last executing test programs:

2m53.267452514s ago: executing program 0 (id=161):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d00)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}}, 0x80)

2m53.200334926s ago: executing program 0 (id=162):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_MAC={0xa, 0x1, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x4040010)

2m53.064754125s ago: executing program 0 (id=165):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)

2m52.911412535s ago: executing program 0 (id=170):
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000480)='./file1\x00', 0x810010, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRES32, @ANYRESOCT, @ANYRESHEX, @ANYRESDEC=0x0], 0x1, 0x1ff, &(0x7f0000000600)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

2m52.765013532s ago: executing program 0 (id=172):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x800000000006}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\t\x00\x00'], 0x48)

2m52.276397796s ago: executing program 0 (id=176):
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_tx_power={{0xa}, {0x4, 0xc8, 0x7}}}}, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0x80, 0x42}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000340), 0x619, r1}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)

2m51.919206588s ago: executing program 32 (id=176):
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_tx_power={{0xa}, {0x4, 0xc8, 0x7}}}}, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0x80, 0x42}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000340), 0x619, r1}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)

2m24.077752467s ago: executing program 2 (id=401):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x6, 0x2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x2}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x2e}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x0)

2m23.943695878s ago: executing program 2 (id=402):
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7ffe, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000002c0)={0x26e, 0x30314247, 0x3, @discrete={0x0, 0x8298}})

2m23.834041648s ago: executing program 2 (id=403):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x20, 0xffffffff, 0x1, 0x1, 0xfffffffe}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a00), &(0x7f0000000ac0), 0x8, r0}, 0x38)

2m23.673633027s ago: executing program 2 (id=406):
r0 = syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xc, 0xac, &(0x7f0000000100)="$eJzs0jFqwzAUBuBnY7cdu3foDXwHn6BnMB3tzZNLJ9+nlyh07RFygwxZsygYyUP2QAh8H0hPP/8ikP7PP2+xRryvESmlJu2aSPPyNQ7TvLTjMEVEG3+RVWU+Bw+uLs/ZR/4DWz72uatKfzh9f+4rNx+/eT7d7+IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEPV63Wuo+vK8WXbLgEAAP//2Bwh+A==")
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
unshare(0x2040400)
syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0)
getpriority(0x1, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61)
getdents64(r0, 0x0, 0x0)

2m23.530713287s ago: executing program 2 (id=408):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0xa30)
poll(&(0x7f0000000080)=[{r0, 0x200}], 0x1, 0x4)

2m23.27010593s ago: executing program 2 (id=410):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000001e67d8c62934a24ad8b8d006cc5ac0918fd1194bba4488056bbb81175d2960b95ba2b573bdae7c7f26ed5ccf3207010b56fc5c3e6e580a3a82c75146a3c8fd8f354ddd4445a9581ec3cf178a2f2ae16f7882cd24dcd68647f87b5b912f4e9259bbaad2d5e50d5b095c8b744318e9c2fec308985bdc7cc93afb4e9d40faa7baa5e85fa4773469fe829a92fe0149f144d4530c93724e330dfd6aba01baf73cd45edb948bc05ebe84e9901eb635cc447f"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
getpgid(0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)
fcntl$setsig(r3, 0xa, 0x800020)
add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'geneve0\x00'})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r5 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='gid_map\x00')
sendmsg$nl_route_sched(r5, 0x0, 0x20040000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10)
syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)

2m23.061716255s ago: executing program 33 (id=410):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000001e67d8c62934a24ad8b8d006cc5ac0918fd1194bba4488056bbb81175d2960b95ba2b573bdae7c7f26ed5ccf3207010b56fc5c3e6e580a3a82c75146a3c8fd8f354ddd4445a9581ec3cf178a2f2ae16f7882cd24dcd68647f87b5b912f4e9259bbaad2d5e50d5b095c8b744318e9c2fec308985bdc7cc93afb4e9d40faa7baa5e85fa4773469fe829a92fe0149f144d4530c93724e330dfd6aba01baf73cd45edb948bc05ebe84e9901eb635cc447f"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
getpgid(0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)
fcntl$setsig(r3, 0xa, 0x800020)
add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'geneve0\x00'})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r5 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='gid_map\x00')
sendmsg$nl_route_sched(r5, 0x0, 0x20040000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10)
syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)

22.151294266s ago: executing program 4 (id=1875):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
r1 = getgid()
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x2004019, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r1], 0xfc, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000002180), 0x2000, &(0x7f0000004180)={&(0x7f00000002c0)={0x50, 0x0, 0x800, {0x7, 0x29, 0x0, 0x400000, 0x8000, 0x0, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x90, 0x0, 0x0, {0x2000003, 0x3, 0x6, 0x0, 0x1ff, 0x3, {0x6, 0x4, 0x7, 0x5, 0x100000001, 0x6, 0x3, 0x0, 0x101, 0x6000, 0x5, 0x0, r1, 0x801, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = open(&(0x7f0000000100)='./file0/file1\x00', 0xc03, 0x0)
ioctl$SG_IO(r2, 0x401012f7, 0x0)

21.271310071s ago: executing program 4 (id=1888):
r0 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x2c, &(0x7f0000000000)=0x7b, 0x4)

21.271077517s ago: executing program 4 (id=1889):
r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19.560106378s ago: executing program 4 (id=1911):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
unshare(0x60400)
faccessat2(0xffffffffffffffff, 0x0, 0x80, 0x3200)
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00')

19.483097174s ago: executing program 4 (id=1912):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r0, 0x104, 0x1)
getdents64(r0, 0x0, 0x4f)

18.47944856s ago: executing program 4 (id=1915):
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
r4 = timerfd_create(0x0, 0x0)
timerfd_settime(r4, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
mkdir(&(0x7f0000000100)='./bus\x00', 0xe8)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r5, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file2\x00', 0x2050051, 0x0, 0x1, 0x0, 0x0)
r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file2\x00', 0x8800)
getdents(r6, &(0x7f0000001fc0)=""/184, 0x20002078)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000029c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

18.293272279s ago: executing program 34 (id=1915):
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
r4 = timerfd_create(0x0, 0x0)
timerfd_settime(r4, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
mkdir(&(0x7f0000000100)='./bus\x00', 0xe8)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r5, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file2\x00', 0x2050051, 0x0, 0x1, 0x0, 0x0)
r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file2\x00', 0x8800)
getdents(r6, &(0x7f0000001fc0)=""/184, 0x20002078)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000029c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

4.958983874s ago: executing program 1 (id=2077):
r0 = fsopen(&(0x7f0000000000)='9p\x00', 0x0)
unshare(0x8000480)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='9p\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c)

4.593243276s ago: executing program 1 (id=2078):
open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$f2fs(&(0x7f00000105c0), &(0x7f0000010600)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0063edcea4", @ANYRES64=0x0], 0xfd, 0x105c7, &(0x7f0000020c40)="$eJzs3EtvG1UbB/DHzdvr25YI9bZBjIRAiVRbcZJWZYNSaFSQSBVxWbACx3Yst7Ynip0L3SHBjo/CBvEBWFSw4HuwQyyQ2CGBPDNBSWmlKnXjpPn9pOn/zJlznjnjKpGOHTmAY2sy+fOPUlyMsxExERHnI7J2qTgyC3lci4jXI+LErqNU9P/bcSoizkXExWHxvGapuHTh0eKj32/dvvTjz6/dnZx46/r4nhoYtzcjoruWt7e6eaatPO8X/bXNdpbd+c0i8wvdB8V5mudWcyWrsFXbGVfLcq6Vj0/XNvrDXO3U6sNstVez/rVefsP+ZmunTjbhfm09O280V7Js99MsWw/zdW0X+bA/yOs0inpfZuVjMNjJvL+53cyfZ+1BlvXeoOjP66aN5vYwN4ssbhf1tNPI1rGy75f50Puw3dvYTjab6/122ktuVKq3KtWb5ep62mgOmvPlWrdxcz6ZanWGw8qDZq270ErTVqdZqafd6WSqVa+Xq9Vk6k5zpV3rJdVqZa4yU74xXbSuJ3fvfZp0GsnUMN9t9zYG7U4/WU3Xk3zGdDJbmXt7Onmjmnz81XKy/NHi4tLyJ5/f+eze7aUP3isG/WdZydTszOxsuTpTnq1OvzTPvzSO57/2fNM57krjXgDA0WP/D4yD/b/9fxzY/vf74m4Hvv89cTie/0D2/2f38/9/Zj+TYIf9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAsfXryR/ezxqT+fn/i/4LRderEXE1Iq5ExOWI+PsJJuLUnpqXIqJUtJ80/uRja/ipFFmF4ZzTxXEuIhaK469XXvSrAAAAAEfeiadd+O6Xr7+JmBg2s3/eOchVMW7FmzZnRlUve8vnf6Oqdikrtj2iapd3So7ElYg4OfnbiKpdHf6Mnv9iRNWeycSeOLMrSnk89XcGAABwdO3dCYxs9wYAAMCh8+24F8DzevwP6p9tfGnX1OKz4NN5FB8Int1zBgAAABxBpXEvAAAAAHjhsv2/7/8DAACAl1v+/X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/sHP3uIkDURzAn2G9y35p0YqPq1CttqTgEDlCypQpktuk4wyRECfIAUiXI0QQYSZSjFBSeCwr6PeTzIwt+OsZqudBAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJsey+X8bn1z2zRnu2smz90AAAAAp2zK5byaDA/nP9P13+nS34iYRsQkIsYRcap378fXWuYoIoo0P/X+8qiG+4gqYf+Zb+n4ERH/0/H8p+1vAQAAAM7XejVbRPT30+rlXxw18pyz9FsPcuVVj3y+5EobVWFXmdLGr5FZTCKiHD5lSptGRO/XRaa09Pzsff3aMHgzFIeh91FCcd2oRAAAoAP1TmDfvT10Wg8AAABtuey6ALpRrdem/+KnteC0cpgWBL/XzgAAAIBPqOi6AAAAAKB1Vf9v/z8AAAA4b4f9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjTplzO16vZomnOdtdMnrsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADghf15R4EQCIMw2Lu+7zR4/2NJg6amJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG9+95f/E1PjTDL32lh6HknWTo2tU2Pv3Dj6w/j6NQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf7cnUAIBEEY7Dv/c1rMPyxp0BhEqIKFjxnmYQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvuh3v/yfmBpnkrnTxtLxSLJ21di6auw9aBw9GG//BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALnbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrA/9ygKA2Ech9/M7rJJvUfYPuzHGWysRI/gBwiBnMEDeCEbK9vgRfQKCjqprSSFz9P8/sUMzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAr+ny8MRbRBSR+pkijTdfp/eI+Ii07brR520Wu/OxLe9ztj9Myv7+9LuKiCqKJ/8EAGAYdd88Vutm+ZP7m/uX+59bz9tmMeSjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4snP/rE2EcRzAnyRNtE52EMFJqYggGpNoyZBFodC3EdsYiqlKmsEWl+4uvgTBQcQtL8HB3UUcBP/MBRVcXJQkl/qUFrkOuYT284Hn8stx3D1PhsD3fpcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCR7O6Ea+M6F0K4MPevHvj44+nqYa9v+4vnxmN54dX3+JyDUxRDCPfXO62bGa5lll1Oedzm1vaDZqfT6ioUCsVeMeEvKAAAjpViMga5/kuxvzLYl2uE8OfF/vx/JapDyvz/7Nvru/G14vxfyWyFsy1t/i/3Nh6XN7e2r69vNNutduvhUu1WpVq9XVsqD2+nlN1UAQAA4D9KyYjzf75xsP9/JqpDyvx/79PnN/G1CvL/AUfv/094QgAAACfYwsVfP3OH7M+VSuFJs9frVkbbvffV0XYKU00vWdCpZMT5v9CY8twAAACATOzu5Pb1/9eiOqTs/5+9874dn7MQQphP+v83Vh911rJbzsyapd//T3ipAAAATNF8MuL+f3H4/H/+0viYfAjh6uKoTv4GMFX+//Du5fn4WvHz/7XsljiT8vXR55Em/w+PrYcwV89gYgAAABxLp5MxyP9fi/2V7u/nyyXP/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwlx07RmkgiAIAutnNKhZiQGysBLUV7awCFoJ4DVEQbOzTeABPkyPYp1VLa0nhDeTP7oik0ICyCfoezP7PzsD8nWr/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN+anhQ7Oa/iMWjysn339Da6iPg8E8PDeHcrRuS9bsteQvWXs/04o+POigEAAOCfqnJ/XxTFSz0+i1gOU/+/H/laOzdab2Lu52f7/hxz7x9j+/X28WOjQbNPdMNX1zeXh5194XLbm3Pdxhxr0l1Cc0NTpaua8vxuc1qnU+/dTyanKyld/VnFAMBvOMixTfL/UcSjRRYGwJ/Vb0fxqf+vhoutCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAL7wEAAP///r1cWg==")

2.822350487s ago: executing program 1 (id=2094):
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
socket$inet(0x2, 0x4000000805, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, 0x0, &(0x7f0000000240))

1.840431321s ago: executing program 1 (id=2095):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x2440, 0x4)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18)
sendmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002680)="75f60520bd942f2aef", 0x9}], 0x1}}], 0x1, 0x40)
recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

907.832529ms ago: executing program 1 (id=2102):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0xfffffffc)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdb933201}, 0x10)

859.385066ms ago: executing program 3 (id=2105):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x6, 0x4, 0x1c000000, 0x2, "0062ba7d820740ff00"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x13)
ioctl$TCXONC(r1, 0x540a, 0x2)

770.113832ms ago: executing program 3 (id=2106):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfb, {0xa, 0x17, 0x0, 0xff}}, 0x18}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000000)=0x46, 0x4)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

709.29374ms ago: executing program 3 (id=2107):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000057c0)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x80}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000084)

708.888455ms ago: executing program 3 (id=2108):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4)
recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000180)={0x1})
ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x1, 0x1})
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
lseek(r3, 0x9, 0x0)
write$tun(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="f0f0ced5dcc5b184f414eee71d0e671938a77553b1676d323c1170033ef4b5de72bcf0384f76ccd37cf1de42d5302bacde9ded400d0a001a546a05c394ef6ec75a972a2b3c37514e153ece3fba4f5cba6680dcc003b013e7179e7efcf74d275e83f5587d"], 0x3)
pipe(0x0)
r4 = socket$kcm(0x2d, 0x2, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r4, r5, 0x0, 0xd0)
syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1)

410.873078ms ago: executing program 5 (id=2111):
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00')
write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0', [], 0xa, "5c14d003ea"}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00')
preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0)

409.142142ms ago: executing program 3 (id=2112):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

320.036316ms ago: executing program 5 (id=2113):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0xffffffff, 0xa2, 0x0, 0x5}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001a004102"], 0x14}}, 0x0)

319.757298ms ago: executing program 5 (id=2114):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc)

219.340868ms ago: executing program 5 (id=2115):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001140))
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000200)={'syzkaller0\x00'})
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"})

159.19349ms ago: executing program 3 (id=2116):
syz_usb_connect(0x0, 0x48, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c36e8240ac051c92fb9d0000000109023600010000000009040000040341000009050a0000000000000905ffff"], 0x0)

150.999552ms ago: executing program 5 (id=2117):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000013"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x12, 0x0, 0x0, 0x406}, 0x40020000)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0)

82.985428ms ago: executing program 1 (id=2118):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f30216000000000000000000000002001b0008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)

