 0x00000033 corrupted on loop2
[  156.221363][ T5658] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  156.371346][ T5658] usb 4-1: Using ep0 maxpacket: 8
[  156.376359][ T5658] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  156.381302][ T5658] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  156.384747][ T5658] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  156.387993][ T5658] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  156.391488][ T5658] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  156.395847][ T5658] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  156.398749][ T5658] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.473179][ T8563] loop2: detected capacity change from 0 to 32768
[  156.496697][ T8563] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  156.570891][ T5603] ocfs2: Unmounting device (7,2) on (node local)
[  156.613573][ T5658] usb 4-1: usb_control_msg returned -32
[  156.615437][ T5658] usbtmc 4-1:16.0: can't read capabilities
[  156.660251][ T8567] loop2: detected capacity change from 0 to 512
[  156.672537][ T8567] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  156.680468][ T8567] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1120: bg 0: block 104: invalid block bitmap
[  156.684699][ T8567] loop2: lost filesystem error report for type 5 error -117
[  156.684997][ T8567] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  156.690090][ T8567] loop2: lost filesystem error report for type 5 error -117
[  156.690413][ T8567] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1120: invalid indirect mapped block 1 (level 1)
[  156.693099][    C1] EXT4-fs (loop2): error count since last fsck: 2
[  156.693110][    C1] EXT4-fs (loop2): initial error at time 2000000070: ext4_validate_block_bitmap:432
[  156.693121][    C1] EXT4-fs (loop2): last error at time 2000000070: ext4_mb_clear_bb:6679
[  156.704984][ T8567] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  156.707962][ T8567] EXT4-fs (loop2): 1 truncate cleaned up
[  156.713633][ T8567] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.719401][ T8567] EXT4-fs (loop2): shut down requested (2)
[  156.726251][ T8567] overlayfs: failed to get redirect (-5)
[  156.744622][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.968822][ T8581] usbtmc 4-1:16.0: INITIATE_ABORT_BULK_OUT returned 0
[  157.112463][ T8583] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1125'.
[  157.174333][ T5658] usb 4-1: USB disconnect, device number 10
[  157.715941][ T8599] loop3: detected capacity change from 0 to 2048
[  157.719189][ T8599] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  157.722505][ T5718] udevd[5718]: incorrect nilfs2 checksum on /dev/loop3
[  157.723988][ T8599] NILFS (loop3): too large checkpoint size: 1741 bytes
[  157.727553][ T8599] NILFS (loop3): error -22 while loading super root
[  157.782713][ T8601] loop3: detected capacity change from 0 to 128
[  157.806048][ T8601] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  157.811947][ T8601] hpfs: filesystem error: improperly stopped
[  157.814121][ T8601] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  157.816595][ T8601] hpfs: You really don't want any checks? You are crazy...
[  157.819200][ T8601] hpfs: Code page index out of array
[  157.820991][ T8601] hpfs: code page support is disabled
[  157.826122][ T8601] hpfs: hpfs_map_4sectors(): unaligned read
[  157.828344][ T8601] hpfs: hpfs_map_4sectors(): unaligned read
[  157.830305][ T8601] hpfs: filesystem error: unable to find root dir
[  158.032272][ T5658] IPVS: starting estimator thread 0...
[  158.121558][ T8606] IPVS: using max 83 ests per chain, 199200 per kthread
[  158.216733][ T8608] loop1: detected capacity change from 0 to 512
[  158.279402][ T8608] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  158.562041][ T8608] EXT4-fs (loop1): 1 truncate cleaned up
[  158.682036][ T8608] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.877160][ T5594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.970296][ T8615] jffs2: notice: (8615) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  159.866279][ T8630] loop3: detected capacity change from 0 to 16
[  159.873887][ T8630] erofs (device loop3): mounted with root inode @ nid 36.
[  159.886430][ T8630] erofs (device loop3): invalid h_shared_count 83 @ nid 46
[  159.889737][ T8630] erofs (device loop3): invalid h_shared_count 83 @ nid 46
[  160.278158][   T32] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  160.398867][ T8643] loop2: detected capacity change from 0 to 512
[  160.420067][ T8643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.426658][ T8643] ext4 filesystem being mounted at /389/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.437671][   T32] usb 4-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=eb.c6
[  160.447661][   T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.451001][   T32] usb 4-1: Product: syz
[  160.453525][   T32] usb 4-1: Manufacturer: syz
[  160.455501][   T32] usb 4-1: SerialNumber: syz
[  160.467300][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.676659][   T32] pwc: Visionite VCS-UC300 USB webcam detected.
[  160.684223][   T32] pwc: Failed to set LED on/off time (-71)
[  160.687701][   T32] pwc: send_video_command error -71
[  160.689888][   T32] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  160.693674][   T32] Philips webcam 4-1:5.0: probe with driver Philips webcam failed with error -71
[  160.699139][   T32] usb 4-1: USB disconnect, device number 11
[  160.935380][ T8655] ip_tables: iptables: counters copy to user failed while replacing table
[  161.972900][ T5497] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  162.121265][ T5497] usb 3-1: Using ep0 maxpacket: 16
[  162.127126][ T5497] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  162.131499][ T5497] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.138464][ T5497] usb 3-1: config 0 descriptor??
