last executing test programs:

2m5.590006649s ago: executing program 0 (id=225):
r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x34565559, 0x0, 0x0, 0x0, 0x1, 0xfeedcafe, 0x3, 0x0, 0x0, 0x6}})

2m5.520246245s ago: executing program 0 (id=227):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f00000105c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=adaptive,heap,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00'], 0x1, 0x105c9, &(0x7f0000020bc0)="$eJzs3M1uG1UUAODjpClNKCVCLNh1JISUSLUVJ2kFuwCpAIlUET8LVuDYjuXWP1HsJKYIEVgjln0RWLFnz0uwQyyQ2BWBPDOGphQRqHGS5vuk8Zl7PXN8rlWpOnMjB3BuzSe//FyIKzEbEdMRcTkiPS/kR2otCy9ExNWImHrgKOTzf0xcjIi5iLgyTJ7lLORvfXrvcOP+YGMuz3rtZFYMnAYvRUR7Jzs/aGex28ji7Xy+st9MY3t1P4/ZG+07+bibxYP6VprhoDK6rpLGlUZ2fXdnrzeM261KdRgbze10fqeTfWBvvzHKk95wu7Kbjmv1rVG5h+l9d7PBII93e/0sTy3P93GaPvr9Uczm64N6tp6dO2msdvr5fDerr1YfDON+HnvZdFS7rVpax9Z//JLPgLebnb1Bsl/f7TW7neR6qfxyqXyjWN7t1ur9+mqx0q7dWE0WGq3hZcV+vdJea3S7jVa9VO22F5OFRrVaLJeThfX6VrPSScrl0kppqXh9MT+7lrxx6/2kVUsWhvG1Zmev32z1ku3ubpLdsZgsl1ZeWUxeLCfvbmwmm+/cvLmx+d6H6x/cenXjrdfzi/5SVrKwvLS8XCwvFZfLi/9ywb+eyvUP/4uezPofcunxbue8K5x0AQBnT9r/z8Yk+/9Pvr330/oXle/1/3COnaX+v5k35Pr/8Tsl/e/k+v9jrP/zc7R+/T+PRf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBu/TDz9ZvpyXw2fjqffyafei4fFyJiKiJ+e4TpuHgk53SeZ+Zvrp95qIbvCpFmGH7GU/kxFxFr+XH/2UfXfmGs3wQAAAA8mb45vPpV1q1nL/MnXRCTlD20mbr80ZjyFSJiZv7HMWWbGr48P6Zk6b/vCzEYU7b0AdalMSXLH4p9NqZ0xzJ9JFx6IBSyMDXJagAAgMk42gnYUQcAAHhyfXnSBTB+x9m/K8RoK3O0F5z+5f2fG4KzR0YAAADAGVQ46QIAAACA/13a/5/l3/8DAAAA/ln2+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRHMCfDW7pl4qqLiv1Kt3BMXqELrtEHKCX4Aj0CrkAZyC7HCHCER6j4IhIURgbBf1+kj/Ggj/PiM2bQQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgT7fVev5/8fPfuTm7+jx57gYAAAA4ZVut583JNI0/tde/tJe+teMiIsqIONW7j+JdJ3PU5lTPvL56UsNNRJOw/4z37fYxIn612/3Xvr8FAAAAuF6b5WqWuvW0m166IIaUJm3Kz78z5RURUU3vMqWV+933TGHN73scfzOlNRNYk0xhacptnCvtRUadw+ToUKRDOWg5AADAILqdwLBdCAAAAEP6c3S+uGAdDKyIw1LmYS24+ef944Lgh84IAAAAeIOKSxcAAAAA9K7p/z3/DwAAAK5bev4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfdpW6/lmuZqdm7OrX+HHJL25rusMtwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MD+vKNACIRBGOxd35nM/Q8rDRobmlSB8PE3BgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw4nd/+T8xNc4kc6+NpeeRZO3U2Do19s6Noz+Mr18DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/vzkgIhEARRMGf876Tvf1hJ0DOIEAENjypq0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHzR7375PzE1ziRzp42l45Fk7aqxddXYe9A4ejDe/g0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzv37xpJFQcA/M3uzt4PkFujLJyNJ56cKF6y5y8EmyuEYCFYieWS2z1W91TuUnhHCtNYCP4HNtpeIwQEOQv/giusvDI2EWSLCBZWyvyKk2zQiZrZ3dznA2/eN5OXed83gZDvvEkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMLkarhQxM3k0MniRn7ux92NtaR/cKBP7PTvnk9aEkf1pr1wWsk96s46CwAAAE66ZlHfhxC2463VpG900vr/mWJMUvNvPJLFRT1/sO4v+qL2T9q97756e2+iTjZPHEL4pjMerNS2wvl2seK4cxXGpM8Ssic0zfTb1nhz87FJnN716PP7999op+Gp/5YxAPB/uFz0eTCMPkl/PxqOxoPeLBMDYHG1/vnTxZCi/m92asgLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMYmm+H5Io5CCE+0/ooTD3Y31g7rd/p3zxft3LuPf1q+ZnKJOIQwHI0Hp2tcyzy7WHHcrdt33u+Px4ObRwqe/FdfJRAIFiU45h9QAACcKHHekrp+O95aTc5FSyH88eX++v9SKQ4V6//vR/culecq1/+92lY436rW/8vrNz5avnX7zgujG/3rg+uDD670Xuq9uvLay71XlpP7uZIdjzlbAAAAFlU7b+X6v7E0vf9/thSHivX/Dz+/80t5rqb6f8rR9/+POSEAAICH2KMXfvs1OuR81G6Hj/vr6zd72XHv4yvZcQap/r0z06dO5a1c/zeXZpAbAAAAULvJZrRv//9aKQ4V9/+/fe73L8rXbOaPIIaj8eDy2ofja/UtZ25N7/93Dh1Xx58T17BcAAAAZuRM3sr7/3H6/n/jqWJMI4Tw7NNZnP8bwEr1/+utz66W5yq///9ifUucS41udj+qvP+fju2G0OrWkBgAAAAn0um8JfX/T/HW6ntfn32r7f1/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5kf+5tEwbCOA6/viRK3CYjpLf4mIGGCsEKgIRkyTMwAAvRUNFaLAIrgATnms5QPE/z/xVX3AsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvL3r0xcfEVFE6jJFmm7/zp8R8RVp17aT73sW+8up+Xnk4nCc5fyN+X8ZEWUUfZwDANC7qtsc6029GuQd5h3lHeetyqZevvLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADGCgAA//9fbFmx")
llistxattr(&(0x7f0000000280)='./file1\x00', 0x0, 0x17)