0s ago: executing program 5 (id=2119):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x3})

kernel console output (not intermixed with test programs):

 firmware
[  136.409122][   T10] usb 2-1: USB disconnect, device number 11
[  136.727690][ T7503] loop4: detected capacity change from 0 to 32768
[  136.738882][ T7503] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.634 (7503)
[  136.752845][ T7503] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  136.758445][ T7503] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  136.815685][ T7503] BTRFS info (device loop4): enabling ssd optimizations
[  136.819180][ T7503] BTRFS info (device loop4): enabling free space tree
[  136.838233][ T6942] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  137.021467][ T7534] netlink: 168 bytes leftover after parsing attributes in process `syz.1.642'.
[  137.143082][ T7537] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  137.657889][ T7537] loop4: detected capacity change from 0 to 32768
[  137.704955][ T7537] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  137.753191][ T7537] XFS (loop4): Ending clean mount
[  137.758659][ T7537] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  138.103457][ T7569] netlink: 28 bytes leftover after parsing attributes in process `syz.3.653'.
[  138.107122][ T7569] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check.
[  138.181903][ T7558] loop1: detected capacity change from 0 to 32768
[  138.187654][ T7558] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section disk_groups: disk 0 has invalid label 15 (have 0)
[  138.187654][ T7558] disk_groups (size 40):
[  138.187654][ T7558] 
[  138.195171][ T7558] bcachefs: bch2_fs_get_tree() error: invalid_sb_disk_groups
[  138.656944][    T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  138.807034][    T9] usb 2-1: Using ep0 maxpacket: 8
[  138.814472][    T9] usb 2-1: config 252 has an invalid interface number: 104 but max is 0
[  138.820735][    T9] usb 2-1: config 252 has no interface number 0
[  138.823127][    T9] usb 2-1: config 252 interface 104 has no altsetting 0
[  138.828965][    T9] usb 2-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice= b.c7
[  138.832357][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.835568][    T9] usb 2-1: Product: syz
[  138.840413][    T9] usb 2-1: Manufacturer: syz
[  138.842338][    T9] usb 2-1: SerialNumber: syz
[  138.853951][    T9] gspca_main: spca501-2.14.0 probing 0497:c001
[  139.058051][    T9] gspca_spca501: reg write: error -71
[  139.060334][    T9] spca501 2-1:252.104: Reg write failed for 0x02,0x07,0x05
[  139.063574][    T9] spca501 2-1:252.104: probe with driver spca501 failed with error -22
[  139.069999][    T9] usb 2-1: USB disconnect, device number 12
[  139.623207][ T7609] netlink: 16 bytes leftover after parsing attributes in process `syz.1.672'.
[  139.660742][ T7611] loop4: detected capacity change from 0 to 1024
[  139.696491][ T7611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.916405][ T7624] loop1: detected capacity change from 0 to 2048
[  139.931319][ T7624] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  140.239797][ T7639] warning: `syz.1.684' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  140.443642][ T7643] loop1: detected capacity change from 0 to 32768
[  140.448235][ T7643] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.686 (7643)
[  140.460778][ T7643] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  140.464871][ T7643] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  140.484660][   T33] audit: type=1800 audit(1758540475.980:7): pid=7611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.673" name="file1" dev="loop4" ino=15 res=0 errno=0
[  140.524336][ T7643] BTRFS info (device loop1): enabling ssd optimizations
[  140.527439][ T7643] BTRFS info (device loop1): enabling free space tree
[  140.539902][   T33] audit: type=1800 audit(1758540476.040:8): pid=7643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.686" name="file1" dev="loop1" ino=260 res=0 errno=0
[  140.569489][ T6942] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.624626][ T5984] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  140.837582][ T7672] netlink: 24 bytes leftover after parsing attributes in process `syz.3.692'.
[  142.331943][ T7725] loop4: detected capacity change from 0 to 4096
[  142.334979][ T7725] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  142.339531][ T7725] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  142.352132][ T7725] ntfs3(loop4): volume is dirty and "force" flag is not set!
[  142.639151][ T7731] batadv0: entered allmulticast mode
[  142.675943][ T6029] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  142.718892][ T7737] 9pnet_fd: Insufficient options for proto=fd
[  142.918453][ T6029] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  142.922492][ T6029] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  142.929864][ T6029] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=a2.bf
[  142.933386][ T6029] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.936477][ T6029] usb 5-1: Product: syz
[  142.946600][ T6029] usb 5-1: Manufacturer: syz
[  142.948472][ T6029] usb 5-1: SerialNumber: syz
[  142.952631][ T6029] usb 5-1: config 0 descriptor??
[  142.957306][ T6029] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  143.161224][ T6029] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71
[  143.179408][ T6029] usb 5-1: USB disconnect, device number 9
[  143.834266][ T7761] block nbd1: Attempted send on invalid socket
[  143.836472][ T7761] I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  143.861245][ T7761] qnx6: unable to read the first superblock
[  143.864130][ T7761] block nbd1: Attempted send on invalid socket
[  143.869736][ T7761] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  143.873260][ T7761] qnx6: unable to read the first superblock
[  143.875514][ T7761] qnx6: unable to read the first superblock
[  143.960831][ T7754] loop4: detected capacity change from 0 to 32768
[  143.973459][ T7754] XFS (loop4): filesystem is marked as having an internal log; do not specify logdev on the mount command line.
[  144.356153][ T7795] Bluetooth: MGMT ver 1.23
[  144.656648][   T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  144.666772][    T9] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  144.806675][   T10] usb 2-1: Using ep0 maxpacket: 32
[  144.810901][   T10] usb 2-1: config 0 has an invalid interface number: 23 but max is 0
[  144.813749][   T10] usb 2-1: config 0 has no interface number 0
[  144.815988][   T10] usb 2-1: config 0 interface 23 has no altsetting 0
[  144.822202][   T10] usb 2-1: New USB device found, idVendor=0557, idProduct=2002, bcdDevice=b6.ad
[  144.825064][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  144.830930][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.833912][   T10] usb 2-1: Product: syz
[  144.835151][   T10] usb 2-1: Manufacturer: syz
[  144.836707][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  144.840106][   T10] usb 2-1: SerialNumber: syz
[  144.843875][    T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  144.849971][   T10] usb 2-1: config 0 descriptor??
[  144.852272][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.857953][    T9] usb 5-1: Product: syz
[  144.859270][    T9] usb 5-1: Manufacturer: syz
[  144.860781][    T9] usb 5-1: SerialNumber: syz
[  144.973024][ T7809] 9pnet: p9_errstr2errno: server reported unknown error @c
[  145.074720][    T9] usb 5-1: 0:2 : does not exist
[  145.077612][ T7799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  145.081401][ T7799] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  145.090726][    T9] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  145.110431][   T10] kaweth 2-1:0.23: Firmware present in device.
[  145.119306][   T10] kaweth 2-1:0.23: Error reading configuration (-71), no net device created
[  145.122472][   T10] kaweth 2-1:0.23: probe with driver kaweth failed with error -5
[  145.134048][   T10] usb 2-1: USB disconnect, device number 13
[  145.139361][    T9] usb 5-1: USB disconnect, device number 10
[  145.699695][   T33] audit: type=1326 audit(1758540481.200:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7818 comm="syz.4.760" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60afd8ec29 code=0x7ffc0000
[  145.729849][   T33] audit: type=1326 audit(1758540481.200:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7818 comm="syz.4.760" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60afd8ec29 code=0x7ffc0000
[  145.741910][   T33] audit: type=1326 audit(1758540481.200:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7818 comm="syz.4.760" exe="/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f60afd8ec29 code=0x7ffc0000
[  145.749788][   T33] audit: type=1326 audit(1758540481.200:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7818 comm="syz.4.760" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60afd8ec29 code=0x7ffc0000
[  145.758381][   T33] audit: type=1326 audit(1758540481.200:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7818 comm="syz.4.760" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60afd8ec29 code=0x7ffc0000
[  145.758482][ T7823] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  146.785701][ T7869] pim6reg1: entered promiscuous mode
[  146.787882][ T7869] pim6reg1: entered allmulticast mode
[  146.977242][ T7878] loop4: detected capacity change from 0 to 16
[  146.984955][ T7878] erofs (device loop4): unidentified algorithms fff0, please upgrade kernel
[  147.028604][ T7880] loop4: detected capacity change from 0 to 16
[  147.037612][ T7880] erofs (device loop4): mounted with root inode @ nid 36.
[  147.288458][ T6029] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  147.437538][ T6029] usb 5-1: Using ep0 maxpacket: 16
[  147.442042][ T6029] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  147.445721][ T6029] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  147.449682][ T6029] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  147.456392][ T6029] usb 5-1: config 0 interface 0 has no altsetting 0
[  147.459262][ T6029] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  147.462882][ T6029] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.469692][ T6029] usb 5-1: config 0 descriptor??
[  147.773415][ T7900] input: syz0 as /devices/virtual/input/input9
[  147.883465][ T6029] hid (null): unknown global tag 0xd5
[  147.885580][ T6029] hid (null): invalid report_size -2057069368
[  147.889861][ T6029] hid (null): unknown global tag 0x2c
[  147.892149][ T6029] hid (null): unknown global tag 0xc
[  147.894415][ T6029] hid (null): unknown global tag 0xd2
[  147.898241][ T6029] hid (null): report_id 0 is invalid
[  147.900592][ T6029] hid (null): report_id 0 is invalid
[  147.904021][ T6029] hid (null): unknown global tag 0xe
[  147.908945][ T6029] hid (null): unknown global tag 0xd
[  147.974560][ T7910] netlink: 92 bytes leftover after parsing attributes in process `syz.1.800'.
[  148.099718][ T6029] usb 5-1: USB disconnect, device number 11
[  149.170468][ T7932] loop1: detected capacity change from 0 to 4096
[  149.175179][ T7932] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  149.208208][ T7932] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  149.262862][ T7930] loop4: detected capacity change from 0 to 32768
[  149.683738][ T6029] kernel write not supported for file /binder/transactions (pid: 6029 comm: kworker/1:5)
[  150.450342][ T7992] netlink: 56 bytes leftover after parsing attributes in process `syz.1.838'.
[  150.456042][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.838'.
[  150.513768][ T7998] loop1: detected capacity change from 0 to 128
[  150.525104][ T7998] EXT4-fs: Ignoring removed nobh option
[  150.534205][ T7998] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  150.550153][ T7998] ext4 filesystem being mounted at /269/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  150.565517][ T7998] syz.1.841 (pid 7998) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  150.602904][ T5984] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  150.776212][ T8009] loop1: detected capacity change from 0 to 4096
[  150.780121][   T33] audit: type=1326 audit(1758540486.280:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.3.848" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715438ec29 code=0x7ffc0000
[  150.800678][   T33] audit: type=1326 audit(1758540486.280:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.3.848" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715438ec29 code=0x7ffc0000
[  150.813831][   T33] audit: type=1326 audit(1758540486.290:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.3.848" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f715438ec29 code=0x7ffc0000
[  150.822315][   T33] audit: type=1326 audit(1758540486.290:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.3.848" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715438ec29 code=0x7ffc0000
[  150.841466][   T33] audit: type=1326 audit(1758540486.290:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.3.848" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f715438ec29 code=0x7ffc0000
[  150.866369][   T33] audit: type=1326 audit(1758540486.290:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.3.848" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f715438ec29 code=0x7ffc0000
[  150.956813][ T2178] ntfs3(loop1): ino=5, mi_enum_attr
[  151.023279][ T8024] loop1: detected capacity change from 0 to 764
[  151.031682][ T8024] rock: directory entry would overflow storage
[  151.035067][ T8024] rock: sig=0x5245, size=8, remaining=5
[  151.943774][ T8068] trusted_key: encrypted_key: keyword '' not recognized
[  152.046485][ T8075] bridge1: entered allmulticast mode
[  152.138300][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.878'.
[  152.634773][ T8092] loop4: detected capacity change from 0 to 1024
[  152.671373][ T8092] hfsplus: bad catalog entry type
[  152.712041][   T27] hfsplus: b-tree write err: -5, ino 4
[  153.413142][ T8098] loop4: detected capacity change from 0 to 32768
[  153.417283][ T8098] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 ./bus (7:4) scanned by syz.4.886 (8098)
[  153.422021][ T8098] btrfs: Unknown parameter 'dont_appraise'
[  153.718546][ T8113] geneve2: entered promiscuous mode
[  153.720715][ T8113] geneve2: entered allmulticast mode
[  154.594284][ T8123] loop4: detected capacity change from 0 to 32768
[  154.648125][ T8123] (syz.4.895,8123,1):ocfs2_read_journal_inode:1659 ERROR: status = -13
[  154.651851][ T8123] (syz.4.895,8123,1):ocfs2_mark_dead_nodes:1942 ERROR: status = -13
[  154.655272][ T8123] (syz.4.895,8123,0):ocfs2_check_volume:2420 ERROR: status = -13
[  154.661754][ T8123] (syz.4.895,8123,0):ocfs2_check_volume:2432 ERROR: status = -13
[  154.676130][ T8123] (syz.4.895,8123,0):ocfs2_mount_volume:1764 ERROR: status = -13
[  154.706297][ T8123] (syz.4.895,8123,0):ocfs2_fill_super:1177 ERROR: status = -13
[  154.969424][ T8135] loop1: detected capacity change from 0 to 32768
[  154.976180][ T8135] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.900 (8135)
[  154.986111][ T8135] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  154.990567][ T8135] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  155.058989][ T8135] BTRFS info (device loop1): enabling ssd optimizations
[  155.062005][ T8135] BTRFS info (device loop1): using spread ssd allocation scheme
[  155.065265][ T8135] BTRFS info (device loop1): enabling free space tree
[  155.069498][ T8135] BTRFS info (device loop1): doing ref verification
[  155.072366][ T8135] BTRFS info (device loop1): max_inline set to 4096
[  155.102466][ T5984] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  155.107614][ T8139] loop4: detected capacity change from 0 to 32768
[  155.112248][ T8139] 
[  155.112248][ T8139]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  155.112248][ T8139] 
[  155.155794][ T8139] read_mapping_page failed!
[  155.159743][ T8139] ERROR: (device loop4): txCommit: 
[  155.159743][ T8139] 
[  155.225363][ T6942] 
[  155.225363][ T6942]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  155.225363][ T6942] 
[  155.246172][ T6942] 
[  155.246172][ T6942]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  155.246172][ T6942] 
[  155.750615][ T8162] loop4: detected capacity change from 0 to 32768
[  155.754277][ T8162] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.904 (8162)
[  155.762412][ T8182] loop1: detected capacity change from 0 to 16
[  155.768619][ T8182] erofs (device loop1): mounted with root inode @ nid 36.
[  155.772550][ T8162] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  155.780442][ T8162] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  155.786153][ T8162] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  155.795722][ T8184] netlink: 36 bytes leftover after parsing attributes in process `syz.3.916'.
[  155.954278][ T8162] BTRFS info (device loop4): rebuilding free space tree
[  155.987011][ T8162] BTRFS info (device loop4): disabling free space tree
[  155.996424][ T8162] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  156.002985][ T8162] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  156.034023][ T8204] netlink: 'syz.3.919': attribute type 21 has an invalid length.
[  156.037376][ T8204] netlink: 128 bytes leftover after parsing attributes in process `syz.3.919'.
[  156.041978][ T8204] netlink: 'syz.3.919': attribute type 5 has an invalid length.
[  156.044978][ T8204] netlink: 3 bytes leftover after parsing attributes in process `syz.3.919'.
[  156.068417][ T8205] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36
[  156.082570][ T8205] erofs (device loop1): failed to decompress -44 in[46, 4050] out[1851]
[  156.086336][ T8205] erofs (device loop1): read error -117 @ 43 of nid 36
[  156.100777][ T8205] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36
[  156.104378][ T8205] erofs (device loop1): failed to decompress -44 in[46, 4050] out[1851]
[  156.107942][ T8205] erofs (device loop1): read error -117 @ 43 of nid 36
[  156.144206][ T8205] random: crng reseeded on system resumption
[  156.391778][ T8162] BTRFS info (device loop4): enabling ssd optimizations
[  156.406304][ T8162] BTRFS info (device loop4): turning off barriers