[  162.149437][ T5497] gspca_main: sonixj-2.14.0 probing 0471:0327
[  162.667655][ T8703] loop3: detected capacity change from 0 to 512
[  162.689730][ T8703] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1172: casefold flag without casefold feature
[  162.705970][ T8703] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  162.706355][ T8703] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1172: couldn't read orphan inode 15 (err -117)
[  162.713702][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  162.713715][    C0] EXT4-fs (loop3): initial error at time 2000000076: ext4_orphan_get:1399: inode 15
[  162.713730][    C0] EXT4-fs (loop3): last error at time 2000000076: ext4_orphan_get:1399: inode 15
[  162.723489][ T8703] loop3: lost filesystem error report for type 5 error -117
[  162.724770][ T8703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.745330][ T7579] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.806938][ T8709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1174'.
[  162.856747][ T8711] loop3: detected capacity change from 0 to 4096
[  162.890600][ T8711] overlayfs: missing 'lowerdir'
[  163.101466][ T8713] loop3: detected capacity change from 0 to 512
[  163.131035][ T8713] EXT4-fs (loop3): blocks per group (34) and clusters per group (32768) inconsistent
[  163.280758][ T5497] usb 3-1: USB disconnect, device number 24
[  163.844462][ T8721] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1179'.
[  163.979536][ T8727] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes.
[  164.786352][ T8756] loop2: detected capacity change from 0 to 256
[  165.297420][ T8788] loop3: detected capacity change from 0 to 32768
[  165.304472][ T8788] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  165.330225][ T8788] XFS (loop3): Starting recovery (logdev: internal)
[  165.340587][ T8788] XFS (loop3): Ending recovery (logdev: internal)
[  165.362105][ T7579] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  165.556496][ T8803] loop3: detected capacity change from 0 to 8192
[  165.901336][ T5658] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  166.052331][ T5658] usb 4-1: Using ep0 maxpacket: 8
[  166.060844][ T5658] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  166.067993][ T5658] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.073048][ T5658] usb 4-1: Product: syz
[  166.075650][ T5658] usb 4-1: Manufacturer: syz
[  166.082414][ T5658] usb 4-1: SerialNumber: syz
[  166.216188][ T5658] usb 4-1: config 0 descriptor??
[  166.234512][ T5658] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  166.998444][ T8837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1225'.
[  167.563007][ T5658] gspca_sonixj: reg_w1 err -71
[  167.644503][ T5658] sonixj 4-1:0.0: probe with driver sonixj failed with error -71
[  167.648932][ T5658] usb 4-1: USB disconnect, device number 12
[  167.891333][ T5029] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  168.072937][ T5029] usb 3-1: unable to get BOS descriptor or descriptor too short
[  168.081359][ T5029] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  168.086100][ T5029] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  168.097130][ T5029] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  168.123304][ T5029] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00
[  168.132840][ T5029] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  168.146562][ T5029] usb 3-1: Product: syz
[  168.153393][ T5029] usb 3-1: Manufacturer: syz
[  168.174898][ T5029] uvcvideo 3-1:1.0: Found UVC 1.00 device syz (8086:0ad2)
[  168.177298][ T5029] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770.
[  168.180229][ T5029] uvcvideo 3-1:1.0: Failed to create links for entity 3
[  168.183113][ T5029] uvcvideo 3-1:1.0: Failed to register entities (-22).
[  168.382570][ T2372] usb 3-1: USB disconnect, device number 25
[  168.427911][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1247'.
[  171.031946][ T2372] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  171.113348][ T5596] Bluetooth: hci1: Malformed Event: 0x02
[  171.180214][ T8926] loop3: detected capacity change from 0 to 4096
[  171.191645][ T8926] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  171.193074][ T2372] usb 3-1: Using ep0 maxpacket: 16
[  171.205465][ T2372] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  171.210176][ T8926] ntfs3(loop3): ino=1a, mi_enum_attr
[  171.212528][ T8926] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  171.215382][ T8926] ntfs3(loop3): ino=1a, mi_enum_attr
[  171.217157][ T8926] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  171.220920][ T2372] usb 3-1: config 0 interface 0 has no altsetting 0
[  171.227322][ T2372] usb 3-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00
[  171.239226][ T2372] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.252472][ T2372] usb 3-1: config 0 descriptor??