2m4.721917614s ago: executing program 0 (id=232):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
accept$netrom(r0, 0x0, 0x0)

2m4.310730048s ago: executing program 0 (id=234):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000180)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@grpquota}]}, 0xd, 0x5e1, &(0x7f0000001200)="$eJzs3c1vVFUbAPDnTD9oKe/bQoyKC2liDCSGlhYwxLiArSENfsSNGystiBRoaI0WTSgJbkyMG2NMXLkQ/wslsmWlKxduXBkSooaliWNmem/baWdaOrS92Pv7JUPvvWcO59xOnznnnjnnTgClNVj7pxKxPyKmU0R/ml9M64wscXDheQ/++vhs7ZGiWn39jxQpO5Y/P2U/+7LMPRHx048p9nWsLndm7trF8ampyavZ/vDspenhmblrhy9cGj8/eX7y8uiLoyeOHzt+YuRIW+d1vcmx0zff+6D/07G3vv367zTy3a9jKU7GK9kTl5/HZhmMwfrvJK1O6jux2YUVpCP7O1n+EqfOAivEhuSvX1dEPBX90RFLL15/fPJqoZUDtlQ1RVSBkkriH0oq7wfk1/Yrr4MrhfRKgO1w/9TCAMDq+O9cGBuMnvrYwO4HKZYP66SIaG9krtGeiLh7Z+zmuTtjN2OLxuGA5uZvRMTTzeI/1eN/IHpioB7/lYb4r/ULzmQ/a8dfa7P8lUPF4h+2z0L896wZ/9Ei/t9eFv/vtFn+4NLmu70N8d/b7ikBAAAAAABAad0+FdknfEtzABb2Kovzf6LJ/J++iDi5CeUPrthf/fl/5d4mFAM0cf9UxMtN5/9W8tm/Ax3Z1v/q8wG60rkLU5NHIuL/EXEounbV9kfWKOPwZ/u+apU2mM3/yx+18u9mcwGzetzr3NWYZ2J8dvxRzxuIuH8j4pmm83/TYvufmrT/tfeD6YcsY9/zt860Sls//oGtUv0m4mDT9n/prhVp7ftzDNf7A8N5r2C1Zz/6/PtW5bcb/24xAY+u1v7vXjv+B9Ly+/XMbLyMo3Od1VZp7fb/u9Mb9VvOdGfHPhyfnb06EtGdTnf0RHfj8dGN1xl2ojwe8nipxf+h55pf/6/V/++NiPkV/3f6s3FNce7Jf/p+a1Uf/X8oTi3+JzbU/m98Y/TWwA+tyn+49v9Yva0/lB0x/gcLvszDtLvxeJNw7GyWtN31BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdoBIReyJVhha3K5WhoYi+iHgidlemrszMvnDuyvuXJ2pp9e//r+Tf9Nu/sJ/y7/8fWLY/umL/aETsjYgvOnrr+0Nnr0xNFH3yAAAAAAAAAAAAAAAAAAAA8Jjoa7H+v+b3jqJrB2y5zqIrABSmSfz/XEQ9gO2n/YfyEv9QXuIfykv8Q3mJfygv8Q/lJf6hvMQ/AAAAAADsKHsP3P4lRcT8S731R013ltZVaM2ArVYpugJAYdziB8rL1B8ory7vAFB6aZ30npaZ1su5lumzj5AZAAAAAAAAAAAAAErn4H7r/6GsrP+H8rL+H8orX/17oOB6ANvPNT4Q66zkb7r+f91cAAAAAAAAAAAAAMBmmpm7dnF8amryqo03N5ZrJ/zqqtXq9dpfweNSn//4Rj4V/nGpz4qNfK3fw+Uq7j0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo9G8AAAD//0JvIXg=")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020)

2m4.15564554s ago: executing program 0 (id=236):
r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x36, 0x33, 0x62, 0x39, 0x65, 0x65, 0x38, 0x37, 0x64, 0x35, 0x65, 0x66, 0x36, 0x63, 0x56, 0x32]}, &(0x7f0000000080)={0x0, "e308f3451528dd8642a122380e2cf96c623806831ea937e74e5fcdb1575bd09a777d6f9db2a0075c273cf99230ee16b1dcb42ca00363baa995e728237c62e6ab", 0x28}, 0x48, 0xffffffffffffffff)
keyctl$set_timeout(0xf, r0, 0x100000001)
syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x8, 0x20, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5e, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xf9, 0x3, 0x5, {0x7, 0x25, 0x1, 0x80, 0x5, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x2, 0x4, 0x2, {0x7, 0x25, 0x1, 0x83, 0x5d, 0xfff0}}}}}}}]}}, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000002480)={r0}, &(0x7f00000024c0)=ANY=[], 0x0, 0x0)