[  156.439293][ T8162] BTRFS info (device loop4): enabling disk space caching
[  156.461030][ T8162] BTRFS info (device loop4): force clearing of disk cache
[  156.491441][ T8162] BTRFS info (device loop4): doing ref verification
[  156.516132][ T8162] BTRFS info (device loop4): force zlib compression, level 3
[  156.811811][ T8162] BTRFS info (device loop4): balance: start -d -m
[  156.831907][ T8162] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata
[  156.966504][ T8162] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata
[  157.104689][ T8162] BTRFS info (device loop4): found 9 extents, stage: move data extents
[  157.137600][ T8162] BTRFS info (device loop4): balance: canceled
[  157.210184][ T6942] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  157.727121][   T33] audit: type=1326 audit(1758540493.230:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.3.942" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f715438ec29 code=0x0
[  157.856776][   T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  158.009907][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  158.014162][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  158.019781][   T10] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  158.023011][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.026246][   T10] usb 2-1: Product: syz
[  158.028172][   T10] usb 2-1: Manufacturer: syz
[  158.030169][   T10] usb 2-1: SerialNumber: syz
[  158.033612][   T10] usb 2-1: config 0 descriptor??
[  158.037868][   T10] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  158.048249][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  158.051791][   T10] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  158.054614][   T10] usb 2-1: media controller created
[  158.069090][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  158.095546][   T10] DVB: Unable to find symbol tda10046_attach()
[  158.097651][   T10] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  158.100371][   T10] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  159.061884][   T10] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  159.068721][   T10] usb 2-1: USB disconnect, device number 14
[  159.314182][ T8277] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  159.314182][ T8277] The task syz.3.949 (8277) triggered the difference, watch for misbehavior.
[  159.685834][ T8279] loop4: detected capacity change from 0 to 32768
[  159.689620][ T8279] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.950 (8279)
[  159.699701][ T8279] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  159.703622][ T8279] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  159.738489][ T8279] BTRFS info (device loop4): enabling ssd optimizations
[  159.741282][ T8279] BTRFS info (device loop4): enabling free space tree
[  159.873985][ T6942] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  160.139516][ T8314] overlayfs: failed to clone upperpath
[  160.442615][ T8323] loop1: detected capacity change from 0 to 32768
[  160.445800][ T8323] XFS: ikeep mount option is deprecated.
[  160.506918][    T9] usb 5-1: new low-speed USB device number 12 using dummy_hcd
[  160.513589][ T8323] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  160.552269][ T8323] XFS (loop1): Ending clean mount
[  160.557023][ T8323] XFS (loop1): Quotacheck needed: Please wait.
[  160.581484][ T8323] XFS (loop1): Quotacheck: Done.
[  160.659981][    T9] usb 5-1: config 9 has an invalid interface number: 1 but max is 0
[  161.191142][    T9] usb 5-1: config 9 has no interface number 0
[  161.193947][    T9] usb 5-1: config 9 interface 1 has no altsetting 0
[  161.201912][ T5984] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  161.210373][    T9] usb 5-1: string descriptor 0 read error: -22
[  161.212773][    T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b140, bcdDevice=75.36
[  161.219441][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.229779][    T9] cx231xx 5-1:9.1: New device   @ 1.5 Mbps (2040:b140) with 1 interfaces
[  161.232983][    T9] cx231xx 5-1:9.1: Not found matching IAD interface
[  161.451245][   T10] usb 5-1: USB disconnect, device number 12
[  161.706759][   T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  161.878427][   T24] usb 2-1: Using ep0 maxpacket: 16
[  161.885260][   T24] usb 2-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47
[  161.889167][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.892387][   T24] usb 2-1: Product: syz
[  161.894050][   T24] usb 2-1: Manufacturer: syz
[  161.895875][   T24] usb 2-1: SerialNumber: syz
[  161.903696][   T24] usb 2-1: config 0 descriptor??
[  161.910611][   T24] gspca_main: sn9c2028-2.14.0 probing 0c45:800a
[  162.171472][   T24] gspca_sn9c2028: read1 error -32
[  162.382243][   T24] gspca_sn9c2028: read1 error -71
[  162.385922][   T24] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -71
[  162.403516][   T24] usb 2-1: USB disconnect, device number 15
[  163.029411][ T8376] loop4: detected capacity change from 0 to 4096
[  163.035206][ T8376] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  163.051307][ T8376] ntfs3(loop4): ino=1a, mi_enum_attr
[  163.053281][ T8376] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  163.073739][ T8376] ntfs3(loop4): ino=1e, "file1" ntfs_sync_inode failed, -22.
[  163.116134][ T2178] ntfs3(loop4): ino=1e, ntfs3_write_inode failed, -22.
[  163.145825][ T8383] loop1: detected capacity change from 0 to 256
[  163.150936][ T8383] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  163.164118][ T8383] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  163.513739][ T8407] openvswitch: netlink: Multiple metadata blocks provided
[  163.599003][ T8411] openvswitch: netlink: Missing key (keys=1040, expected=2000)
[  164.540309][ T8423] loop4: detected capacity change from 0 to 32768
[  164.548476][ T8423] (syz.4.1000,8423,1):ocfs2_sb_probe:759 ERROR: incompatible version: 2.33686018
[  164.551870][ T8423] (syz.4.1000,8423,1):ocfs2_sb_probe:772 ERROR: This is an ocfs v1 filesystem which must be upgraded before mounting with ocfs v2
[  164.556451][ T8423] (syz.4.1000,8423,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  164.560268][ T8423] (syz.4.1000,8423,1):ocfs2_fill_super:1177 ERROR: status = -22
[  164.630481][ T8436] loop1: detected capacity change from 0 to 2048
[  164.634180][ T8436] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  164.651137][ T8437] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  164.651312][ T8436] syz.1.1006: attempt to access beyond end of device
[  164.651312][ T8436] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  164.690772][ T8436] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: directory entry across blocks - offset=104, inode=16, rec_len=1816, name_len=0
[  164.710179][ T8436] Remounting filesystem read-only
[  164.834093][   T24] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0
[  164.840740][   T24] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0
[  164.843828][   T24] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0
[  164.847067][   T24] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0
[  164.850902][   T24] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0
[  164.853273][   T24] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0
[  164.855716][   T24] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0
[  164.859755][   T24] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0
[  164.862317][   T24] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0
[  164.864763][   T24] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0
[  164.880223][   T24] hid-generic 0006:0004:0009.0003: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[  165.098741][ T8453] netlink: 'syz.1.1013': attribute type 10 has an invalid length.
[  165.130696][ T8453] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  165.461422][ T8456] loop4: detected capacity change from 0 to 1024
[  167.540022][ T8490] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1027'.
[  167.543473][ T8490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1027'.
[  167.547847][ T8490] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1027'.
[  167.669112][ T8495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1029'.
[  167.674509][ T8495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1029'.
[  167.894465][ T8502] IPv6: NLM_F_CREATE should be specified when creating new route
[  168.173942][ T8509] tipc: Invalid UDP bearer configuration
[  168.173988][ T8509] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  168.197409][   T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  168.349324][   T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  168.355367][   T10] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  168.362091][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  168.368009][   T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  168.375642][   T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  168.385528][   T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  168.389534][   T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  168.393110][   T10] usb 2-1: Product: syz
[  168.395179][   T10] usb 2-1: Manufacturer: syz
[  168.407092][   T10] cdc_wdm 2-1:1.0: skipping garbage
[  168.409417][   T10] cdc_wdm 2-1:1.0: skipping garbage
[  168.415939][   T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  168.418829][   T10] cdc_wdm 2-1:1.0: Unknown control protocol
[  168.428641][ T5992] tipc: Subscription rejected, illegal request
[  168.815188][ T6159] usb 2-1: USB disconnect, device number 16
[  168.986774][   T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  169.147859][   T10] usb 5-1: Using ep0 maxpacket: 32
[  169.153978][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  169.157264][   T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  169.161538][   T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  169.165584][   T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  169.169671][   T10] usb 5-1: config 1 interface 1 has no altsetting 0
[  169.179815][   T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  169.182627][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.185011][   T10] usb 5-1: Product: syz
[  169.186373][   T10] usb 5-1: Manufacturer: syz
[  169.190124][   T10] usb 5-1: SerialNumber: syz
[  169.406345][   T10] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[  169.410884][   T10] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[  169.455677][   T10] usb 5-1: USB disconnect, device number 13
[  170.394091][ T8571] loop4: detected capacity change from 0 to 65
[  170.400064][ T8571] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway
[  171.103171][ T5982] Bluetooth: hci0: unexpected event for opcode 0x2062
[  171.218955][ T8577] loop1: detected capacity change from 0 to 40427
[  171.226377][ T8577] F2FS-fs (loop1): build fault injection rate: 14
[  171.229287][ T8577] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  171.234419][ T8577] F2FS-fs (loop1): invalid crc value
[  171.240627][    C0] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  171.254429][    C0] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  171.373542][ T8577] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  171.379144][ T8577] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  171.384612][ T8577] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  171.432124][ T8577] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  171.444990][ T8577] F2FS-fs (loop1): inject dquot initialize in f2fs_dquot_initialize of f2fs_create+0x14c/0x5c0
[  171.487352][ T5984] F2FS-fs (loop1): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0xab1/0x1cf0
[  171.496917][ T5984] F2FS-fs (loop1): inconsistent node block, node_type:0, nid:13, node_footer[nid:13,ino:3,ofs:191623,cpver:0,blkaddr:0]
[  171.535122][   T79] F2FS-fs (loop1): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x249/0x1cf0
[  171.541967][   T79] F2FS-fs (loop1): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:10241045589465957861,blkaddr:4104]
[  171.555130][   T79] kworker/u9:3: attempt to access beyond end of device
[  171.555130][   T79] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  171.574483][    C0] F2FS-fs (loop1): inject write IO error in f2fs_write_end_io of blk_update_request+0x57e/0xe60
[  171.578993][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[  171.579013][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  171.579023][    C0] Call Trace:
[  171.579029][    C0]  <TASK>
[  171.579036][    C0]  dump_stack_lvl+0x189/0x250
[  171.579062][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  171.579078][    C0]  ? __pfx_queue_work_on+0x10/0x10
[  171.579093][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  171.579123][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  171.579151][    C0]  f2fs_handle_critical_error+0x37c/0x540
[  171.579200][    C0]  f2fs_write_end_io+0x886/0xb60
[  171.579227][    C0]  blk_update_request+0x57e/0xe60
[  171.579258][    C0]  blk_mq_end_request+0x3e/0x70
[  171.579277][    C0]  blk_done_softirq+0x10a/0x160
[  171.579297][    C0]  handle_softirqs+0x286/0x870
[  171.579314][    C0]  ? run_ksoftirqd+0x9b/0x100
[  171.579335][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  171.579352][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  171.579369][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  171.579381][    C0]  run_ksoftirqd+0x9b/0x100
[  171.579397][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  171.579417][    C0]  smpboot_thread_fn+0x542/0xa60
[  171.579432][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  171.579452][    C0]  kthread+0x711/0x8a0
[  171.579472][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  171.579486][    C0]  ? __pfx_kthread+0x10/0x10
[  171.579503][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  171.579524][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.579538][    C0]  ? __pfx_kthread+0x10/0x10
[  171.579554][    C0]  ret_from_fork+0x439/0x7d0
[  171.579570][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  171.579589][    C0]  ? __switch_to_asm+0x39/0x70
[  171.579605][    C0]  ? __switch_to_asm+0x33/0x70
[  171.579620][    C0]  ? __pfx_kthread+0x10/0x10
[  171.579639][    C0]  ret_from_fork_asm+0x1a/0x30
[  171.579668][    C0]  </TASK>
[  171.579673][    C0] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  171.655714][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[  171.655727][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  171.655733][    C0] Call Trace:
[  171.655737][    C0]  <TASK>
[  171.655742][    C0]  dump_stack_lvl+0x189/0x250
[  171.655756][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  171.655766][    C0]  ? __pfx_queue_work_on+0x10/0x10
[  171.655774][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  171.655787][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  171.655802][    C0]  f2fs_handle_critical_error+0x37c/0x540
[  171.655817][    C0]  f2fs_write_end_io+0x886/0xb60
[  171.655833][    C0]  blk_update_request+0x57e/0xe60
[  171.655851][    C0]  blk_mq_end_request+0x3e/0x70
[  171.655861][    C0]  blk_done_softirq+0x10a/0x160
[  171.655872][    C0]  handle_softirqs+0x286/0x870
[  171.655882][    C0]  ? run_ksoftirqd+0x9b/0x100
[  171.655893][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  171.655902][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  171.655910][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  171.655917][    C0]  run_ksoftirqd+0x9b/0x100
[  171.655926][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  171.655937][    C0]  smpboot_thread_fn+0x542/0xa60
[  171.655945][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  171.655956][    C0]  kthread+0x711/0x8a0
[  171.655967][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  171.655974][    C0]  ? __pfx_kthread+0x10/0x10
[  171.655984][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  171.655995][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.656003][    C0]  ? __pfx_kthread+0x10/0x10
[  171.656012][    C0]  ret_from_fork+0x439/0x7d0
[  171.656022][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  171.656032][    C0]  ? __switch_to_asm+0x39/0x70
[  171.656041][    C0]  ? __switch_to_asm+0x33/0x70
[  171.656049][    C0]  ? __pfx_kthread+0x10/0x10
[  171.656059][    C0]  ret_from_fork_asm+0x1a/0x30
[  171.656074][    C0]  </TASK>
[  171.656078][    C0] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  171.725532][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[  171.725545][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  171.725551][    C0] Call Trace:
[  171.725557][    C0]  <TASK>
[  171.725562][    C0]  dump_stack_lvl+0x189/0x250
[  171.725578][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  171.725591][    C0]  ? __pfx_queue_work_on+0x10/0x10
[  171.725600][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  171.725614][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  171.725631][    C0]  f2fs_handle_critical_error+0x37c/0x540
[  171.725647][    C0]  f2fs_write_end_io+0x886/0xb60
[  171.725663][    C0]  blk_update_request+0x57e/0xe60
[  171.725680][    C0]  blk_mq_end_request+0x3e/0x70
[  171.725690][    C0]  blk_done_softirq+0x10a/0x160
[  171.725706][    C0]  handle_softirqs+0x286/0x870
[  171.725718][    C0]  ? run_ksoftirqd+0x9b/0x100
[  171.725730][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  171.725739][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  171.725748][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  171.725755][    C0]  run_ksoftirqd+0x9b/0x100
[  171.725764][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  171.725775][    C0]  smpboot_thread_fn+0x542/0xa60
[  171.725783][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  171.725794][    C0]  kthread+0x711/0x8a0
[  171.725806][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  171.725813][    C0]  ? __pfx_kthread+0x10/0x10
[  171.725824][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  171.725836][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.725852][    C0]  ? __pfx_kthread+0x10/0x10
[  171.725861][    C0]  ret_from_fork+0x439/0x7d0