[  171.293799][ T8928] loop3: detected capacity change from 0 to 2048
[  171.299625][ T8928] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4685: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  171.309464][ T8928] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  171.704703][ T2372] smartjoyplus 0003:6666:8802.0006: hidraw0: USB HID v10.01 Device [HID 6666:8802] on usb-dummy_hcd.2-1/input0
[  171.718569][ T2372] smartjoyplus 0003:6666:8802.0006: no output reports found
[  171.883806][   T33] usb 3-1: USB disconnect, device number 26
[  172.385373][ T8940] loop3: detected capacity change from 0 to 1024
[  172.396710][ T8940] hfsplus: failed to load attributes file
[  172.864862][ T8945] binder: 8943:8945 ioctl c0306201 200000000640 returned -22
[  173.642262][   T34] audit: type=1326 audit(2000000087.660:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.3.1274" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fdb9e0d9 code=0x7ffc0000
[  173.651080][   T34] audit: type=1326 audit(2000000087.670:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.3.1274" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fdb9e0d9 code=0x7ffc0000
[  173.662637][   T34] audit: type=1326 audit(2000000087.680:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.3.1274" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fdb9e0d9 code=0x7ffc0000
[  173.697594][   T34] audit: type=1326 audit(2000000087.680:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.3.1274" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fdb9e0d9 code=0x7ffc0000
[  173.716824][   T34] audit: type=1326 audit(2000000087.690:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.3.1274" exe="/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f89fdb9e0d9 code=0x7ffc0000
[  173.730154][   T34] audit: type=1326 audit(2000000087.690:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.3.1274" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fdb9e0d9 code=0x7ffc0000
[  173.737504][   T34] audit: type=1326 audit(2000000087.690:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.3.1274" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fdb9e0d9 code=0x7ffc0000
[  173.745884][   T34] audit: type=1326 audit(2000000087.690:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.3.1274" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f89fdb9e0d9 code=0x7ffc0000
[  173.759921][   T34] audit: type=1326 audit(2000000087.690:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.3.1274" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f89fdb9e0d9 code=0x7ffc0000
[  173.778362][   T34] audit: type=1326 audit(2000000087.690:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8950 comm="syz.2.1275" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331939e0d9 code=0x7ffc0000
[  174.426322][ T8967] loop1: detected capacity change from 0 to 1024
[  174.763679][ T8983] loop2: detected capacity change from 0 to 512
[  174.851507][ T8983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.855768][ T8983] ext4 filesystem being mounted at /436/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  174.904216][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.143115][ T8991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1291'.
[  175.146922][ T8991] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  175.174814][ T8991] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.901401][ T5596] Bluetooth: hci0: command 0x0406 tx timeout
[  176.224533][ T9005] loop2: detected capacity change from 0 to 512
[  176.229799][ T9005] EXT4-fs (loop2): Test dummy encryption mode enabled
[  176.233659][ T9005] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  176.280590][ T9005] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  176.289783][ T9005] EXT4-fs (loop2): 1 truncate cleaned up
[  176.292994][ T9005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.911305][ T5674] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  177.072882][ T5674] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  177.076515][ T5674] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.082536][ T5674] usb 4-1: Product: syz
[  177.087567][ T5674] usb 4-1: Manufacturer: syz
[  177.091053][ T5674] usb 4-1: SerialNumber: syz
[  177.093211][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.314242][ T9023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1304'.
[  177.332525][ T5674] rtl8150 4-1:1.0: couldn't reset the device
[  177.336845][ T5674] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5
[  177.352129][ T5674] usb 4-1: USB disconnect, device number 13
[  177.779055][ T9030] loop1: detected capacity change from 0 to 512
[  177.845737][ T9030] loop1: detected capacity change from 512 to 0
[  177.864404][ T9030] FAT-fs (loop1): FAT read failed (blocknr 32)
[  177.874643][ T9030] FAT-fs (loop1): unable to read inode block for updating (i_pos 2181)
[  178.079466][ T5594] FAT-fs (loop1): Directory bread(block 34) failed
[  178.083129][ T5594] FAT-fs (loop1): Directory bread(block 35) failed
[  178.086636][ T5594] FAT-fs (loop1): Directory bread(block 36) failed
[  178.089200][ T5594] FAT-fs (loop1): Directory bread(block 37) failed
[  178.097002][ T5594] FAT-fs (loop1): Directory bread(block 38) failed
[  178.099667][ T5594] FAT-fs (loop1): Directory bread(block 39) failed
[  178.104010][ T5594] FAT-fs (loop1): Directory bread(block 40) failed
[  178.106671][ T5594] FAT-fs (loop1): Directory bread(block 41) failed
[  178.149466][   T83] FAT-fs (loop1): bread failed in fat_clusters_flush
[  178.185730][ T5594] FAT-fs (loop1): unable to read boot sector to mark fs as dirty
[  178.188466][ T9044] loop3: detected capacity change from 0 to 512
[  178.495438][ T9054] libceph: resolve '400' (ret=-3): failed
[  178.600399][ T5658] logitech-hidpp-device 0005:046D:B012.0007: hidraw0: BLUETOOTH HID v0.07 Device [syz1] on syz1
[  178.711142][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  178.715737][ T9067] loop2: detected capacity change from 0 to 2048
[  178.717915][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  178.724356][ T9067] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  178.725732][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  178.733194][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  178.736613][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  179.040612][ T9086] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  179.044030][ T9086] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  179.858313][ T9095] netlink: 'syz.3.1335': attribute type 2 has an invalid length.
[  179.863888][ T9095] netlink: 'syz.3.1335': attribute type 1 has an invalid length.