2m3.669684531s ago: executing program 0 (id=247):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
r1 = accept4(r0, 0x0, 0x0, 0x800)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0xc000)
r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0x5, 0xffff}}}, 0x24}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2m3.545726686s ago: executing program 32 (id=247):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
r1 = accept4(r0, 0x0, 0x0, 0x800)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0xc000)
r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0x5, 0xffff}}}, 0x24}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)

3.409707564s ago: executing program 2 (id=1633):
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
socket$xdp(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})

2.24066292s ago: executing program 2 (id=1639):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x1000, 0x4)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000001880))

2.190100101s ago: executing program 2 (id=1641):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe2$9p(0x0, 0x84880)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffff7a, 0xffffffff, 0x210, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x88, 0x88, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x0, {0x4}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x3, 0x6, '\x00', {0x3}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308)

1.289159464s ago: executing program 2 (id=1647):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpgid(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0xd0, 0x0, &(0x7f0000000040)=<r4=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)

489.586664ms ago: executing program 3 (id=1656):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d020000000000000001000005ff07000003000090"], &(0x7f0000000f40)=""/4080, 0x3e, 0xff0, 0x9, 0x7ff}, 0x28)

356.485824ms ago: executing program 1 (id=1658):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x3f)

356.316563ms ago: executing program 3 (id=1659):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1019, &(0x7f0000001200)=""/4121, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)

270.713974ms ago: executing program 3 (id=1660):
syz_emit_ethernet(0x7a, &(0x7f0000000500)={@broadcast, @local, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00', 0x40, 0x3a, 0x0, @empty, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x427a2, {0x5, 0x6, "56883a", 0x402, 0x88, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @rand_addr=' \x01\x00', [@hopopts={0x3b, 0x0, '\x00', [@padn]}]}}}}}}}, 0x0)

270.512896ms ago: executing program 2 (id=1661):
r0 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14)
bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0xfd}, 0x14)

270.39106ms ago: executing program 1 (id=1662):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000005c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d410000000000000002900000039000000", 0x30)

265.30163ms ago: executing program 3 (id=1663):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
sendmmsg(r0, &(0x7f000000b140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1)

180.374715ms ago: executing program 2 (id=1664):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d44ebb40ec188832cf690100000109021b00010000000009040000010e01000009058103"], 0x0)

180.207683ms ago: executing program 1 (id=1665):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)

180.070162ms ago: executing program 3 (id=1666):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x82}, 0x1c, 0x0, 0x0, &(0x7f0000000780)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1, 0x0, [@mcast2]}}}], 0x28}, 0x20008040)

110.797838ms ago: executing program 1 (id=1667):
r0 = fsopen(&(0x7f0000000080)='nfsd\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x1, 0x2)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

59.640946ms ago: executing program 3 (id=1668):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x579, &(0x7f0000000900)="$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")
setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x3, 0xc002e38, 0x7ff, 0x7d, 0x10000, 0xa79, 0x0, 0x0, 0x100}}, 0x50)
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000300)=ANY=[], 0xfe37, 0x0)

59.451106ms ago: executing program 1 (id=1669):
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x201313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x1}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180))
bpf$PROG_LOAD(0x5, 0x0, 0x0)

0s ago: executing program 1 (id=1670):
r0 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYMLINKAT={0x26, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}})
io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