[  171.725871][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  171.725882][    C0]  ? __switch_to_asm+0x39/0x70
[  171.725892][    C0]  ? __switch_to_asm+0x33/0x70
[  171.725902][    C0]  ? __pfx_kthread+0x10/0x10
[  171.725911][    C0]  ret_from_fork_asm+0x1a/0x30
[  171.725927][    C0]  </TASK>
[  171.725931][    C0] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  171.794689][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[  171.794706][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  171.794715][    C0] Call Trace:
[  171.794723][    C0]  <TASK>
[  171.794731][    C0]  dump_stack_lvl+0x189/0x250
[  171.794753][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  171.794769][    C0]  ? __pfx_queue_work_on+0x10/0x10
[  171.794783][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  171.794806][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  171.794828][    C0]  f2fs_handle_critical_error+0x37c/0x540
[  171.794861][    C0]  f2fs_write_end_io+0x886/0xb60
[  171.794890][    C0]  blk_update_request+0x57e/0xe60
[  171.794913][    C0]  blk_mq_end_request+0x3e/0x70
[  171.794932][    C0]  blk_done_softirq+0x10a/0x160
[  171.794951][    C0]  handle_softirqs+0x286/0x870
[  171.794969][    C0]  ? run_ksoftirqd+0x9b/0x100
[  171.794989][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  171.794999][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  171.795014][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  171.795026][    C0]  run_ksoftirqd+0x9b/0x100
[  171.795043][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  171.795064][    C0]  smpboot_thread_fn+0x542/0xa60
[  171.795078][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  171.795093][    C0]  kthread+0x711/0x8a0
[  171.795112][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  171.795126][    C0]  ? __pfx_kthread+0x10/0x10
[  171.795145][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  171.795194][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.795208][    C0]  ? __pfx_kthread+0x10/0x10
[  171.795226][    C0]  ret_from_fork+0x439/0x7d0
[  171.795237][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  171.795254][    C0]  ? __switch_to_asm+0x39/0x70
[  171.795271][    C0]  ? __switch_to_asm+0x33/0x70
[  171.795288][    C0]  ? __pfx_kthread+0x10/0x10
[  171.795306][    C0]  ret_from_fork_asm+0x1a/0x30
[  171.795327][    C0]  </TASK>
[  171.795333][    C0] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  171.863888][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[  171.863907][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  171.863916][    C0] Call Trace:
[  171.863924][    C0]  <TASK>
[  171.863933][    C0]  dump_stack_lvl+0x189/0x250
[  171.863956][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  171.863970][    C0]  ? __pfx_queue_work_on+0x10/0x10
[  171.863978][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  171.863991][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  171.864006][    C0]  f2fs_handle_critical_error+0x37c/0x540
[  171.864021][    C0]  f2fs_write_end_io+0x886/0xb60
[  171.864036][    C0]  blk_update_request+0x57e/0xe60
[  171.864053][    C0]  blk_mq_end_request+0x3e/0x70
[  171.864063][    C0]  blk_done_softirq+0x10a/0x160
[  171.864075][    C0]  handle_softirqs+0x286/0x870
[  171.864086][    C0]  ? run_ksoftirqd+0x9b/0x100
[  171.864096][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  171.864106][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  171.864115][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  171.864121][    C0]  run_ksoftirqd+0x9b/0x100
[  171.864130][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  171.864141][    C0]  smpboot_thread_fn+0x542/0xa60
[  171.864180][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  171.864191][    C0]  kthread+0x711/0x8a0
[  171.864202][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  171.864209][    C0]  ? __pfx_kthread+0x10/0x10
[  171.864219][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  171.864230][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.864238][    C0]  ? __pfx_kthread+0x10/0x10
[  171.864248][    C0]  ret_from_fork+0x439/0x7d0
[  171.864257][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  171.864267][    C0]  ? __switch_to_asm+0x39/0x70
[  171.864276][    C0]  ? __switch_to_asm+0x33/0x70
[  171.864285][    C0]  ? __pfx_kthread+0x10/0x10
[  171.864294][    C0]  ret_from_fork_asm+0x1a/0x30
[  171.864310][    C0]  </TASK>
[  171.864314][    C0] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  171.930266][ T5984] F2FS-fs (loop1): do_checkpoint failed err:-5, stop checkpoint
[  172.609751][ T8623] loop1: detected capacity change from 0 to 32768
[  172.613617][ T8623] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1083 (8623)
[  172.621678][ T8623] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  172.625167][ T8623] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  172.647601][ T8623] BTRFS info (device loop1): setting nodatasum
[  172.649921][ T8623] BTRFS info (device loop1): setting nodatacow
[  172.652031][ T8623] BTRFS info (device loop1): enabling free space tree
[  172.654928][ T8623] BTRFS info (device loop1): max_inline set to 0
[  172.685200][ T5984] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  172.872858][ T8642] 8021q: adding VLAN 0 to HW filter on device bond2
[  173.089710][ T8655] loop1: detected capacity change from 0 to 1024
[  173.124998][ T8657] : renamed from bond_slave_0 (while UP)
[  173.271132][ T8662] loop4: detected capacity change from 0 to 2048
[  173.279434][ T8662] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  173.282542][ T8662] UDF-fs: Scanning with blocksize 512 failed
[  173.392637][ T8662] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  173.630382][   T33] audit: type=1800 audit(1758540509.130:21): pid=8662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1094" name="file2" dev="loop4" ino=839 res=0 errno=0
[  173.682059][ T8667] syz.3.1095 uses obsolete (PF_INET,SOCK_PACKET)
[  173.820689][ T8677] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1098'.
[  173.827880][ T8677] unsupported nlmsg_type 40
[  175.119377][ T5982] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  175.122511][ T5982] Bluetooth: hci0: Injecting HCI hardware error event
[  175.127884][ T5982] Bluetooth: hci0: hardware error 0x00
[  175.750048][ T8735] libceph: resolve '4..' (ret=-3): failed
[  175.795502][ T8730] trusted_key: encrypted_key: insufficient parameters specified
[  176.131494][ T8754] mmap: syz.1.1129 (8754) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  176.224561][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1134'.
[  176.228869][ T8765] loop1: detected capacity change from 0 to 1024
[  176.255278][ T8765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  176.262024][ T8765] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  176.295966][ T5984] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  176.339524][ T8775] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1138'.
[  176.349884][ T8777] loop1: detected capacity change from 0 to 1024
[  176.364642][ T8777] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.383428][ T8777] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.1137: inode #1914077617: comm syz.1.1137: iget: illegal inode #
[  176.392221][ T8777] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.1137: error while reading EA inode 1914077617 err=-117
[  176.415125][ T5984] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.197877][ T5982] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  177.579808][ T8793] loop1: detected capacity change from 0 to 1024
[  177.610769][ T8797] loop4: detected capacity change from 0 to 128
[  177.615843][ T8797] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  177.619849][ T8797] System zones: 1-3, 19-19, 35-36
[  177.622371][ T8797] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  177.627743][ T8797] ext4 filesystem being mounted at /196/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  177.634613][ T8793] hfsplus: keylen 65060 too large
[  177.648984][ T8793] hfsplus: xattr searching failed
[  177.670898][ T8793] hfsplus: keylen 65060 too large
[  177.671518][   T33] audit: type=1804 audit(1758540513.170:22): pid=8793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1144" name="/newroot/357/file1/file1" dev="loop1" ino=20 res=1 errno=0
[  177.678849][ T6942] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  177.685240][ T8793] hfsplus: xattr searching failed
[  177.711775][ T8793] hfsplus: keylen 65060 too large
[  177.901959][ T8817] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1155'.
[  178.668856][ T8826] loop4: detected capacity change from 0 to 256
[  178.672082][ T8826] exfat: Deprecated parameter 'utf8'
[  178.674418][ T8826] exfat: Deprecated parameter 'utf8'
[  178.683173][ T8826] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8ecf9da9, utbl_chksum : 0xe619d30d)
[  178.731310][ T8830] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1161'.
[  178.983273][ T8834] loop4: detected capacity change from 0 to 32768
[  179.076876][ T8834] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  179.076900][ T8834]   allowing incompatible features above 0.0: (unknown version)
[  179.076909][ T8834]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  179.093572][ T8834] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  179.096767][ T8834] bcachefs (loop4): initializing new filesystem
[  179.108772][ T8834] bcachefs (loop4): going read-write
[  179.115946][ T8834] bcachefs (loop4): marking superblocks
[  179.126357][ T8834] bcachefs (loop4): initializing freespace
[  179.131779][ T8834] bcachefs (loop4): done initializing freespace
[  179.144394][ T8834] bcachefs (loop4): reading snapshots table
[  179.146959][ T8834] bcachefs (loop4): reading snapshots done
[  179.182319][ T8834] bcachefs (loop4): done starting filesystem
[  179.388706][ T6159] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  179.586177][ T6159] usb 2-1: config 0 has an invalid interface number: 239 but max is 0
[  179.594592][ T6159] usb 2-1: config 0 has no interface number 0
[  179.604298][ T6159] usb 2-1: config 0 interface 239 altsetting 0 endpoint 0x1 has invalid maxpacket 991, setting to 64
[  179.628547][ T6159] usb 2-1: config 0 interface 239 altsetting 0 endpoint 0x82 has invalid maxpacket 511, setting to 64
[  179.675438][ T6159] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[  179.680800][ T6159] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.684041][ T6159] usb 2-1: Product: syz
[  179.685718][ T6159] usb 2-1: Manufacturer: syz
[  179.687865][ T6159] usb 2-1: SerialNumber: syz
[  179.692392][ T6159] usb 2-1: config 0 descriptor??
[  179.750973][ T6942] bcachefs (loop4): shutting down
[  179.754489][ T6942] bcachefs (loop4): going read-only
[  179.756086][ T6942] bcachefs (loop4): finished waiting for writes to stop
[  179.763923][ T6942] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3
[  179.805545][ T6942] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3
[  179.811415][ T6942] bcachefs (loop4): clean shutdown complete, journal seq 4
[  179.814791][ T6942] bcachefs (loop4): marking filesystem clean
[  179.845055][ T6942] bcachefs (loop4): shutdown complete
[  180.112742][ T6159] asix 2-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  180.120021][ T6159] asix 2-1:0.239: probe with driver asix failed with error -71
[  180.127440][ T6159] usb 2-1: USB disconnect, device number 17
[  180.668603][ T8872] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1175'.
[  180.901868][ T8881] loop4: detected capacity change from 0 to 512
[  180.914792][ T8881] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  180.935859][ T8881] EXT4-fs (loop4): invalid journal inode
[  180.946979][ T8881] EXT4-fs (loop4): can't get journal size
[  180.959068][ T8881] EXT4-fs (loop4): 1 truncate cleaned up
[  180.962826][ T8881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.041381][ T6942] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.486664][    T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  181.506905][ T6159] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  181.657321][ T6159] usb 5-1: Using ep0 maxpacket: 32
[  181.663312][    T9] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  181.666421][    T9] usb 2-1: config 0 has no interface number 0
[  181.669339][ T6159] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  181.672835][    T9] usb 2-1: config 0 interface 12 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023
[  181.678507][    T9] usb 2-1: config 0 interface 12 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 511
[  181.684513][ T6159] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  181.688812][    T9] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0700, bcdDevice=5f.c4
[  181.692393][ T6159] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  181.694898][ T6159] usb 5-1: Product: syz
[  181.696275][ T6159] usb 5-1: Manufacturer: syz
[  181.698209][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.700785][    T9] usb 2-1: Product: syz
[  181.702196][    T9] usb 2-1: Manufacturer: syz
[  181.703730][    T9] usb 2-1: SerialNumber: syz
[  181.706398][ T6159] usb 5-1: SerialNumber: syz
[  181.709752][ T6159] usb 5-1: config 0 descriptor??
[  181.713848][    T9] usb 2-1: config 0 descriptor??
[  181.714487][ T8912] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  181.720323][ T8910] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  181.723089][ T8910] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  181.728541][    T9] option 2-1:0.12: GSM modem (1-port) converter detected
[  181.737039][    T9] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0
[  181.741671][ T6159] hub 5-1:0.0: bad descriptor, ignoring hub
[  181.743838][ T6159] hub 5-1:0.0: probe with driver hub failed with error -5
[  181.958719][   T24] usb 2-1: USB disconnect, device number 18
[  181.965551][   T24] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[  181.969904][   T24] option 2-1:0.12: device disconnected
[  182.056825][ T6159] usb 5-1: USB disconnect, device number 14
[  182.396836][ T6159] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  182.559103][ T6159] usb 5-1: Using ep0 maxpacket: 32
[  182.563281][ T6159] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  182.574958][ T6159] usb 5-1: string descriptor 0 read error: -22
[  182.583010][ T6159] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  182.588265][ T6159] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  182.594345][ T6159] usb 5-1: config 0 descriptor??
[  182.597924][ T8912] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  182.603401][ T6159] hub 5-1:0.0: bad descriptor, ignoring hub
[  182.607435][ T6159] hub 5-1:0.0: probe with driver hub failed with error -5
[  182.904378][ T8956] Invalid ELF header magic: != ELF
[  182.907000][ T6159] usb 5-1: USB disconnect, device number 15
[  183.272511][ T8982] loop1: detected capacity change from 0 to 1024
[  183.600369][ T8993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1227'.
[  183.942456][ T8997] netlink: 'syz.4.1232': attribute type 3 has an invalid length.
[  184.011761][ T9000] tmpfs: Bad value for 'mpol'
[  184.060678][ T9004] loop4: detected capacity change from 0 to 512
[  184.069998][ T9004] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1235: casefold flag without casefold feature
[  184.075285][ T9004] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1235: couldn't read orphan inode 15 (err -117)
[  184.086497][ T9004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.104340][ T9004] EXT4-fs warning (device loop4): ext4_empty_dir:3089: inode #2: comm syz.4.1235: directory missing '.'
[  184.131689][ T6942] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.334321][ T9005] loop1: detected capacity change from 0 to 32768
[  184.337892][ T9005] btrfs: Deprecated parameter 'usebackuproot'
[  184.340278][ T9005] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  184.354527][ T9005] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1236 (9005)
[  184.361878][ T9015] loop4: detected capacity change from 0 to 8
[  184.377552][ T9005] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  184.381478][ T9005] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  184.387197][ T9015] SQUASHFS error: xz decompression failed, data probably corrupt
[  184.390432][ T9015] SQUASHFS error: Failed to read block 0x108: -5
[  184.392730][ T9015] SQUASHFS error: Unable to read metadata cache entry [106]
[  184.397070][ T9015] SQUASHFS error: Unable to read inode 0x11f
[  184.477680][ T1088] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  184.486933][ T9005] BTRFS error (device loop1): failed to load root extent
[  184.489633][ T9005] BTRFS warning (device loop1): try to load backup roots slot 1
[  184.492944][ T1092] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  184.510584][ T9005] BTRFS warning (device loop1): couldn't read tree root
[  184.513250][ T9005] BTRFS warning (device loop1): try to load backup roots slot 2
[  184.515914][ T1092] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  184.524328][ T9005] BTRFS warning (device loop1): couldn't read tree root
[  184.526441][ T9005] BTRFS warning (device loop1): try to load backup roots slot 3
[  184.549610][ T9005] BTRFS info (device loop1): rebuilding free space tree
[  184.588753][ T9005] BTRFS info (device loop1): checking UUID tree
[  184.594234][ T9005] BTRFS info (device loop1): setting nodatasum
[  184.602583][ T9005] BTRFS info (device loop1): setting nodatacow
[  184.605072][ T9005] BTRFS info (device loop1): enabling ssd optimizations
[  184.616805][ T9005] BTRFS info (device loop1): turning off barriers
[  184.619475][ T9005] BTRFS info (device loop1): turning on sync discard
[  184.622167][ T9005] BTRFS info (device loop1): enabling free space tree
[  184.624909][ T9005] BTRFS info (device loop1): force clearing of disk cache
[  184.640699][ T9005] BTRFS info (device loop1): doing ref verification
[  184.645326][ T9005] BTRFS info (device loop1): trying to use backup root at mount time
[  184.650541][ T9005] BTRFS info (device loop1): max_inline set to 0
[  184.774054][ T9052] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1244'.