[  180.557927][ T9063] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.565109][ T9063] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.569022][ T9063] bridge_slave_0: entered allmulticast mode
[  180.575237][ T9063] bridge_slave_0: entered promiscuous mode
[  180.580034][ T9063] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.586661][ T9063] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.592370][ T9063] bridge_slave_1: entered allmulticast mode
[  180.599831][ T9063] bridge_slave_1: entered promiscuous mode
[  180.629918][ T9063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  180.645642][ T9063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  180.687675][ T9063] team0: Port device team_slave_0 added
[  180.695584][ T9063] team0: Port device team_slave_1 added
[  180.700364][ T9100] loop3: detected capacity change from 0 to 131072
[  180.704220][ T9100] F2FS-fs (loop3): Invalid log sectorsize (67108873)
[  180.706826][ T9100] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  180.710200][ T9100] F2FS-fs (loop3): invalid crc value
[  180.752608][ T9100] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  180.764336][ T9100] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  180.767112][ T9100] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  180.796022][ T9063] batman_adv: batadv0: Adding interface: batadv_slave_0
[  180.798200][ T9063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  180.806264][ T9063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  180.817530][ T9063] batman_adv: batadv0: Adding interface: batadv_slave_1
[  180.822102][ T9063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  180.838454][ T9063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  180.861641][ T5596] Bluetooth: hci0: command tx timeout
[  180.884606][ T9063] hsr_slave_0: entered promiscuous mode
[  180.887239][ T9063] hsr_slave_1: entered promiscuous mode
[  180.889380][ T9063] debugfs: 'hsr0' already exists in 'hsr'
[  180.892319][ T9063] Cannot create hsr debugfs directory
[  181.070049][ T9119] loop2: detected capacity change from 0 to 2048
[  181.113967][ T9119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.134431][ T9119] EXT4-fs error (device loop2): ext4_find_extent:904: inode #2: comm syz.2.1341: inode has invalid extent depth: 8
[  181.158068][ T9063] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  181.173034][ T9119] EXT4-fs (loop2): Remounting filesystem read-only
[  181.177459][ T9063] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  181.180260][ T9063] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  181.184730][ T9063] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  181.187584][ T9063] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  181.194785][ T9063] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  181.197472][ T9063] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  181.217019][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.217583][ T9063] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  181.371049][ T9063] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.423010][ T9063] 8021q: adding VLAN 0 to HW filter on device team0
[  181.433151][   T82] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.436056][   T82] bridge0: port 1(bridge_slave_0) entered forwarding state
[  181.459895][   T82] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.462177][   T82] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.469231][ T9137] loop2: detected capacity change from 0 to 32768
[  181.484127][ T9137] 
[  181.484127][ T9137]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  181.484127][ T9137] 
[  181.534818][ T5603] 
[  181.534818][ T5603]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  181.534818][ T5603] 
[  181.563712][ T5603] 
[  181.563712][ T5603]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  181.563712][ T5603] 
[  182.015837][ T9063] 8021q: adding VLAN 0 to HW filter on device batadv0
[  182.208364][ T9063] veth0_vlan: entered promiscuous mode
[  182.220949][ T9063] veth1_vlan: entered promiscuous mode
[  182.264732][ T9063] veth0_macvtap: entered promiscuous mode
[  182.271898][ T9063] veth1_macvtap: entered promiscuous mode
[  182.297741][ T9063] batman_adv: batadv0: Interface activated: batadv_slave_0
[  182.310288][ T9063] batman_adv: batadv0: Interface activated: batadv_slave_1
[  182.325778][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.332799][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.339012][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.809469][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.954511][ T5596] Bluetooth: hci0: command tx timeout
[  182.989173][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.999416][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.043849][   T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.047267][   T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.062791][ T9185] loop3: detected capacity change from 0 to 256