1): Directory bread(block 70) failed
[  107.332446][ T7058] FAT-fs (loop1): Directory bread(block 71) failed
[  107.344234][ T7058] FAT-fs (loop1): Directory bread(block 72) failed
[  107.346208][ T7058] FAT-fs (loop1): Directory bread(block 73) failed
[  107.362180][ T7058] syz.1.384: attempt to access beyond end of device
[  107.362180][ T7058] loop1: rw=8388608, sector=1192, nr_sectors = 4 limit=256
[  107.370793][ T6615] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  107.499849][ T7071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.390'.
[  107.524221][ T7071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.390'.
[  107.865185][ T7103] No such timeout policy "syz1"
[  107.880788][ T7105] veth2: entered promiscuous mode
[  107.883899][ T7105] veth2: entered allmulticast mode
[  107.920771][ T7107] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  108.406014][ T7124] loop1: detected capacity change from 0 to 4096
[  108.416572][ T7124] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  108.431248][ T7124] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  108.437808][ T7124] ntfs3(loop1): Failed to load $Bitmap (-22).
[  108.517156][ T7127] loop1: detected capacity change from 0 to 2048
[  108.525835][ T7125] loop3: detected capacity change from 0 to 32768
[  108.538567][ T7127] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  108.546182][ T7125] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  108.570501][ T7125] XFS (loop3): Ending clean mount
[  108.574098][ T7125] XFS (loop3): Quotacheck needed: Please wait.
[  108.597147][ T7125] XFS (loop3): Quotacheck: Done.
[  108.615573][ T6615] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  108.930636][ T7147] loop2: detected capacity change from 0 to 4096
[  108.958789][ T7152] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  109.119596][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.429'.
[  109.128364][ T7162] netlink: 312 bytes leftover after parsing attributes in process `syz.3.429'.
[  109.131135][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.429'.
[  109.302469][ T7178] netlink: 60 bytes leftover after parsing attributes in process `syz.2.436'.
[  109.413697][ T7183] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  109.422911][ T7183] EXT4-fs (loop1): 1 truncate cleaned up
[  109.425342][ T7183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.943390][ T7189] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  110.052427][ T7189] XFS (loop2): Ending clean mount
[  110.106095][ T5840] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  110.496243][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.539933][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.446'.
[  110.580301][ T7210] exfat: Deprecated parameter 'namecase'
[  110.591280][ T7210] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11ccab4c, utbl_chksum : 0xe619d30d)
[  110.980853][ T7218] set_capacity_and_notify: 3 callbacks suppressed
[  110.980869][ T7218] loop2: detected capacity change from 0 to 1024
[  111.028530][ T7218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  111.033017][ T7218] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.153327][ T7213] loop1: detected capacity change from 0 to 32768
[  111.183426][ T7213] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  111.235850][ T7213] XFS (loop1): Ending clean mount
[  111.283130][ T5834] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  111.728342][ T6996] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  111.753330][ T5131] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm kworker/u9:13: lblock 0 mapped to illegal pblock 0 (length 6)
[  111.770086][ T5131] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  111.781074][ T5131] EXT4-fs (loop2): This should not happen!! Data will be lost
[  111.781074][ T5131] 
[  111.790287][ T7239] loop1: detected capacity change from 0 to 2048
[  111.797145][ T7239] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  111.804442][ T5131] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 8: comm kworker/u9:13: lblock 8 mapped to illegal pblock 8 (length 8)