[  184.809786][ T5984] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  185.258218][ T9078] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.426750][ T6029] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  185.559603][ T2033] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  185.577419][ T6029] usb 5-1: Using ep0 maxpacket: 32
[  185.582549][ T6029] usb 5-1: config 0 has an invalid interface number: 255 but max is 0
[  185.585991][ T6029] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  185.590755][ T6029] usb 5-1: config 0 has no interface number 0
[  185.592885][ T6029] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  185.601372][ T6029] usb 5-1: config 0 interface 255 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0
[  185.605054][ T6029] usb 5-1: config 0 interface 255 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  185.612730][ T6029] usb 5-1: New USB device found, idVendor=0499, idProduct=152e, bcdDevice=b4.9a
[  185.616272][ T6029] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.620594][ T6029] usb 5-1: Product: syz
[  185.622097][ T6029] usb 5-1: Manufacturer: syz
[  185.623654][ T6029] usb 5-1: SerialNumber: syz
[  185.628155][ T6029] usb 5-1: config 0 descriptor??
[  185.737019][ T2033] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  185.751927][ T2033] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  185.755896][ T2033] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  185.817123][ T2033] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.850963][ T2033] usb 2-1: config 0 descriptor??
[  185.932034][ T6029] usb 5-1: USB disconnect, device number 16
[  186.264596][ T2033] cm6533_jd 0003:0D8C:0022.0004: invalid report_size -101239751
[  186.269281][ T2033] cm6533_jd 0003:0D8C:0022.0004: item 0 4 1 7 parsing failed
[  186.274801][ T2033] cm6533_jd 0003:0D8C:0022.0004: parse failed
[  186.278092][ T2033] cm6533_jd 0003:0D8C:0022.0004: probe with driver cm6533_jd failed with error -22
[  186.464601][   T24] usb 2-1: USB disconnect, device number 19
[  186.576181][ T9142] loop4: detected capacity change from 0 to 128
[  186.588996][ T9142] FAT-fs (loop4): bogus number of reserved sectors
[  186.591882][ T9142] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  186.595534][ T9142] FAT-fs (loop4): Can't find a valid FAT filesystem
[  186.745906][ T9152] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  187.026065][ T9158] loop4: detected capacity change from 0 to 32768
[  187.057708][ T9158] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  187.071888][ T9158] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  187.083561][ T9160] _Z`Ԁ@: entered promiscuous mode
[  187.178250][ T9165] overlayfs: upper fs does not support tmpfile.
[  187.185148][ T9165] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  187.191673][ T9165] overlayfs: failed to set xattr on upper
[  187.193967][ T9165] overlayfs: ...falling back to redirect_dir=nofollow.
[  187.202571][ T9165] overlayfs: ...falling back to index=off.
[  187.206086][ T9165] overlayfs: ...falling back to uuid=null.
[  187.211254][ T9165] overlayfs: upper fs missing required features.
[  187.282131][ T6942] ocfs2: Unmounting device (7,4) on (node local)
[  187.323151][ T9169] loop1: detected capacity change from 0 to 256
[  187.351272][ T9169] FAT-fs (loop1): Directory bread(block 64) failed
[  187.354572][ T9169] FAT-fs (loop1): Directory bread(block 65) failed
[  187.357952][ T9169] FAT-fs (loop1): Directory bread(block 66) failed
[  187.360631][ T9169] FAT-fs (loop1): Directory bread(block 67) failed
[  187.363240][ T9169] FAT-fs (loop1): Directory bread(block 68) failed
[  187.365971][ T9169] FAT-fs (loop1): Directory bread(block 69) failed
[  187.371276][ T9169] FAT-fs (loop1): Directory bread(block 70) failed
[  187.374415][ T9169] FAT-fs (loop1): Directory bread(block 71) failed
[  187.379224][ T9169] FAT-fs (loop1): Directory bread(block 72) failed
[  187.381999][ T9169] FAT-fs (loop1): Directory bread(block 73) failed
[  187.806804][   T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  187.976886][   T24] usb 5-1: Using ep0 maxpacket: 32
[  187.985562][   T24] usb 5-1: unable to get BOS descriptor or descriptor too short
[  187.997314][   T24] usb 5-1: config 244 has an invalid descriptor of length 0, skipping remainder of the config
[  188.008071][   T24] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f
[  188.011688][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.029189][   T24] usb 5-1: Product: syz
[  188.030960][   T24] usb 5-1: Manufacturer: syz
[  188.032821][   T24] usb 5-1: SerialNumber: syz
[  188.167823][ T9197] loop1: detected capacity change from 0 to 32768
[  188.274301][   T24] comedi comedi5: Wrong number of endpoints
[  188.276388][   T24] dt9812 5-1:244.0: driver 'dt9812' failed to auto-configure device.
[  188.288957][   T24] usb 5-1: USB disconnect, device number 17
[  190.073805][ T9268] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.079230][ T9268] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.212960][ T9268] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  190.231659][ T9268] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  190.722908][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.729169][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.732643][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.736210][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.932601][ T9285] loop4: detected capacity change from 0 to 4096
[  190.935864][ T9285] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  191.199366][ T9300] loop4: detected capacity change from 0 to 4096
[  191.202446][ T9300] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  191.420734][ T9318] RDS: rds_bind could not find a transport for 0:0:4::1, load rds_tcp or rds_rdma?
[  191.782417][ T9349] loop1: detected capacity change from 0 to 512
[  191.790469][ T9349] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  191.805989][ T9349] EXT4-fs (loop1): 1 truncate cleaned up
[  191.810977][ T9349] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  191.856364][ T5984] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.996766][ T6159] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  192.158943][ T6159] usb 5-1: Using ep0 maxpacket: 16
[  192.165597][ T6159] usb 5-1: config 11 has an invalid interface number: 124 but max is 0
[  192.176710][ T6159] usb 5-1: config 11 has no interface number 0
[  192.179172][ T6159] usb 5-1: config 11 interface 124 altsetting 45 bulk endpoint 0xD has invalid maxpacket 16
[  192.182924][ T6159] usb 5-1: config 11 interface 124 altsetting 45 bulk endpoint 0x9 has invalid maxpacket 32
[  192.202573][ T6159] usb 5-1: config 11 interface 124 altsetting 45 endpoint 0xA has invalid maxpacket 512, setting to 64
[  192.216704][ T6159] usb 5-1: config 11 interface 124 has no altsetting 0
[  192.222148][ T6159] usb 5-1: New USB device found, idVendor=0489, idProduct=e03c, bcdDevice=f9.55
[  192.225746][ T6159] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.237146][ T6159] usb 5-1: Product: syz
[  192.239076][ T6159] usb 5-1: Manufacturer: syz
[  192.241330][ T6159] usb 5-1: SerialNumber: syz
[  192.248982][ T9345] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  192.252323][ T9345] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  192.479443][ T6159] usb 5-1: USB disconnect, device number 18
[  193.305263][ T9392] loop4: detected capacity change from 0 to 16
[  193.309480][ T9392] erofs (device loop4): blkszbits 0 isn't supported
[  193.364362][ T9396] loop4: detected capacity change from 0 to 512
[  193.383729][ T9396] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.390550][ T9396] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  193.412143][   T33] audit: type=1800 audit(1758540528.910:23): pid=9396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1375" name="file1" dev="loop4" ino=15 res=0 errno=0
[  193.426868][   T33] audit: type=1800 audit(1758540528.910:24): pid=9396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1375" name="file2" dev="loop4" ino=16 res=0 errno=0
[  193.448821][ T6942] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.566944][    T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  193.728746][    T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  193.732311][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  193.736200][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  193.743746][    T9] usb 2-1: config 1 has no interface number 0
[  193.746329][    T9] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30
[  193.751207][    T9] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[  193.760773][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  193.766355][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.770193][    T9] usb 2-1: Product: syz
[  193.772111][    T9] usb 2-1: Manufacturer: syz
[  193.774114][    T9] usb 2-1: SerialNumber: syz
[  193.989035][    T9] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71
[  193.994459][    T9] usb 2-1: USB disconnect, device number 20
[  194.087848][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  194.090465][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  196.291957][ T5982] Bluetooth: hci1: command 0x0406 tx timeout
[  196.309274][ T9480] loop1: detected capacity change from 0 to 256
[  196.612319][ T9486] loop1: detected capacity change from 0 to 4096
[  196.631825][ T9488] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  196.655432][   T33] audit: type=1800 audit(1758540532.150:25): pid=9486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1410" name="file1" dev="loop1" ino=15 res=0 errno=0
[  196.659443][ T9487] loop4: detected capacity change from 0 to 32768
[  196.709571][ T9487] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  196.728745][ T9487] XFS (loop4): totally zeroed log
[  196.735582][ T9487] XFS (loop4): Corruption warning: Metadata has LSN (1:384) ahead of current LSN (1:0). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  196.741906][ T9487] XFS (loop4): log mount/recovery failed: error -22
[  196.745741][ T9487] XFS (loop4): log mount failed
[  196.809532][ T9498] loop1: detected capacity change from 0 to 8
[  197.163974][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1416'.
[  197.923686][   T33] audit: type=1326 audit(1758540533.420:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9523 comm="syz.4.1424" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60afd8ec29 code=0x7ffc0000
[  197.934268][   T33] audit: type=1326 audit(1758540533.420:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9523 comm="syz.4.1424" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60afd8ec29 code=0x7ffc0000
[  197.944296][   T33] audit: type=1326 audit(1758540533.440:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9523 comm="syz.4.1424" exe="/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f60afd8ec29 code=0x7ffc0000
[  197.962462][   T33] audit: type=1326 audit(1758540533.440:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9523 comm="syz.4.1424" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60afd8ec29 code=0x7ffc0000
[  197.971623][   T33] audit: type=1326 audit(1758540533.440:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9523 comm="syz.4.1424" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60afd8ec29 code=0x7ffc0000
[  197.981124][   T33] audit: type=1326 audit(1758540533.440:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9523 comm="syz.4.1424" exe="/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f60afd8ec29 code=0x7ffc0000
[  197.990019][   T33] audit: type=1326 audit(1758540533.440:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9523 comm="syz.4.1424" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60afd8ec29 code=0x7ffc0000
[  198.222556][ T9536] sctp: [Deprecated]: syz.4.1428 (pid 9536) Use of int in maxseg socket option.
[  198.222556][ T9536] Use struct sctp_assoc_value instead
[  198.745078][ T9540] loop1: detected capacity change from 0 to 32768
[  198.749405][ T9540] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section quota: wrong size (got 40 should be 80)
[  198.749405][ T9540] quota (size 40):
[  198.749405][ T9540] user: flags 9 space timelimit 7 warnlimit 0 inodes timelimit 24 warnlimit 0
[  198.749405][ T9540] group: flags 1 space timelimit 80 warnlimit 10 inodes timelimit 0 warnlimit 0
[  198.749405][ T9540] project: flags 38 space timelimit 0 warnlimit 0 inodes timelimit 0 warnlimit 0
[  198.749405][ T9540] 
[  198.769378][ T9540] bcachefs: bch2_fs_get_tree() error: invalid_sb_quota
[  198.950166][ T9557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1438'.
[  199.800791][ T9591] sctp: [Deprecated]: syz.3.1453 (pid 9591) Use of struct sctp_assoc_value in delayed_ack socket option.
[  199.800791][ T9591] Use struct sctp_sack_info instead
[  200.222837][ T9604] loop4: detected capacity change from 0 to 512
[  200.247050][ T9604] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1459: casefold flag without casefold feature
[  200.252363][ T9604] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1459: couldn't read orphan inode 15 (err -117)
[  200.266661][ T9604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.334724][ T9604] evm: overlay not supported
[  200.393053][ T9614] netlink: 'syz.1.1461': attribute type 2 has an invalid length.
[  200.415104][ T9615] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  200.439461][ T9614] : entered promiscuous mode
[  200.511774][ T6942] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.632053][ T9623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1465'.
[  201.041028][ T9646] loop1: detected capacity change from 0 to 512
[  201.062573][ T9646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.073778][ T9646] ext4 filesystem being mounted at /458/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  201.091853][ T9646] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.1475: corrupted inode contents
[  201.100117][ T9646] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.1475: mark_inode_dirty error
[  201.106496][ T9646] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.1475: corrupted inode contents
[  201.111652][ T9646] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.1475: mark_inode_dirty error
[  201.212984][ T5984] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.603473][ T9671] netlink: 'syz.4.1486': attribute type 4 has an invalid length.
[  201.613787][ T9671] netlink: 'syz.4.1486': attribute type 4 has an invalid length.
[  201.708282][ T9675] loop4: detected capacity change from 0 to 1024
[  201.807541][ T9679] loop4: detected capacity change from 0 to 1024
[  201.824405][ T9679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.833718][ T9679] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck.
[  201.843781][   T33] kauditd_printk_skb: 6 callbacks suppressed
[  201.843795][   T33] audit: type=1326 audit(1758540537.340:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.4.1490" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f60afd8ec29 code=0x0
[  202.223324][ T9694] bond0: entered allmulticast mode
[  202.224827][ T6016] bond0: (slave bond_slave_0): interface is now down
[  202.225368][ T9694] bond_slave_0: entered allmulticast mode
[  202.225389][ T9694] bond_slave_1: entered allmulticast mode
[  202.229538][ T6016] bond0: (slave bond_slave_1): interface is now down
[  202.233574][ T9694] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  202.235778][ T6016] bond0: (slave netdevsim0): interface is now down
[  202.257962][   T13] bond0: (slave bond_slave_0): interface is now down
[  202.260714][   T13] bond0: (slave bond_slave_1): interface is now down
[  202.263402][   T13] bond0: (slave netdevsim0): interface is now down
[  202.273566][   T13] bond0: now running without any active interface!
[  202.651495][ T6942] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.479149][ T9725] loop1: detected capacity change from 0 to 512
[  203.482222][ T9725] EXT4-fs: Ignoring removed oldalloc option
[  203.488352][ T9725] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.1508: corrupted in-inode xattr: invalid ea_ino
[  203.494284][ T9725] EXT4-fs (loop1): Remounting filesystem read-only
[  203.499851][ T9725] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.530399][ T5984] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.705809][ T9737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1510'.
[  203.944720][ T9747] atomic_op ffff888112566998 conn xmit_atomic 0000000000000000
[  204.847801][ T9781] loop1: detected capacity change from 0 to 2048
[  204.868289][ T9781] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  204.986173][ T9789] loop4: detected capacity change from 0 to 128
[  204.993282][ T9789] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  204.998019][ T9789] hpfs: filesystem error: improperly stopped
[  205.002365][ T9789] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  205.008887][ T9789] hpfs: You really don't want any checks? You are crazy...
[  205.012479][ T9789] hpfs: hpfs_map_sector(): read error
[  205.014628][ T9789] hpfs: code page support is disabled
[  205.017520][ T9789] hpfs: hpfs_map_4sectors(): unaligned read
[  205.019969][ T9789] hpfs: hpfs_map_4sectors(): unaligned read
[  205.022285][ T9789] hpfs: filesystem error: unable to find root dir
[  205.055907][ T9793] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1537'.
[  205.060057][ T9793] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1537'.
[  205.326968][ T6159] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  205.477864][ T6159] usb 5-1: Using ep0 maxpacket: 8
[  205.483825][ T6159] usb 5-1: config index 0 descriptor too short (expected 19222, got 18)
[  205.488475][ T6159] usb 5-1: config 28 has too many interfaces: 241, using maximum allowed: 32
[  205.492269][ T6159] usb 5-1: config 28 has 1 interface, different from the descriptor's value: 241
[  205.499667][ T6159] usb 5-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=62.0d
[  205.502977][ T6159] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.505708][ T6159] usb 5-1: Product: syz
[  205.509218][ T6159] usb 5-1: Manufacturer: syz
[  205.510918][ T6159] usb 5-1: SerialNumber: syz
[  205.726506][ T6159] usb 5-1: USB disconnect, device number 19