[  183.078161][ T9185] FAT-fs (loop3): bogus sectors per cluster 0
[  183.085344][ T9185] FAT-fs (loop3): Can't find a valid FAT filesystem
[  183.099158][ T9185] cgroup: Unknown subsys name 'cpuset'
[  183.424488][ T5658] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  183.594750][ T5658] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  183.599069][ T5658] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  183.603609][ T5658] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  183.608337][ T5658] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  183.613695][ T5658] usb 5-1: SerialNumber: syz
[  183.723426][ T9223] loop3: detected capacity change from 0 to 1024
[  183.733861][ T9223] hfsplus: failed to load extents file
[  183.814596][ T9225] rnbd_client L213: map_device: Parameters missing
[  183.832305][ T5658] usb 5-1: 0:2 : does not exist
[  183.874362][ T5658] usb 5-1: USB disconnect, device number 2
[  183.910848][ T5718] udevd[5718]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[  184.109300][ T9229] loop2: detected capacity change from 0 to 512
[  184.131774][ T9229] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1372: inode has both inline data and extents flags
[  184.136602][ T9229] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  184.136748][ T9229] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1372: couldn't read orphan inode 15 (err -117)
[  184.144211][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  184.144225][    C1] EXT4-fs (loop2): initial error at time 2000000098: ext4_orphan_get:1399: inode 15
[  184.144244][    C1] EXT4-fs (loop2): last error at time 2000000098: ext4_orphan_get:1399: inode 15
[  184.162726][ T9229] loop2: lost filesystem error report for type 5 error -117
[  184.163747][ T9229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.187470][ T9229] fscrypt (loop2, inode 18): Unsupported encryption flags (0xae)
[  184.192771][ T9227] loop3: detected capacity change from 0 to 32768
[  184.215555][ T9227] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  184.226991][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.241540][ T9227] XFS (loop3): Ending clean mount
[  184.405162][ T5596] Bluetooth: hci0: Malformed LE Event: 0x0d
[  184.776944][ T7579] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  185.023324][ T5596] Bluetooth: hci0: command tx timeout
[  185.058652][ T9251] ieee802154 phy0 wpan0: encryption failed: -22
[  185.812171][   T33] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  185.972317][   T33] usb 4-1: not running at top speed; connect to a high speed hub
[  185.976344][   T33] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 30768, setting to 64
[  185.982820][   T33] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40
[  185.985852][   T33] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.988862][   T33] usb 4-1: Product: syz
[  185.990486][   T33] usb 4-1: Manufacturer: syz
[  185.992667][   T33] usb 4-1: SerialNumber: syz
[  185.997854][   T33] oti6858 4-1:1.0: oti6858 converter detected
[  186.004904][   T33] usb 4-1: oti6858 converter now attached to ttyUSB0
[  186.876941][ T5029] usb 4-1: USB disconnect, device number 14
[  186.907671][ T5029] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0
[  186.918366][ T5029] oti6858 4-1:1.0: device disconnected
[  187.101498][ T5596] Bluetooth: hci0: command tx timeout
[  187.443074][ T5029] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  187.508737][ T9329] loop3: detected capacity change from 0 to 1024
[  187.519494][ T9329] EXT4-fs (loop3): Encoding requested by superblock is unknown
[  187.602408][ T5029] usb 3-1: Using ep0 maxpacket: 32
[  187.606650][ T5029] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  187.614792][ T5029] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  187.620399][ T5029] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.624295][ T5029] usb 3-1: Product: syz
[  187.626110][ T5029] usb 3-1: Manufacturer: syz
[  187.628010][ T5029] usb 3-1: SerialNumber: syz
[  187.632074][ T5029] usb 3-1: config 0 descriptor??
[  187.636217][ T5029] asix 3-1:0.0: probe with driver asix failed with error -22
[  187.831428][   T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  187.838813][   T32] usb 3-1: USB disconnect, device number 27
[  187.982593][   T10] usb 4-1: Using ep0 maxpacket: 32
[  187.986656][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  187.990802][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  187.995136][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  188.003027][   T10] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  188.006685][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7
[  188.009760][   T10] usb 4-1: Product: syz
[  188.011604][   T10] usb 4-1: Manufacturer: syz