[  111.815691][ T5131] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  111.823270][ T5131] EXT4-fs (loop2): This should not happen!! Data will be lost
[  111.823270][ T5131] 
[  111.832219][ T7241] tmpfs: Bad value for 'mpol'
[  111.857353][   T34] audit: type=1400 audit(1770155178.730:5): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7242 comm="syz.1.457"
[  112.151654][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  112.236564][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.463'.
[  112.258591][   T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  112.410049][   T24] usb 2-1: Using ep0 maxpacket: 8
[  112.422369][   T24] usb 2-1: config 0 has an invalid interface number: 143 but max is 0
[  112.425459][   T24] usb 2-1: config 0 has no interface number 0
[  112.441029][   T24] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[  112.444623][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.460791][   T24] usb 2-1: config 0 descriptor??
[  112.570760][   T24] viperboard 2-1:0.143: version 0.00 found at bus 002 address 011
[  112.608280][   T24] viperboard-i2c viperboard-i2c.3.auto: error -EIO: failure setting i2c_bus_freq to 100
[  112.627056][   T24] viperboard-i2c viperboard-i2c.3.auto: probe with driver viperboard-i2c failed with error -5
[  112.677562][   T24] usb 2-1: USB disconnect, device number 11
[  112.902642][ T7285] loop3: detected capacity change from 0 to 40427
[  112.921541][ T7285] F2FS-fs (loop3): build fault injection rate: 690
[  112.927254][ T7285] F2FS-fs (loop3): invalid crc value
[  112.970479][ T7285] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  112.975640][ T7285] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  112.979090][ T7291] loop2: detected capacity change from 0 to 32768
[  112.991653][ T7291] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.471 (7291)
[  113.005965][ T7291] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  113.011734][ T7291] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  113.012197][ T7284] syz.3.470: attempt to access beyond end of device
[  113.012197][ T7284] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  113.049317][ T6615] syz-executor: attempt to access beyond end of device
[  113.049317][ T6615] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  113.061420][ T6615] CPU: 0 UID: 0 PID: 6615 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  113.061445][ T6615] Tainted: [L]=SOFTLOCKUP
[  113.061466][ T6615] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  113.061475][ T6615] Call Trace:
[  113.061480][ T6615]  <TASK>
[  113.061487][ T6615]  dump_stack_lvl+0xe8/0x150
[  113.061512][ T6615]  f2fs_handle_critical_error+0x37c/0x540
[  113.061562][ T6615]  f2fs_write_end_io+0x886/0xb60
[  113.061598][ T6615]  __submit_merged_bio+0x256/0x650
[  113.061621][ T6615]  __submit_merged_write_cond+0x269/0x530
[  113.061643][ T6615]  f2fs_write_data_pages+0x2806/0x3360
[  113.061687][ T6615]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  113.061743][ T6615]  ? __lock_acquire+0x6b5/0x2cf0
[  113.061770][ T6615]  ? __lock_acquire+0x6b5/0x2cf0
[  113.061790][ T6615]  ? do_raw_spin_lock+0x12b/0x2f0
[  113.061815][ T6615]  ? do_raw_spin_unlock+0x4d/0x210
[  113.061835][ T6615]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  113.061855][ T6615]  do_writepages+0x32e/0x550
[  113.061908][ T6615]  ? do_raw_spin_unlock+0x4d/0x210
[  113.061931][ T6615]  filemap_fdatawrite+0x1e9/0x2f0
[  113.061952][ T6615]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  113.062001][ T6615]  ? do_raw_spin_unlock+0x4d/0x210
[  113.062023][ T6615]  f2fs_sync_dirty_inodes+0x30e/0x810
[  113.062057][ T6615]  f2fs_write_checkpoint+0x9c6/0x2490
[  113.062072][ T6615]  ? stack_depot_save_flags+0x33/0x810
[  113.062105][ T6615]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  113.062144][ T6615]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  113.062158][ T6615]  ? kfree+0x1be/0x650
[  113.062186][ T6615]  kill_f2fs_super+0x308/0x710
[  113.062204][ T6615]  ? __pfx_kill_f2fs_super+0x10/0x10