[  206.831266][ T9834] loop4: detected capacity change from 0 to 64
[  206.837497][ T9834] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  206.921638][ T9840] loop4: detected capacity change from 0 to 512
[  206.943931][ T9840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.948941][ T9840] ext4 filesystem being mounted at /318/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  206.979286][ T6942] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.186363][ T9858] loop4: detected capacity change from 0 to 128
[  207.280451][ T9860] atomic_op ffff88803196d998 conn xmit_atomic 0000000000000000
[  207.332323][ T9862] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1568'.
[  207.445793][ T9866] pimreg: entered allmulticast mode
[  207.452711][ T9866] pimreg: left allmulticast mode
[  207.631088][ T9868] loop4: detected capacity change from 0 to 512
[  207.642613][ T9868] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  207.645771][ T9868] UDF-fs: Scanning with blocksize 512 failed
[  207.661860][ T9868] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  207.664819][ T9868] UDF-fs: Scanning with blocksize 1024 failed
[  207.677747][ T9868] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  207.682082][ T9868] UDF-fs: Scanning with blocksize 2048 failed
[  207.689691][ T9868] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  207.708344][ T9868] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  208.854074][ T9888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1579'.
[  208.923746][ T9886] loop1: detected capacity change from 0 to 32768
[  208.994324][ T9886] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,read_only
[  208.994338][ T9886]   allowing incompatible features above 0.0: (unknown version)
[  208.994343][ T9886]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  209.010000][ T9886] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  209.013188][ T9886] bcachefs (loop1): initializing new filesystem
[  209.026783][ T9886] bcachefs (loop1): going read-write
[  209.040113][ T9886] bcachefs (loop1): marking superblocks
[  209.071014][ T9886] bcachefs (loop1): initializing freespace
[  209.082537][ T9886] bcachefs (loop1): done initializing freespace
[  209.095078][ T9886] bcachefs (loop1): reading snapshots table
[  209.098194][ T9886] bcachefs (loop1): reading snapshots done
[  209.138550][ T9886] bcachefs (loop1): going read-only
[  209.140765][ T9886] bcachefs (loop1): finished waiting for writes to stop
[  209.148312][ T9886] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[  209.217659][ T9886] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 2
[  209.237949][ T9886] bcachefs (loop1): clean shutdown complete, journal seq 3
[  209.241469][ T9886] bcachefs (loop1): marking filesystem clean
[  209.265471][ T9886] bcachefs (loop1): done starting filesystem
[  209.335991][ T9886] syz.1.1578 (9886) used greatest stack depth: 16056 bytes left
[  209.339738][ T5984] bcachefs (loop1): shutting down
[  209.375312][ T5984] bcachefs (loop1): shutdown complete
[  209.715444][ T9928] loop4: detected capacity change from 0 to 32768
[  210.609160][ T9949] loop1: detected capacity change from 0 to 256
[  210.625142][ T9949] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  212.364095][ T9997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1620'.
[  213.370313][T10023] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (15)
[  215.972808][T10064] loop1: detected capacity change from 0 to 32768
[  215.983849][T10064] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  216.009222][T10064] XFS (loop1): Ending clean mount
[  216.021101][T10064] XFS (loop1): Quotacheck needed: Please wait.
[  216.065686][T10064] XFS (loop1): Quotacheck: Done.
[  216.095869][ T5984] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  216.925537][T10099] loop1: detected capacity change from 0 to 32768
[  216.941641][T10099] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  216.966944][T10099] XFS (loop1): Ending clean mount
[  216.973676][T10099] XFS (loop1): Quotacheck needed: Please wait.
[  216.997045][T10099] XFS (loop1): Quotacheck: Done.
[  217.073343][ T5984] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  217.634842][T10115] syz_tun: entered allmulticast mode
[  217.640688][T10114] syz_tun: left allmulticast mode
[  217.884672][T10128] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.888714][T10128] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.977299][T10128] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  218.003777][T10128] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  218.031951][T10125] loop1: detected capacity change from 0 to 40427
[  218.035907][T10125] F2FS-fs (loop1): build fault injection rate: 14
[  218.038587][T10125] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  218.044158][T10125] F2FS-fs (loop1): invalid crc value
[  218.051247][    C1] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  218.067261][    C1] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  218.134727][T10125] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  218.138515][T10125] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  218.145099][ T5718] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.150477][T10125] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  218.153332][ T5718] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.165582][ T5718] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.173648][ T5718] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.183932][T10125] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  218.190239][T10125] F2FS-fs (loop1): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x249/0x1cf0
[  218.195944][T10125] F2FS-fs (loop1): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098]
[  218.235222][    C0] F2FS-fs (loop1): inject write IO error in f2fs_write_end_io of blk_update_request+0x57e/0xe60
[  218.239849][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[  218.239870][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  218.239879][    C0] Call Trace:
[  218.239886][    C0]  <TASK>
[  218.239892][    C0]  dump_stack_lvl+0x189/0x250
[  218.239916][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  218.239932][    C0]  ? __pfx_queue_work_on+0x10/0x10
[  218.239949][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  218.239973][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  218.239994][    C0]  ? f2fs_hw_is_readonly+0x39b/0x470
[  218.240015][    C0]  f2fs_handle_critical_error+0x37c/0x540
[  218.240037][    C0]  f2fs_write_end_io+0x886/0xb60
[  218.240063][    C0]  blk_update_request+0x57e/0xe60
[  218.240093][    C0]  blk_mq_end_request+0x3e/0x70
[  218.240112][    C0]  blk_flush_complete_seq+0x678/0xcc0
[  218.240139][    C0]  flush_end_io+0xbaf/0xe60
[  218.240165][    C0]  __blk_mq_end_request+0x46a/0x630
[  218.240183][    C0]  blk_done_softirq+0x10a/0x160
[  218.240199][    C0]  handle_softirqs+0x286/0x870
[  218.240223][    C0]  ? run_ksoftirqd+0x9b/0x100
[  218.240240][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  218.240253][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  218.240267][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  218.240276][    C0]  run_ksoftirqd+0x9b/0x100
[  218.240288][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  218.240305][    C0]  smpboot_thread_fn+0x542/0xa60
[  218.240319][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  218.240337][    C0]  kthread+0x711/0x8a0
[  218.240355][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  218.240367][    C0]  ? __pfx_kthread+0x10/0x10
[  218.240382][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  218.240398][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  218.240409][    C0]  ? __pfx_kthread+0x10/0x10
[  218.240424][    C0]  ret_from_fork+0x439/0x7d0
[  218.240438][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  218.240454][    C0]  ? __switch_to_asm+0x39/0x70
[  218.240468][    C0]  ? __switch_to_asm+0x33/0x70
[  218.240483][    C0]  ? __pfx_kthread+0x10/0x10
[  218.240498][    C0]  ret_from_fork_asm+0x1a/0x30
[  218.240557][    C0]  </TASK>
[  218.240563][    C0] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  218.322444][ T5984] F2FS-fs (loop1): do_checkpoint failed err:-5, stop checkpoint
[  219.367369][T10174] capability: warning: `syz.1.1686' uses 32-bit capabilities (legacy support in use)
[  219.433281][T10179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1688'.
[  219.719935][T10194] netlink: 'syz.1.1695': attribute type 2 has an invalid length.
[  219.870607][T10199] loop4: detected capacity change from 0 to 8192
[  219.875829][T10199] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  220.005909][T10219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1706'.
[  220.456758][ T6159] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  220.484436][T10231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1712'.
[  220.496078][T10231] erspan0: entered promiscuous mode
[  220.499601][T10231] macvtap1: entered promiscuous mode
[  220.501715][T10231] macvtap1: entered allmulticast mode
[  220.503771][T10231] erspan0: entered allmulticast mode
[  220.514027][T10231] erspan0: left allmulticast mode
[  220.516351][T10231] erspan0: left promiscuous mode
[  220.606853][ T6159] usb 5-1: Using ep0 maxpacket: 16
[  220.611192][ T6159] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  220.619933][ T6159] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023
[  220.631946][ T6159] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  220.635988][ T6159] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.646772][ T6159] usb 5-1: Product: syz
[  220.648658][ T6159] usb 5-1: Manufacturer: syz
[  220.654735][ T6159] usb 5-1: SerialNumber: syz
[  220.914837][T10225] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  221.316656][    T9] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[  221.523945][    T9] usb 2-1: config 1 has an invalid interface number: 105 but max is 0
[  221.527386][    T9] usb 2-1: config 1 has no interface number 0
[  221.529899][    T9] usb 2-1: config 1 interface 105 has no altsetting 0
[  221.537853][    T9] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  221.541351][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.544388][    T9] usb 2-1: Product: syz
[  221.548094][    T9] usb 2-1: Manufacturer: syz
[  221.550377][    T9] usb 2-1: SerialNumber: syz
[  221.601491][T10225] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  222.034130][ T6159] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[  222.037049][    T9] aqc111 2-1:1.105: probe with driver aqc111 failed with error -22
[  222.040972][ T6159] cdc_ncm 5-1:1.0: setting rx_max = 16384
[  222.044342][    T9] usb 2-1: USB disconnect, device number 21
[  222.047226][ T6159] cdc_ncm 5-1:1.0: setting tx_max = 16384
[  222.064408][ T6159] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  222.072062][ T6159] usb 5-1: USB disconnect, device number 20
[  222.075576][ T6159] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP)
[  222.753058][T10259] loop4: detected capacity change from 0 to 256
[  222.756272][T10259] exfat: Deprecated parameter 'namecase'
[  222.760702][T10259] exfat: Deprecated parameter 'utf8'
[  222.771967][T10259] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d)
[  222.955260][T10279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  222.962577][   T24] lo speed is unknown, defaulting to 1000
[  223.082828][T10292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1738'.
[  223.187670][T10302] bridge: RTM_NEWNEIGH with invalid ether address
[  223.236351][T10304] team0: Cannot enslave team device to itself
[  223.302158][T10310] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1747'.
[  223.423333][   T55] Bluetooth: hci2: unexpected Set CIG Parameters response data
[  224.442848][T10388] loop4: detected capacity change from 0 to 2048
[  224.454416][T10388] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  224.463137][T10373] loop1: detected capacity change from 0 to 32768
[  224.482490][T10373] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  224.497094][T10373] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  224.497389][T10388] UDF-fs: warning (device loop4): udf_truncate_tail_extent: Too long extent after EOF in inode 1415: i_size: 0 lbcount: 512 extent 103+512
[  224.520274][T10373] (syz.1.1758,10373,1):ocfs2_read_blocks:239 ERROR: status = -12
[  224.524289][T10373] (syz.1.1758,10373,1):ocfs2_xattr_block_find:2831 ERROR: status = -12
[  224.560165][ T5984] ocfs2: Unmounting device (7,1) on (node local)
[  225.030625][T10401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1767'.
[  225.217694][T10406] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1769'.
[  225.545863][T10412] vivid-000: disconnect
[  225.639822][   T24] vivid-000: reconnect
[  226.750336][T10446] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1785'.
[  227.454763][   T55] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  227.460474][   T55] Bluetooth: hci2: Injecting HCI hardware error event
[  227.467439][ T5982] Bluetooth: hci2: hardware error 0x00
[  228.011264][T10483] loop4: detected capacity change from 0 to 32768
[  228.018511][T10483] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  228.047017][T10483] XFS (loop4): Ending clean mount
[  228.092302][ T6942] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  228.116156][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1806'.
[  228.446900][ T6029] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  228.460280][   T33] audit: type=1326 audit(1758540563.960:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.3.1815" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715438ec29 code=0x7ffc0000
[  228.469689][   T33] audit: type=1326 audit(1758540563.960:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.3.1815" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715438ec29 code=0x7ffc0000
[  228.481664][   T33] audit: type=1326 audit(1758540563.960:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.3.1815" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715438ec29 code=0x7ffc0000
[  228.494782][   T33] audit: type=1326 audit(1758540563.960:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.3.1815" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715438ec29 code=0x7ffc0000
[  228.504075][   T33] audit: type=1326 audit(1758540563.970:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.3.1815" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f715438ec29 code=0x7ffc0000
[  228.513621][   T33] audit: type=1326 audit(1758540563.970:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.3.1815" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715438ec29 code=0x7ffc0000
[  228.524185][   T33] audit: type=1326 audit(1758540563.970:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.3.1815" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715438ec29 code=0x7ffc0000
[  228.533660][   T33] audit: type=1326 audit(1758540563.970:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.3.1815" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715438ec29 code=0x7ffc0000
[  228.543330][   T33] audit: type=1326 audit(1758540563.970:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.3.1815" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715438ec29 code=0x7ffc0000
[  228.553469][   T33] audit: type=1326 audit(1758540563.980:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.3.1815" exe="/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f715438ec29 code=0x7ffc0000
[  228.600080][ T6029] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  228.604431][ T6029] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  228.609042][ T6029] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  228.616646][ T6029] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  228.625063][ T6029] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.635526][ T6029] usb 5-1: config 0 descriptor??
[  228.702457][T10528] netlink: 'syz.1.1820': attribute type 8 has an invalid length.
[  228.773732][T10534] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  228.781859][T10534] macsec1: entered promiscuous mode
[  228.787068][T10534] macsec1: entered allmulticast mode
[  228.789445][T10534] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  228.810725][T10534] macsec2: entered promiscuous mode
[  228.813088][T10534] macsec2: entered allmulticast mode
[  229.056979][    T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  229.058129][ T6029] hid_parser_main: 7 callbacks suppressed
[  229.058142][ T6029] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  229.064375][ T6029] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  229.067114][ T6029] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  229.069663][ T6029] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x6
[  229.072296][ T6029] plantronics 0003:047F:FFFF.0005: unbalanced collection at end of report description
[  229.076365][ T6029] plantronics 0003:047F:FFFF.0005: parse failed
[  229.079927][ T6029] plantronics 0003:047F:FFFF.0005: probe with driver plantronics failed with error -22
[  229.207537][    T9] usb 2-1: Using ep0 maxpacket: 8
[  229.211504][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  229.214098][    T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  229.219223][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.225247][    T9] usb 2-1: config 0 descriptor??
[  229.264929][ T6029] usb 5-1: USB disconnect, device number 21
[  229.438191][    T9] usbhid 2-1:0.0: can't add hid device: -71
[  229.440563][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  229.449381][    T9] usb 2-1: USB disconnect, device number 22
[  229.516840][ T5982] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  229.870084][T10565] netlink: 'syz.4.1837': attribute type 4 has an invalid length.
[  229.938314][T10569] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1839'.
[  230.021098][T10572] loop1: detected capacity change from 0 to 4096
[  230.042703][T10572] NILFS (loop1): invalid segment: Checksum error in segment payload
[  230.046254][T10572] NILFS (loop1): trying rollback from an earlier position
[  230.064990][T10572] NILFS (loop1): recovery complete