[  188.013754][   T10] usb 4-1: SerialNumber: syz
[  188.018045][   T10] usb 4-1: config 0 descriptor??
[  188.027388][   T10] usb 4-1: no audio or video endpoints found
[  188.192095][ T9336] loop4: detected capacity change from 0 to 512
[  188.208289][ T9336] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 150994962)!
[  188.215664][ T9336] EXT4-fs (loop4): group descriptors corrupted!
[  188.229276][   T32] usb 4-1: USB disconnect, device number 15
[  188.561353][ T5029] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  188.713668][ T5029] usb 5-1: Using ep0 maxpacket: 32
[  188.720263][ T5029] usb 5-1: unable to get BOS descriptor or descriptor too short
[  188.725444][ T5029] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 17955, setting to 1024
[  188.730837][ T5029] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 28, changing to 7
[  188.736172][ T5029] usb 5-1: config 1 interface 2 has no altsetting 0
[  188.746042][ T5029] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  188.753825][ T5029] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.760718][ T5029] usb 5-1: Product: syz
[  188.764634][ T5029] usb 5-1: Manufacturer: syz
[  188.767838][ T5029] usb 5-1: SerialNumber: syz
[  189.115545][ T9343] loop2: detected capacity change from 0 to 131072
[  189.118993][ T9343] F2FS-fs (loop2): invalid crc value
[  189.181530][ T9343] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  189.191123][ T9343] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  189.218320][ T5029] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  189.256142][ T5029] usb 5-1: 2:1 : unsupported sample bitwidth 10 in 255 bytes
[  189.260143][ T5029] usb 5-1: selecting invalid altsetting 0
[  189.336560][ T5029] usb 5-1: USB disconnect, device number 3
[  189.660719][ T9355] bond1: entered promiscuous mode
[  189.664737][ T9355] 8021q: adding VLAN 0 to HW filter on device bond1
[  189.717144][ T9360] loop3: detected capacity change from 0 to 2048
[  189.724418][ T9360] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  189.758172][ T9360] overlay: filesystem on ./file0 is read-only
[  189.855796][ T9362] block nbd2: shutting down sockets
[  189.865649][ T9372] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  189.909153][ T9375] loop2: detected capacity change from 0 to 8
[  189.915521][ T9376] ==================================================================
[  189.915528][ T9376] BUG: KASAN: stack-out-of-bounds in sys_fillrect+0x1f67/0x2570
[  189.915546][ T9376] Write of size 8 at addr ffffc90004eefbe0 by task syz.4.1430/9376
[  189.915553][ T9376] 
[  189.915560][ T9376] CPU: 0 UID: 0 PID: 9376 Comm: syz.4.1430 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  189.915572][ T9376] Tainted: [L]=SOFTLOCKUP
[  189.915574][ T9376] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  189.915579][ T9376] Call Trace:
[  189.915583][ T9376]  <TASK>
[  189.915586][ T9376]  dump_stack_lvl+0xe8/0x150
[  189.915599][ T9376]  print_address_description+0x55/0x1e0
[  189.915610][ T9376]  ? sys_fillrect+0x1f67/0x2570
[  189.915620][ T9376]  print_report+0x58/0x70
[  189.915633][ T9376]  kasan_report+0x117/0x150
[  189.915646][ T9376]  ? sys_fillrect+0x1f67/0x2570
[  189.915658][ T9376]  sys_fillrect+0x1f67/0x2570
[  189.915671][ T9376]  drm_fbdev_shmem_defio_fillrect+0x2c/0x110
[  189.915683][ T9376]  bit_clear+0x168/0x200
[  189.915693][ T9376]  ? __pfx_bit_clear+0x10/0x10
[  189.915704][ T9376]  ? __pfx_bit_clear+0x10/0x10
[  189.915713][ T9376]  __fbcon_clear+0x9cd/0xd30
[  189.915725][ T9376]  fbcon_scroll+0x47e/0x7c0
[  189.915734][ T9376]  con_scroll+0x783/0xa10
[  189.915743][ T9376]  csi_ECMA+0x486/0x6850
[  189.915751][ T9376]  ? atomic_notifier_call_chain+0x26/0x180
[  189.915761][ T9376]  ? atomic_notifier_call_chain+0x26/0x180
[  189.915769][ T9376]  ? atomic_notifier_call_chain+0x26/0x180
[  189.915779][ T9376]  do_con_write+0x41ac/0x5500
[  189.915786][ T9376]  ? lock_acquire+0x115/0x350
[  189.915795][ T9376]  ? look_up_lock_class+0x57/0x110
[  189.915811][ T9376]  ? __pfx_do_con_write+0x10/0x10
[  189.915818][ T9376]  ? trace_contention_end+0x3d/0x140
[  189.915829][ T9376]  ? __mutex_lock+0x30d/0x1550
[  189.915836][ T9376]  ? __lock_acquire+0x691/0x2e50
[  189.915845][ T9376]  ? file_tty_write+0x2a2/0x9c0
[  189.915856][ T9376]  ? do_raw_spin_lock+0x12b/0x2f0
[  189.915863][ T9376]  ? n_tty_write+0x66d/0x11e0
[  189.915871][ T9376]  ? __pfx___mutex_lock+0x10/0x10
[  189.915881][ T9376]  con_write+0x27/0x290
[  189.915889][ T9376]  n_tty_write+0xd49/0x11e0
[  189.915901][ T9376]  ? __pfx_n_tty_write+0x10/0x10
[  189.915909][ T9376]  ? __pfx_woken_wake_function+0x10/0x10
[  189.915917][ T9376]  ? rcu_is_watching+0x15/0xb0
[  189.915927][ T9376]  ? kfree+0x4d/0x640
[  189.915936][ T9376]  ? __pfx_n_tty_write+0x10/0x10
[  189.915943][ T9376]  file_tty_write+0x509/0x9c0
[  189.915955][ T9376]  vfs_write+0x612/0xba0