[  113.062232][ T6615]  deactivate_locked_super+0xbc/0x130
[  113.062249][ T6615]  cleanup_mnt+0x437/0x4d0
[  113.062263][ T6615]  ? _raw_spin_unlock_irq+0x23/0x50
[  113.062285][ T6615]  task_work_run+0x1d9/0x270
[  113.062307][ T6615]  ? __pfx_task_work_run+0x10/0x10
[  113.062334][ T6615]  exit_to_user_mode_loop+0xed/0x480
[  113.062350][ T6615]  ? rcu_is_watching+0x15/0xb0
[  113.062369][ T6615]  do_syscall_64+0x2b7/0xf80
[  113.062383][ T6615]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.062395][ T6615]  ? trace_irq_disable+0x37/0x100
[  113.062416][ T6615]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.062431][ T6615] RIP: 0033:0x7fd2de39bf17
[  113.062444][ T6615] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  113.062455][ T6615] RSP: 002b:00007fff624f2098 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  113.062471][ T6615] RAX: 0000000000000000 RBX: 00007fd2de40471f RCX: 00007fd2de39bf17
[  113.062480][ T6615] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff624f2150
[  113.062487][ T6615] RBP: 00007fff624f2150 R08: 00007fff624f3150 R09: 00000000ffffffff
[  113.062496][ T6615] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff624f31e0
[  113.062503][ T6615] R13: 00007fd2de40471f R14: 000000000001b926 R15: 00007fff624f3220
[  113.062527][ T6615]  </TASK>
[  113.062639][ T6615] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  113.262470][ T7291] BTRFS info (device loop2): enabling ssd optimizations
[  113.268704][ T7291] BTRFS info (device loop2): turning on async discard
[  113.270758][ T7291] BTRFS info (device loop2): enabling free space tree
[  113.336290][ T5840] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  113.345326][ T7315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.472'.
[  113.593794][ T7325] bridge_slave_0: default FDB implementation only supports local addresses
[  113.620731][ T7324] loop1: detected capacity change from 0 to 4096
[  113.657737][ T7324] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  113.671419][ T7324] ntfs3(loop1): Failed to load $MFT.
[  113.757158][ T7333] loop2: detected capacity change from 0 to 4096
[  113.781604][ T7338] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  113.860682][ T7342] loop3: detected capacity change from 0 to 1024
[  113.907864][ T7342] hfsplus: bad catalog entry type
[  113.923336][   T89] hfsplus: b-tree write err: -5, ino 4
[  114.166533][ T7348] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  114.168821][ T7348] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  114.174390][ T7348] vhci_hcd vhci_hcd.0: Device attached
[  114.303363][ T7362] loop1: detected capacity change from 0 to 1024
[  114.310396][ T7362] hfsplus: failed to extend attributes file
[  114.408110][  T860] usb 39-1: new low-speed USB device number 2 using vhci_hcd
[  114.422514][ T7368] loop1: detected capacity change from 0 to 4096
[  114.427162][ T7368] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  114.431626][ T5900] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  114.437818][ T7368] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  114.440670][ T7368] ntfs3(loop1): Failed to load $UpCase (-22).
[  114.534700][ T7372] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  114.620649][ T5900] usb 4-1: config 0 has no interfaces?
[  114.623249][ T5900] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[  114.625935][ T5900] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[  114.633561][ T5900] usb 4-1: Manufacturer: syz
[  114.643682][ T5900] usb 4-1: config 0 descriptor??
[  114.858671][ T5900] usb 4-1: USB disconnect, device number 6
[  114.862968][ T7350] vhci_hcd: connection closed
[  114.873530][ T6665] vhci_hcd vhci_hcd.3: stop threads
[  114.876936][ T6665] vhci_hcd vhci_hcd.3: release socket
[  114.889115][ T6665] vhci_hcd vhci_hcd.3: disconnect device
[  114.922503][ T7382] F2FS-fs: heap/no_heap options were deprecated
[  114.925268][ T7382] F2FS-fs (loop2): build fault injection rate: 23
[  114.927136][ T7382] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[  114.930554][  T860] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  114.933843][ T7382] F2FS-fs (loop2): invalid crc value