[  230.068682][T10574] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  230.786401][T10591] bond0: (slave bond_slave_0): Releasing backup interface
[  230.789382][T10591] bond_slave_0 (unregistering): left allmulticast mode
[  230.792073][T10593] loop1: detected capacity change from 0 to 1024
[  230.795131][T10593] EXT4-fs: Ignoring removed oldalloc option
[  230.797892][T10593] EXT4-fs: Ignoring removed orlov option
[  230.820835][T10593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.858677][T10593] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.1848: Allocating blocks 497-513 which overlap fs metadata
[  230.872727][T10592] EXT4-fs (loop1): pa ffff888103708ae0: logic 64, phys. 449, len 4
[  230.876030][T10592] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[  230.993525][ T5984] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.165550][T10620] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  231.173788][T10616] loop4: detected capacity change from 0 to 4096
[  231.200879][T10616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  231.250617][ T6942] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.295755][T10625] bridge0: port 3(vxlan0) entered blocking state
[  231.300424][T10625] bridge0: port 3(vxlan0) entered disabled state
[  231.304798][T10625] vxlan0: entered allmulticast mode
[  231.312894][T10625] vxlan0: entered promiscuous mode
[  231.630477][T10646] loop1: detected capacity change from 0 to 512
[  231.873808][T10646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  231.879238][T10646] ext4 filesystem being mounted at /579/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  232.024752][ T5984] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.081242][T10653] gtp0: entered promiscuous mode
[  232.872684][T10688] loop1: detected capacity change from 0 to 256
[  232.880766][T10688] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf059ff26, utbl_chksum : 0xe619d30d)
[  232.947811][T10692] loop1: detected capacity change from 0 to 64
[  232.950875][T10692] minix: Unknown parameter '(+*tm2 ӉѨ.̓?y9|.uKL*"4/&^-rx:RnN[xhB*qB'
[  233.133694][T10692] loop1: detected capacity change from 0 to 40427
[  233.137592][T10692] F2FS-fs (loop1): build fault injection rate: 14
[  233.141255][T10692] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  233.147627][T10692] F2FS-fs (loop1): invalid crc value
[  233.154274][    C1] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  233.164299][    C1] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  233.214381][T10692] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  233.218359][T10692] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  233.223800][T10692] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  233.247166][T10692] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  233.253405][T10692] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_convert_inline_inode+0x6bd/0x880
[  233.274425][ T5984] syz-executor: attempt to access beyond end of device
[  233.274425][ T5984] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  233.281850][ T5984] CPU: 1 UID: 0 PID: 5984 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  233.281864][ T5984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  233.281870][ T5984] Call Trace:
[  233.281873][ T5984]  <TASK>
[  233.281877][ T5984]  dump_stack_lvl+0x189/0x250
[  233.281892][ T5984]  ? __pfx_dump_stack_lvl+0x10/0x10
[  233.281902][ T5984]  ? __pfx_queue_work_on+0x10/0x10
[  233.281910][ T5984]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  233.281924][ T5984]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  233.281941][ T5984]  f2fs_handle_critical_error+0x37c/0x540
[  233.281956][ T5984]  f2fs_write_end_io+0x886/0xb60
[  233.281974][ T5984]  __submit_merged_bio+0x27a/0x6a0
[  233.281989][ T5984]  __submit_merged_write_cond+0x255/0x530
[  233.282003][ T5984]  f2fs_write_data_pages+0x261d/0x3000
[  233.282010][ T5984]  ? arch_stack_walk+0xfc/0x150
[  233.282081][ T5984]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  233.282109][ T5984]  ? ktime_get+0x3e/0x1f0
[  233.282118][ T5984]  ? ktime_get+0x3e/0x1f0
[  233.282127][ T5984]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  233.282136][ T5984]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  233.282152][ T5984]  ? __lock_acquire+0xab9/0xd20
[  233.282167][ T5984]  ? do_raw_spin_lock+0x121/0x290
[  233.282182][ T5984]  ? do_raw_spin_unlock+0x4d/0x240
[  233.282191][ T5984]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  233.282201][ T5984]  do_writepages+0x32e/0x550
[  233.282228][ T5984]  ? do_raw_spin_unlock+0x4d/0x240
[  233.282242][ T5984]  filemap_fdatawrite+0x199/0x240
[  233.282254][ T5984]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  233.282295][ T5984]  ? do_raw_spin_unlock+0x4d/0x240
[  233.282315][ T5984]  f2fs_sync_dirty_inodes+0x31f/0x830
[  233.282340][ T5984]  f2fs_write_checkpoint+0x95a/0x1df0
[  233.282372][ T5984]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  233.282419][ T5984]  ? kill_f2fs_super+0x298/0x6c0
[  233.282431][ T5984]  kill_f2fs_super+0x2c3/0x6c0
[  233.282448][ T5984]  ? __pfx_kill_f2fs_super+0x10/0x10
[  233.282459][ T5984]  ? radix_tree_delete_item+0x2b6/0x400
[  233.282478][ T5984]  ? shrinker_free+0x2ce/0x3e0
[  233.282494][ T5984]  deactivate_locked_super+0xbc/0x130
[  233.282513][ T5984]  cleanup_mnt+0x425/0x4c0
[  233.282528][ T5984]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.282567][ T5984]  task_work_run+0x1d4/0x260
[  233.282588][ T5984]  ? __pfx_task_work_run+0x10/0x10
[  233.282603][ T5984]  ? __x64_sys_umount+0x122/0x160
[  233.282623][ T5984]  ? exit_to_user_mode_loop+0x40/0x110
[  233.282636][ T5984]  exit_to_user_mode_loop+0xec/0x110
[  233.282647][ T5984]  do_syscall_64+0x2bd/0x3b0
[  233.282656][ T5984]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.282663][ T5984]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.282671][ T5984]  ? exc_page_fault+0x9f/0xf0
[  233.282679][ T5984]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.282690][ T5984] RIP: 0033:0x7f30f878ff57
[  233.282702][ T5984] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  233.282713][ T5984] RSP: 002b:00007fff160b94e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  233.282734][ T5984] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f30f878ff57
[  233.282743][ T5984] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff160b95a0
[  233.282751][ T5984] RBP: 00007fff160b95a0 R08: 0000000000000000 R09: 0000000000000000
[  233.282759][ T5984] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff160ba630
[  233.282767][ T5984] R13: 00007f30f8811c2d R14: 0000000000038eb6 R15: 00007fff160ba670
[  233.282790][ T5984]  </TASK>
[  233.282796][ T5984] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  233.316702][    T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  233.675486][    T9] usb 5-1: Using ep0 maxpacket: 8
[  233.699039][    T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  233.702339][    T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  233.705891][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  233.712034][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  233.715909][    T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  233.721376][    T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  233.724952][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.864720][T10714] overlayfs: invalid redirect ((null))
[  234.203442][ T2033] usb 5-1: USB disconnect, device number 22
[  234.591077][T10736] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1905'.
[  236.413986][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  236.421122][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  236.425865][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  236.432868][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  236.437356][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  236.468144][ T5718] bridge_slave_1: left allmulticast mode
[  236.470867][ T5718] bridge_slave_1: left promiscuous mode
[  236.474526][ T5718] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.481869][ T5718] bridge_slave_0: left allmulticast mode
[  236.484099][ T5718] bridge_slave_0: left promiscuous mode
[  236.486456][ T5718] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.610166][T10783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1923'.
[  236.906720][ T6029] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  237.066689][ T6029] usb 2-1: Using ep0 maxpacket: 8
[  237.070866][ T6029] usb 2-1: config 0 interface 0 has no altsetting 0
[  237.073555][ T6029] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  237.082058][ T6029] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.089346][ T6029] usb 2-1: config 0 descriptor??
[  237.091990][ T5718] bond0 (unregistering): (slave 77): Releasing backup interface
[  237.095911][ T5718] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  237.101372][ T5718] bond0 (unregistering): Released all slaves
[  237.130194][T10774] lo speed is unknown, defaulting to 1000
[  237.316473][T10774] chnl_net:caif_netlink_parms(): no params data found
[  237.370110][ T5718] hsr_slave_0: left promiscuous mode
[  237.372914][ T5718] hsr_slave_1: left promiscuous mode
[  237.375746][ T5718] batman_adv: batadv0: Removing interface: batadv_slave_0
[  237.380924][ T5718] batman_adv: batadv0: Removing interface: batadv_slave_1
[  237.505912][ T6029] uclogic 0003:28BD:0042.0006: interface is invalid, ignoring
[  237.728145][ T6029] usb 2-1: USB disconnect, device number 23
[  237.811245][ T5718] team0 (unregistering): Port device team_slave_1 removed
[  237.860614][ T5718] team0 (unregistering): Port device team_slave_0 removed
[  238.491963][   T55] Bluetooth: hci2: command tx timeout
[  239.229598][    T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  239.258450][T10825] syz_tun: entered allmulticast mode
[  239.316504][T10774] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.319351][T10774] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.322820][T10774] bridge_slave_0: entered allmulticast mode
[  239.338089][T10774] bridge_slave_0: entered promiscuous mode
[  239.347707][T10774] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.349911][T10774] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.352882][T10774] bridge_slave_1: entered allmulticast mode
[  239.356873][T10774] bridge_slave_1: entered promiscuous mode
[  239.382152][T10824] syz_tun: left allmulticast mode
[  239.386257][T10774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  239.392885][    T9] usb 2-1: config 0 has an invalid interface number: 17 but max is 0
[  239.397860][    T9] usb 2-1: config 0 has no interface number 0
[  239.402005][T10774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  239.408712][    T9] usb 2-1: config 0 interface 17 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64
[  239.412281][    T9] usb 2-1: config 0 interface 17 has no altsetting 0
[  239.414759][    T9] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a21, bcdDevice=e2.be
[  239.437004][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.442939][    T9] usb 2-1: config 0 descriptor??
[  239.472091][T10819] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  239.487356][T10774] team0: Port device team_slave_0 added
[  239.493987][T10774] team0: Port device team_slave_1 added
[  239.554437][T10774] batman_adv: batadv0: Adding interface: batadv_slave_0
[  239.557347][T10774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  239.567702][T10774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  239.573375][T10774] batman_adv: batadv0: Adding interface: batadv_slave_1
[  239.576037][T10774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  239.591999][T10774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  239.642742][T10774] hsr_slave_0: entered promiscuous mode
[  239.646013][T10774] hsr_slave_1: entered promiscuous mode
[  239.650103][T10774] debugfs: 'hsr0' already exists in 'hsr'
[  239.652444][T10774] Cannot create hsr debugfs directory
[  239.714234][ T6030] usb 2-1: USB disconnect, device number 24
[  239.851178][T10774] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  239.859511][T10774] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  239.867656][T10774] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  239.875908][T10774] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  239.927374][T10774] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.930172][T10774] bridge0: port 2(bridge_slave_1) entered forwarding state
[  239.933970][T10774] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.936253][T10774] bridge0: port 1(bridge_slave_0) entered forwarding state
[  239.991088][T10774] 8021q: adding VLAN 0 to HW filter on device bond0
[  240.003732][ T6681] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.007091][ T6681] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.017804][T10774] 8021q: adding VLAN 0 to HW filter on device team0
[  240.029545][ T6681] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.031784][ T6681] bridge0: port 1(bridge_slave_0) entered forwarding state
[  240.040448][ T6681] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.042727][ T6681] bridge0: port 2(bridge_slave_1) entered forwarding state
[  240.098589][T10851] overlayfs: failed to resolve './file0': -2
[  240.215056][T10774] 8021q: adding VLAN 0 to HW filter on device batadv0
[  240.452014][T10774] veth0_vlan: entered promiscuous mode
[  240.462107][T10774] veth1_vlan: entered promiscuous mode
[  240.491137][T10774] veth0_macvtap: entered promiscuous mode
[  240.499648][T10774] veth1_macvtap: entered promiscuous mode
[  240.518233][T10774] batman_adv: batadv0: Interface activated: batadv_slave_0
[  240.529797][T10774] batman_adv: batadv0: Interface activated: batadv_slave_1
[  240.546478][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  240.553263][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  240.557156][   T55] Bluetooth: hci2: command tx timeout
[  240.572506][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  240.576062][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  240.674689][   T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.680540][   T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.724811][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.728087][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.331269][T10890] overlayfs: failed to clone upperpath
[  241.495088][T10898] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1964'.
[  241.714472][T10911] 9pnet_fd: p9_fd_create_unix (10911): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  242.126098][T10923] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1974'.
[  242.226366][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1975'.
[  242.229593][T10925] netlink: 34 bytes leftover after parsing attributes in process `syz.1.1975'.
[  242.287487][T10927] loop1: detected capacity change from 0 to 4096
[  242.427677][ T2190] ntfs3(loop1): ino=5, mi_enum_attr
[  242.676677][   T55] Bluetooth: hci2: command tx timeout
[  244.156969][T10968] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  244.385656][T10974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1996'.
[  244.393771][T10976] loop1: detected capacity change from 0 to 512
[  244.394264][T10974] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1996'.
[  244.417467][T10976] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  244.434161][T10976] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1998: invalid indirect mapped block 8 (level 2)
[  244.450222][T10978] loop5: detected capacity change from 0 to 8192
[  244.453986][T10976] EXT4-fs (loop1): Remounting filesystem read-only
[  244.457656][T10976] EXT4-fs (loop1): 1 truncate cleaned up
[  244.461175][T10976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  244.482683][T10976] EXT4-fs (loop1): changing journal_checksum during remount not supported; ignoring
[  244.496732][T10976] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  244.499513][T10978]  loop5: p1 < > p2 p3 < p5 >
[  244.507476][T10978] loop5: partition table partially beyond EOD, truncated
[  244.510249][T10978] loop5: p1 start 1275068416 is beyond EOD, truncated
[  244.533849][ T5984] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.581131][T10986] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2002'.
[  244.584693][T10986] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2002'.
[  244.678033][T10992] loop5: detected capacity change from 0 to 4096
[  244.695414][T10993] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  244.718148][   T55] Bluetooth: hci2: command tx timeout
[  244.744746][T10994] overlayfs: failed to resolve './file1': -2
[  245.348261][T11012] netlink: 'syz.5.2013': attribute type 10 has an invalid length.
[  245.359196][T11012] team0: Port device dummy0 added
[  245.486685][   T33] kauditd_printk_skb: 18 callbacks suppressed
[  245.486700][   T33] audit: type=1326 audit(1758540580.980:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11021 comm="syz.5.2019" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9823b8ec29 code=0x7ffc0000
[  245.512431][   T33] audit: type=1326 audit(1758540580.980:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11021 comm="syz.5.2019" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9823b8ec29 code=0x7ffc0000
[  245.530287][   T33] audit: type=1326 audit(1758540580.980:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11021 comm="syz.5.2019" exe="/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f9823b8ec29 code=0x7ffc0000
[  245.543458][   T33] audit: type=1326 audit(1758540580.980:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11021 comm="syz.5.2019" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9823b8ec29 code=0x7ffc0000
[  245.581977][   T33] audit: type=1326 audit(1758540580.980:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11021 comm="syz.5.2019" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9823b8ec29 code=0x7ffc0000
[  245.602829][   T33] audit: type=1326 audit(1758540580.980:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11021 comm="syz.5.2019" exe="/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f9823b8ec29 code=0x7ffc0000