[  189.915964][ T9376]  ? __pfx_vfs_write+0x10/0x10
[  189.915973][ T9376]  ? __fget_files+0x2a/0x420
[  189.915981][ T9376]  ksys_write+0x150/0x270
[  189.915989][ T9376]  ? __pfx_ksys_write+0x10/0x10
[  189.915998][ T9376]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.916005][ T9376]  do_syscall_64+0x174/0x580
[  189.916013][ T9376]  ? trace_irq_disable+0x3b/0x140
[  189.916023][ T9376]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.916030][ T9376] RIP: 0033:0x7fe6bc59e0d9
[  189.916037][ T9376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  189.916044][ T9376] RSP: 002b:00007fe6bd4ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  189.916053][ T9376] RAX: ffffffffffffffda RBX: 00007fe6bc825fa0 RCX: 00007fe6bc59e0d9
[  189.916058][ T9376] RDX: 0000000000001006 RSI: 0000200000002100 RDI: 0000000000000004
[  189.916063][ T9376] RBP: 00007fe6bc635024 R08: 0000000000000000 R09: 0000000000000000
[  189.916067][ T9376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  189.916072][ T9376] R13: 00007fe6bc826038 R14: 00007fe6bc825fa0 R15: 00007fffca3955d8
[  189.916080][ T9376]  </TASK>
[  189.916082][ T9376] 
[  189.916085][ T9376] The buggy address belongs to a vmalloc virtual mapping
[  189.916091][ T9376] The buggy address belongs to the physical page:
[  189.916095][ T9376] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x16bdb7
[  189.916102][ T9376] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff)
[  189.916113][ T9376] raw: 057ff00000000000 0000000000000000 ffffea0005af6dc8 0000000000000000
[  189.916119][ T9376] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  189.916123][ T9376] page dumped because: kasan: bad access detected
[  189.916127][ T9376] page_owner tracks the page as allocated
[  189.916130][ T9376] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 2, tgid 2 (kthreadd), ts 54308535363
[  189.916144][ T9376]  post_alloc_hook+0x1f9/0x250
[  189.916153][ T9376]  get_page_from_freelist+0x2205/0x2280
[  189.916162][ T9376]  __alloc_frozen_pages_noprof+0x217/0x5a0
[  189.916172][ T9376]  __alloc_pages_noprof+0x10/0x100
[  189.916181][ T9376]  alloc_pages_node_noprof+0xe2/0x140
[  189.916190][ T9376]  __vmalloc_node_range_noprof+0x6d2/0x1540
[  189.916198][ T9376]  __vmalloc_node_noprof+0xc2/0x100
[  189.916205][ T9376]  dup_task_struct+0x2ae/0x8c0
[  189.916212][ T9376]  copy_process+0x820/0x4390
[  189.916220][ T9376]  kernel_clone+0x2d7/0x940
[  189.916227][ T9376]  kernel_thread+0x13f/0x1b0
[  189.916234][ T9376]  kthreadd+0x4ec/0x6e0
[  189.916242][ T9376]  ret_from_fork+0x514/0xb70
[  189.916251][ T9376]  ret_from_fork_asm+0x1a/0x30
[  189.916260][ T9376] page last free pid 5359 tgid 5359 ts 29814798212 stack trace:
[  189.916266][ T9376]  __free_frozen_pages+0xc8f/0xd80
[  189.916273][ T9376]  __slab_free+0x274/0x2c0
[  189.916281][ T9376]  qlist_free_all+0x99/0x100
[  189.916290][ T9376]  kasan_quarantine_reduce+0x148/0x160
[  189.916298][ T9376]  __kasan_slab_alloc+0x22/0x80
[  189.916307][ T9376]  kmem_cache_alloc_noprof+0x2a0/0x5f0
[  189.916315][ T9376]  do_getname+0x2e/0x250
[  189.916324][ T9376]  vfs_fstatat+0x45/0x170
[  189.916333][ T9376]  __x64_sys_newfstatat+0x151/0x200
[  189.916342][ T9376]  do_syscall_64+0x174/0x580
[  189.916349][ T9376]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.916356][ T9376] 
[  189.916358][ T9376] Memory state around the buggy address:
[  189.916362][ T9376]  ffffc90004eefa80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  189.916367][ T9376]  ffffc90004eefb00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  189.916372][ T9376] >ffffc90004eefb80: 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1
[  189.916375][ T9376]                                                        ^
[  189.916379][ T9376]  ffffc90004eefc00: f8 f8 f8 f2 f2 f2 f2 f2 00 00 f3 f3 00 00 00 00
[  189.916384][ T9376]  ffffc90004eefc80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  189.916388][ T9376] ==================================================================
[  189.916393][ T9376] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  189.916399][ T9376] CPU: 0 UID: 0 PID: 9376 Comm: syz.4.1430 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  189.916409][ T9376] Tainted: [L]=SOFTLOCKUP
[  189.916412][ T9376] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  189.916416][ T9376] Call Trace:
[  189.916419][ T9376]  <TASK>
[  189.916422][ T9376]  vpanic+0x56c/0xa60
[  189.916432][ T9376]  ? __pfx_vpanic+0x10/0x10
[  189.916473][ T9376]  panic+0xc5/0xd0
[  189.916484][ T9376]  ? __pfx_panic+0x10/0x10
[  189.916494][ T9376]  ? sys_fillrect+0x1f67/0x2570
[  189.916505][ T9376]  ? rcu_is_watching+0x15/0xb0
[  189.916516][ T9376]  ? sys_fillrect+0x1f67/0x2570
[  189.916528][ T9376]  check_panic_on_warn+0x89/0xb0
[  189.916539][ T9376]  ? sys_fillrect+0x1f67/0x2570
[  189.916550][ T9376]  end_report+0x73/0x170
[  189.916561][ T9376]  ? sys_fillrect+0x1f67/0x2570