[  245.618916][   T33] audit: type=1326 audit(1758540580.980:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11021 comm="syz.5.2019" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9823b8ec29 code=0x7ffc0000
[  245.628622][   T33] audit: type=1326 audit(1758540580.980:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11021 comm="syz.5.2019" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9823b8ec29 code=0x7ffc0000
[  245.898146][T11034] loop5: detected capacity change from 0 to 32768
[  245.991041][T11034] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  246.150159][T10774] ocfs2: Unmounting device (7,5) on (node local)
[  246.569581][T11054] loop5: detected capacity change from 0 to 8
[  246.580011][T11054] Page size > filesystem block size (0).  This is currently not supported!
[  247.009054][T11058] loop1: detected capacity change from 0 to 4096
[  247.011442][T11058] ext2: Unknown parameter 'nouser_xattr'
[  247.599804][T11067] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2037'.
[  248.449198][T11090] sp0: Synchronizing with TNC
[  248.674175][T11104] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2054'.
[  248.713250][T11106] loop5: detected capacity change from 0 to 512
[  248.737750][T11106] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  248.749518][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2057'.
[  248.770642][T11106] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.775454][T11106] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  248.812681][T11106] EXT4-fs (loop5): shut down requested (1)
[  248.845375][T10774] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.109613][T11139] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2070'.
[  249.133729][T11139] bridge0: entered promiscuous mode
[  249.136898][T11139] macsec1: entered allmulticast mode
[  249.140527][T11139] bridge0: entered allmulticast mode
[  249.149401][T11139] bridge0: port 3(macsec1) entered blocking state
[  249.152086][T11139] bridge0: port 3(macsec1) entered disabled state
[  249.160645][T11139] bridge0: left allmulticast mode
[  249.162689][T11139] bridge0: left promiscuous mode
[  249.793104][T11159] loop5: detected capacity change from 0 to 16
[  249.798909][T11159] erofs (device loop5): mounted with root inode @ nid 36.
[  249.813510][T11159] erofs (device loop5): readahead error at folio 4 @ nid 36
[  249.818458][T11159] erofs (device loop5): readahead error at folio 2 @ nid 36
[  249.821756][T11159] syz.5.2079: attempt to access beyond end of device
[  249.821756][T11159] loop5: rw=524288, sector=13478624032, nr_sectors = 64 limit=16
[  249.829985][T11159] syz.5.2079: attempt to access beyond end of device
[  249.829985][T11159] loop5: rw=0, sector=13478624032, nr_sectors = 8 limit=16
[  249.839166][T11159] erofs (device loop5): read error -5 @ 0 of nid 36
[  249.841217][T11159] erofs (device loop5): failed to readdir of logical block 0 of nid 36
[  250.400523][T11177] fuse: root generation should be zero
[  250.405232][T11177] 9pnet_fd: p9_fd_create_unix (11177): problem connecting socket: ./file0/file0: -5
[  250.597511][T11157] loop1: detected capacity change from 0 to 131072
[  250.602933][T11157] F2FS-fs (loop1): invalid crc value
[  250.739516][T11187] overlayfs: failed to clone upperpath
[  250.785804][T11157] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  250.837328][T11188] netlink: 'syz.3.2090': attribute type 2 has an invalid length.
[  250.898970][T11157] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  252.201448][T11203] delete_channel: no stack
[  252.555670][T11193] loop5: detected capacity change from 0 to 32768
[  252.573360][T11193] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  252.590697][T11193] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  252.655356][T10774] ocfs2: Unmounting device (7,5) on (node local)
[  252.795518][T11216] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2099'.
[  254.506378][T11263] ==================================================================
[  254.509397][T11263] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  254.512400][T11263] Read of size 2 at addr ffff88802ad945c2 by task syz.1.2118/11263
[  254.515475][T11263] 
[  254.517239][T11263] CPU: 1 UID: 0 PID: 11263 Comm: syz.1.2118 Not tainted syzkaller #0 PREEMPT(full) 
[  254.517259][T11263] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  254.517271][T11263] Call Trace:
[  254.517279][T11263]  <TASK>
[  254.517287][T11263]  dump_stack_lvl+0x189/0x250
[  254.517310][T11263]  ? __kasan_check_byte+0x12/0x40
[  254.517333][T11263]  ? __pfx_dump_stack_lvl+0x10/0x10
[  254.517349][T11263]  ? lock_release+0x4b/0x3e0
[  254.517374][T11263]  ? __virt_addr_valid+0x4a5/0x5c0
[  254.517391][T11263]  print_report+0xca/0x240
[  254.517405][T11263]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  254.517422][T11263]  kasan_report+0x118/0x150
[  254.517440][T11263]  ? seqcount_lockdep_reader_access+0x17d/0x1c0
[  254.517458][T11263]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  254.517477][T11263]  __xfrm_state_lookup+0x6ad/0x8d0
[  254.517497][T11263]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  254.517516][T11263]  xfrm_state_add+0x27d/0xc40
[  254.517533][T11263]  pfkey_add+0x1edd/0x2e00
[  254.517557][T11263]  ? __pfx_pfkey_add+0x10/0x10
[  254.517571][T11263]  ? kmem_cache_free+0x18f/0x400
[  254.517594][T11263]  pfkey_sendmsg+0xbfe/0x1090
[  254.517610][T11263]  ? trace_sched_exit_tp+0x36/0x110
[  254.517633][T11263]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  254.517654][T11263]  ? security_socket_sendmsg+0x19/0x2b0
[  254.517672][T11263]  ? aa_sock_msg_perm+0xf1/0x1d0
[  254.517686][T11263]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  254.517701][T11263]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  254.517717][T11263]  __sock_sendmsg+0x21c/0x270
[  254.517739][T11263]  ____sys_sendmsg+0x505/0x830
[  254.517757][T11263]  ? __pfx_____sys_sendmsg+0x10/0x10
[  254.517777][T11263]  ? import_iovec+0x74/0xa0
[  254.517797][T11263]  ___sys_sendmsg+0x21f/0x2a0
[  254.517813][T11263]  ? __pfx____sys_sendmsg+0x10/0x10
[  254.517851][T11263]  ? __fget_files+0x2a/0x420
[  254.517865][T11263]  ? __fget_files+0x3a0/0x420
[  254.517881][T11263]  __x64_sys_sendmsg+0x19b/0x260
[  254.517938][T11263]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  254.517959][T11263]  ? rcu_is_watching+0x15/0xb0
[  254.517976][T11263]  ? do_syscall_64+0xbe/0x3b0
[  254.517994][T11263]  do_syscall_64+0xfa/0x3b0
[  254.518009][T11263]  ? lockdep_hardirqs_on+0x9c/0x150
[  254.518023][T11263]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.518037][T11263]  ? exc_page_fault+0x9f/0xf0
[  254.518051][T11263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.518066][T11263] RIP: 0033:0x7f30f878ec29
[  254.518079][T11263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  254.518092][T11263] RSP: 002b:00007f30f95f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  254.518107][T11263] RAX: ffffffffffffffda RBX: 00007f30f89d6180 RCX: 00007f30f878ec29
[  254.518119][T11263] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006
[  254.518129][T11263] RBP: 00007f30f8811e41 R08: 0000000000000000 R09: 0000000000000000
[  254.518137][T11263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  254.518145][T11263] R13: 00007f30f89d6218 R14: 00007f30f89d6180 R15: 00007fff160ba258
[  254.518161][T11263]  </TASK>
[  254.518166][T11263] 
[  254.638775][T11263] Allocated by task 8992:
[  254.640423][T11263]  kasan_save_track+0x3e/0x80
[  254.642190][T11263]  __kasan_slab_alloc+0x6c/0x80
[  254.644020][T11263]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  254.646076][T11263]  xfrm_state_alloc+0x24/0x2f0
[  254.647870][T11263]  __find_acq_core+0x8a7/0x1c00
[  254.649713][T11263]  xfrm_find_acq+0x78/0xa0
[  254.651407][T11263]  pfkey_getspi+0x65d/0xee0
[  254.653175][T11263]  pfkey_sendmsg+0xbfe/0x1090
[  254.655056][T11263]  __sock_sendmsg+0x21c/0x270
[  254.656944][T11263]  ____sys_sendmsg+0x505/0x830
[  254.658837][T11263]  ___sys_sendmsg+0x21f/0x2a0
[  254.660591][T11263]  __x64_sys_sendmsg+0x19b/0x260
[  254.662419][T11263]  do_syscall_64+0xfa/0x3b0
[  254.664119][T11263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.666272][T11263] 
[  254.667174][T11263] Freed by task 9:
[  254.668613][T11263]  kasan_save_track+0x3e/0x80
[  254.670455][T11263]  kasan_save_free_info+0x46/0x50
[  254.672474][T11263]  __kasan_slab_free+0x5b/0x80
[  254.674329][T11263]  kmem_cache_free+0x18f/0x400
[  254.676114][T11263]  xfrm_state_gc_task+0x52d/0x6b0
[  254.677947][T11263]  process_scheduled_works+0xae1/0x17b0
[  254.679980][T11263]  worker_thread+0x8a0/0xda0
[  254.681707][T11263]  kthread+0x711/0x8a0
[  254.683230][T11263]  ret_from_fork+0x439/0x7d0
[  254.684974][T11263]  ret_from_fork_asm+0x1a/0x30
[  254.686781][T11263] 
[  254.687663][T11263] The buggy address belongs to the object at ffff88802ad94480
[  254.687663][T11263]  which belongs to the cache xfrm_state of size 928
[  254.692714][T11263] The buggy address is located 322 bytes inside of
[  254.692714][T11263]  freed 928-byte region [ffff88802ad94480, ffff88802ad94820)
[  254.697657][T11263] 
[  254.698552][T11263] The buggy address belongs to the physical page:
[  254.700940][T11263] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802ad94900 pfn:0x2ad94
[  254.704679][T11263] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  254.707779][T11263] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  254.710503][T11263] page_type: f5(slab)
[  254.712016][T11263] raw: 00fff00000000040 ffff888104f873c0 dead000000000122 0000000000000000
[  254.715432][T11263] raw: ffff88802ad94900 00000000800e000a 00000000f5000000 0000000000000000
[  254.718921][T11263] head: 00fff00000000040 ffff888104f873c0 dead000000000122 0000000000000000
[  254.722689][T11263] head: ffff88802ad94900 00000000800e000a 00000000f5000000 0000000000000000
[  254.726212][T11263] head: 00fff00000000002 ffffea0000ab6501 00000000ffffffff 00000000ffffffff
[  254.729777][T11263] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  254.733355][T11263] page dumped because: kasan: bad access detected
[  254.735774][T11263] page_owner tracks the page as allocated
[  254.737964][T11263] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6449, tgid 6447 (syz.2.237), ts 93211873162, free_ts 92918694394
[  254.745442][T11263]  post_alloc_hook+0x240/0x2a0
[  254.747404][T11263]  get_page_from_freelist+0x21e4/0x22c0
[  254.749622][T11263]  __alloc_frozen_pages_noprof+0x181/0x370
[  254.751975][T11263]  alloc_pages_mpol+0x232/0x4a0
[  254.753942][T11263]  allocate_slab+0x8a/0x370
[  254.755826][T11263]  ___slab_alloc+0xbeb/0x1420
[  254.757808][T11263]  kmem_cache_alloc_noprof+0x283/0x3c0
[  254.759998][T11263]  xfrm_state_alloc+0x24/0x2f0
[  254.761965][T11263]  pfkey_add+0x6e4/0x2e00
[  254.763716][T11263]  pfkey_sendmsg+0xbfe/0x1090
[  254.765629][T11263]  __sock_sendmsg+0x21c/0x270
[  254.767585][T11263]  ____sys_sendmsg+0x505/0x830
[  254.769514][T11263]  ___sys_sendmsg+0x21f/0x2a0
[  254.771441][T11263]  __x64_sys_sendmsg+0x19b/0x260
[  254.773479][T11263]  do_syscall_64+0xfa/0x3b0
[  254.775303][T11263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.777639][T11263] page last free pid 5991 tgid 5991 stack trace:
[  254.780148][T11263]  __free_frozen_pages+0xbc4/0xd30
[  254.782244][T11263]  __put_partials+0x156/0x1a0
[  254.784189][T11263]  put_cpu_partial+0x17c/0x250
[  254.786150][T11263]  __slab_free+0x2d5/0x3c0
[  254.787969][T11263]  qlist_free_all+0x97/0x140
[  254.789887][T11263]  kasan_quarantine_reduce+0x148/0x160
[  254.792089][T11263]  __kasan_slab_alloc+0x22/0x80
[  254.794030][T11263]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  254.796279][T11263]  getname_flags+0xb8/0x540
[  254.798076][T11263]  do_sys_openat2+0xbc/0x1c0
[  254.799927][T11263]  __x64_sys_openat+0x138/0x170
[  254.801916][T11263]  do_syscall_64+0xfa/0x3b0
[  254.803685][T11263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.806028][T11263] 
[  254.807022][T11263] Memory state around the buggy address:
[  254.809222][T11263]  ffff88802ad94480: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  254.812409][T11263]  ffff88802ad94500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  254.815486][T11263] >ffff88802ad94580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  254.818554][T11263]                                            ^
[  254.820993][T11263]  ffff88802ad94600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  254.824087][T11263]  ffff88802ad94680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  254.827286][T11263] ==================================================================
[  254.830952][T11263] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  254.834166][T11263] CPU: 1 UID: 0 PID: 11263 Comm: syz.1.2118 Not tainted syzkaller #0 PREEMPT(full) 
[  254.839082][T11263] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  254.844027][T11263] Call Trace:
[  254.845778][T11263]  <TASK>
[  254.847270][T11263]  dump_stack_lvl+0x99/0x250
[  254.849541][T11263]  ? __asan_memcpy+0x40/0x70
[  254.851661][T11263]  ? __pfx_dump_stack_lvl+0x10/0x10
[  254.854428][T11263]  ? __pfx__printk+0x10/0x10
[  254.856488][T11263]  vpanic+0x281/0x750
[  254.858195][T11263]  ? __pfx_vpanic+0x10/0x10
[  254.860472][T11263]  ? irqentry_exit+0x74/0x90
[  254.862783][T11263]  panic+0xb9/0xc0
[  254.864696][T11263]  ? __pfx_panic+0x10/0x10
[  254.866747][T11263]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  254.869145][T11263]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  254.871488][T11263]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  254.873578][T11263]  check_panic_on_warn+0x89/0xb0
[  254.875531][T11263]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  254.877620][T11263]  end_report+0x78/0x160
[  254.879336][T11263]  kasan_report+0x129/0x150
[  254.881264][T11263]  ? seqcount_lockdep_reader_access+0x17d/0x1c0
[  254.883780][T11263]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  254.885958][T11263]  __xfrm_state_lookup+0x6ad/0x8d0
[  254.887996][T11263]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  254.890656][T11263]  xfrm_state_add+0x27d/0xc40
[  254.892626][T11263]  pfkey_add+0x1edd/0x2e00
[  254.894474][T11263]  ? __pfx_pfkey_add+0x10/0x10
[  254.896542][T11263]  ? kmem_cache_free+0x18f/0x400
[  254.898992][T11263]  pfkey_sendmsg+0xbfe/0x1090
[  254.901519][T11263]  ? trace_sched_exit_tp+0x36/0x110
[  254.903881][T11263]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  254.906065][T11263]  ? security_socket_sendmsg+0x19/0x2b0
[  254.908232][T11263]  ? aa_sock_msg_perm+0xf1/0x1d0
[  254.910107][T11263]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  254.912172][T11263]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  254.914079][T11263]  __sock_sendmsg+0x21c/0x270
[  254.915878][T11263]  ____sys_sendmsg+0x505/0x830
[  254.917735][T11263]  ? __pfx_____sys_sendmsg+0x10/0x10
[  254.919719][T11263]  ? import_iovec+0x74/0xa0
[  254.921493][T11263]  ___sys_sendmsg+0x21f/0x2a0
[  254.923242][T11263]  ? __pfx____sys_sendmsg+0x10/0x10
[  254.925171][T11263]  ? __fget_files+0x2a/0x420
[  254.926906][T11263]  ? __fget_files+0x3a0/0x420
[  254.928631][T11263]  __x64_sys_sendmsg+0x19b/0x260
[  254.930491][T11263]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  254.932617][T11263]  ? rcu_is_watching+0x15/0xb0
[  254.934619][T11263]  ? do_syscall_64+0xbe/0x3b0
[  254.936473][T11263]  do_syscall_64+0xfa/0x3b0
[  254.938307][T11263]  ? lockdep_hardirqs_on+0x9c/0x150
[  254.940319][T11263]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.942786][T11263]  ? exc_page_fault+0x9f/0xf0
[  254.944833][T11263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.947427][T11263] RIP: 0033:0x7f30f878ec29
[  254.949286][T11263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  254.956821][T11263] RSP: 002b:00007f30f95f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  254.959905][T11263] RAX: ffffffffffffffda RBX: 00007f30f89d6180 RCX: 00007f30f878ec29
[  254.962930][T11263] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006
[  254.965814][T11263] RBP: 00007f30f8811e41 R08: 0000000000000000 R09: 0000000000000000
[  254.968743][T11263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  254.971766][T11263] R13: 00007f30f89d6218 R14: 00007f30f89d6180 R15: 00007fff160ba258
[  254.974751][T11263]  </TASK>
[  254.976667][T11263] Kernel Offset: disabled
[  254.978342][T11263] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:29:50  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff8a282c38 RBX=ffff88811354c200 RCX=ffff888024ee0000 RDX=0000000000000002
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffc90007a77870 RSP=ffffc90007a776d8
R8 =ffffc90007a7779f R9 =0000000000000000 R10=ffffc90007a77780 R11=fffff52000f4eef4
R12=ffff88810e488c00 R13=0000000000000002 R14=ffff88810e488c34 R15=1ffff92000f4eeec
RIP=ffffffff81bfadc7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f30f96176c0 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2df11ff8 CR3=000000010d97c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f30f89a7498 00007f30f89a7470 XMM03=00007f30f89a74a8 00007f30f89a74a0
XMM04=00007f30f950d100 00007f30f89a7460 XMM05=00007f30f89a7478 00007f30f89a74c0
XMM06=00007f30f89a74b8 00007f30f89a74b0 XMM07=00007f30f89a74a8 00007f30f89a74a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f30f8812fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000005d RBX=000000000000005d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001dde RDI=0000000000001ddf RBP=00000000000003f8 RSP=ffffc90007be6d90
R8 =ffff888021250237 R9 =1ffff1100424a046 R10=dffffc0000000000 R11=ffffffff854fb260
R12=dffffc0000000000 R13=ffffffff99b038d6 R14=ffffffff99df84e0 R15=0000000000000000
RIP=ffffffff854fb2dc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f30f95f66c0 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f30f95f5fc8 CR3=000000010d97c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f30f89a7498 00007f30f89a7470 XMM03=00007f30f89a74a8 00007f30f89a74a0
XMM04=00007f30f950d100 00007f30f89a7460 XMM05=00007f30f89a7478 00007f30f89a74c0
XMM06=00007f30f89a74b8 00007f30f89a74b0 XMM07=00007f30f89a74a8 00007f30f89a74a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f30f8812fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