[  189.916571][ T9376]  kasan_report+0x128/0x150
[  189.916581][ T9376]  ? sys_fillrect+0x1f67/0x2570
[  189.916592][ T9376]  sys_fillrect+0x1f67/0x2570
[  189.916604][ T9376]  drm_fbdev_shmem_defio_fillrect+0x2c/0x110
[  189.916639][ T9376]  bit_clear+0x168/0x200
[  189.916650][ T9376]  ? __pfx_bit_clear+0x10/0x10
[  189.916661][ T9376]  ? __pfx_bit_clear+0x10/0x10
[  189.916670][ T9376]  __fbcon_clear+0x9cd/0xd30
[  189.916681][ T9376]  fbcon_scroll+0x47e/0x7c0
[  189.916691][ T9376]  con_scroll+0x783/0xa10
[  189.916701][ T9376]  csi_ECMA+0x486/0x6850
[  189.916710][ T9376]  ? atomic_notifier_call_chain+0x26/0x180
[  189.916721][ T9376]  ? atomic_notifier_call_chain+0x26/0x180
[  189.916730][ T9376]  ? atomic_notifier_call_chain+0x26/0x180
[  189.916741][ T9376]  do_con_write+0x41ac/0x5500
[  189.916749][ T9376]  ? lock_acquire+0x115/0x350
[  189.916758][ T9376]  ? look_up_lock_class+0x57/0x110
[  189.916773][ T9376]  ? __pfx_do_con_write+0x10/0x10
[  189.916781][ T9376]  ? trace_contention_end+0x3d/0x140
[  189.916792][ T9376]  ? __mutex_lock+0x30d/0x1550
[  189.916800][ T9376]  ? __lock_acquire+0x691/0x2e50
[  189.916808][ T9376]  ? file_tty_write+0x2a2/0x9c0
[  189.916820][ T9376]  ? do_raw_spin_lock+0x12b/0x2f0
[  189.916826][ T9376]  ? n_tty_write+0x66d/0x11e0
[  189.916835][ T9376]  ? __pfx___mutex_lock+0x10/0x10
[  189.916846][ T9376]  con_write+0x27/0x290
[  189.916853][ T9376]  n_tty_write+0xd49/0x11e0
[  189.916865][ T9376]  ? __pfx_n_tty_write+0x10/0x10
[  189.916874][ T9376]  ? __pfx_woken_wake_function+0x10/0x10
[  189.916882][ T9376]  ? rcu_is_watching+0x15/0xb0
[  189.916892][ T9376]  ? kfree+0x4d/0x640
[  189.916900][ T9376]  ? __pfx_n_tty_write+0x10/0x10
[  189.916908][ T9376]  file_tty_write+0x509/0x9c0
[  189.916920][ T9376]  vfs_write+0x612/0xba0
[  189.916929][ T9376]  ? __pfx_vfs_write+0x10/0x10
[  189.916938][ T9376]  ? __fget_files+0x2a/0x420
[  189.916946][ T9376]  ksys_write+0x150/0x270
[  189.916954][ T9376]  ? __pfx_ksys_write+0x10/0x10
[  189.916963][ T9376]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.916971][ T9376]  do_syscall_64+0x174/0x580
[  189.916978][ T9376]  ? trace_irq_disable+0x3b/0x140
[  189.916988][ T9376]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.916995][ T9376] RIP: 0033:0x7fe6bc59e0d9
[  189.917001][ T9376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  189.917007][ T9376] RSP: 002b:00007fe6bd4ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  189.917016][ T9376] RAX: ffffffffffffffda RBX: 00007fe6bc825fa0 RCX: 00007fe6bc59e0d9
[  189.917021][ T9376] RDX: 0000000000001006 RSI: 0000200000002100 RDI: 0000000000000004
[  189.917026][ T9376] RBP: 00007fe6bc635024 R08: 0000000000000000 R09: 0000000000000000
[  189.917031][ T9376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  189.917035][ T9376] R13: 00007fe6bc826038 R14: 00007fe6bc825fa0 R15: 00007fffca3955d8
[  189.917043][ T9376]  </TASK>
[  189.917704][ T9376] Kernel Offset: disabled

VM DIAGNOSIS:
04:10:56  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000005b RBX=000000000000005b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000033679 RDI=000000000003367a RBP=00000000000003f8 RSP=ffffc90003ecec10
R8 =ffff88816c158237 R9 =1ffff1102d82b046 R10=dffffc0000000000 R11=ffffffff85671be0
R12=dffffc0000000000 R13=ffffffff9aacf080 R14=ffffffff9aacf0c0 R15=0000000000000000
RIP=ffffffff85671c5c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe6bd4ef6c0 ffffffff 00c00000
GS =0000 ffff88818d95c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe6bd35da08 CR3=000000010e42c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff812ac330 ffffffff812ac17b
XMM02=ffffffff812af3f1 ffffffff812af3af XMM03=ffffffff812af53c ffffffff812af43a
XMM04=ffffffff812afb20 ffffffff812af7bd XMM05=ffffffff812af762 ffffffff812af53c
XMM06=ffffffff812af43a ffffffff812af3f1 XMM07=ffffffff812af3af ffffffff812af350
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff816c84dc RBX=0000000000000000 RCX=ffff88816e109e00 RDX=0000000000010000
RSI=0000000000000008 RDI=ffffffff937162e0 RBP=0000000000000000 RSP=ffffc90000a08fc0
R8 =ffffffff937162e7 R9 =1ffffffff26e2c5c R10=dffffc0000000000 R11=fffffbfff26e2c5d
R12=0000000000000000 R13=0000000000000000 R14=0000000000000001 R15=dffffc0000000000
RIP=ffffffff816c84dd RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f807758cc80 ffffffff 00c00000
GS =0000 ffff8882a8f5c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f331944de68 CR3=0000000178b6e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff00000000 0000000000000000
XMM02=ffff0000000000ff ffffffffffffff00 XMM03=00000000000000ff ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=382d643463342d32 3364632d31393264
XMM06=353961316632785c 646975752d796266 XMM07=32785c6b73696466 32785c2f736b6e69
XMM08=00000000ffffffff 0000000000000000 XMM09=3361613164313232 382d613431382d64
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