[  114.941977][ T7382] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x659/0xa00
[  114.988826][ T7384] F2FS-fs: quotafile must be on filesystem root
[  114.994744][ T7382] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  114.999261][ T7382] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  115.018203][ T7382] F2FS-fs (loop2): inject dquot initialize in f2fs_dquot_initialize of f2fs_mkdir+0xfa/0x570
[  115.027130][ T7382] syz.2.503: attempt to access beyond end of device
[  115.027130][ T7382] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  115.033679][ T7382] F2FS-fs (loop2): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x18b/0xa40
[  115.059916][ T5840] syz-executor: attempt to access beyond end of device
[  115.059916][ T5840] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  115.064962][ T5840] CPU: 1 UID: 0 PID: 5840 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  115.064976][ T5840] Tainted: [L]=SOFTLOCKUP
[  115.064978][ T5840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  115.064984][ T5840] Call Trace:
[  115.064987][ T5840]  <TASK>
[  115.064990][ T5840]  dump_stack_lvl+0xe8/0x150
[  115.065005][ T5840]  f2fs_handle_critical_error+0x37c/0x540
[  115.065020][ T5840]  f2fs_write_end_io+0x886/0xb60
[  115.065040][ T5840]  __submit_merged_bio+0x256/0x650
[  115.065053][ T5840]  __submit_merged_write_cond+0x269/0x530
[  115.065066][ T5840]  f2fs_write_data_pages+0x2806/0x3360
[  115.065092][ T5840]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  115.065109][ T5840]  ? __lock_acquire+0x6b5/0x2cf0
[  115.065116][ T5840]  ? css_rstat_updated+0x23a/0x530
[  115.065141][ T5840]  ? rcu_is_watching+0x15/0xb0
[  115.065152][ T5840]  ? __lock_acquire+0x6b5/0x2cf0
[  115.065167][ T5840]  ? __lock_acquire+0x6b5/0x2cf0
[  115.065179][ T5840]  ? do_raw_spin_lock+0x12b/0x2f0
[  115.065194][ T5840]  ? do_raw_spin_unlock+0x4d/0x210
[  115.065204][ T5840]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  115.065215][ T5840]  do_writepages+0x32e/0x550
[  115.065231][ T5840]  ? do_raw_spin_unlock+0x4d/0x210
[  115.065243][ T5840]  filemap_fdatawrite+0x1e9/0x2f0
[  115.065261][ T5840]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  115.065292][ T5840]  ? do_raw_spin_unlock+0x4d/0x210
[  115.065304][ T5840]  f2fs_sync_dirty_inodes+0x30e/0x810
[  115.065323][ T5840]  f2fs_write_checkpoint+0x9c6/0x2490
[  115.065346][ T5840]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  115.065401][ T5840]  kill_f2fs_super+0x308/0x710
[  115.065413][ T5840]  ? __pfx_kill_f2fs_super+0x10/0x10
[  115.065431][ T5840]  deactivate_locked_super+0xbc/0x130
[  115.065440][ T5840]  cleanup_mnt+0x437/0x4d0
[  115.065448][ T5840]  ? _raw_spin_unlock_irq+0x23/0x50
[  115.065461][ T5840]  task_work_run+0x1d9/0x270
[  115.065473][ T5840]  ? __pfx_task_work_run+0x10/0x10
[  115.065488][ T5840]  exit_to_user_mode_loop+0xed/0x480
[  115.065497][ T5840]  ? rcu_is_watching+0x15/0xb0
[  115.065507][ T5840]  do_syscall_64+0x2b7/0xf80
[  115.065515][ T5840]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.065522][ T5840]  ? trace_irq_disable+0x37/0x100
[  115.065534][ T5840]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.065542][ T5840] RIP: 0033:0x7fb5e799bf17
[  115.065550][ T5840] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  115.065556][ T5840] RSP: 002b:00007ffe037aeb78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  115.065566][ T5840] RAX: 0000000000000000 RBX: 00007fb5e7a0471f RCX: 00007fb5e799bf17
[  115.065571][ T5840] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe037aec30
[  115.065576][ T5840] RBP: 00007ffe037aec30 R08: 0000000000000000 R09: 00000000ffffffff
[  115.065581][ T5840] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe037afcc0
[  115.065586][ T5840] R13: 00007fb5e7a0471f R14: 000000000001c0fa R15: 00007ffe037afd00
[  115.065599][ T5840]  </TASK>
[  115.065603][ T5840] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  116.386763][ T7398] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  116.411874][ T7398] XFS (loop1): Ending clean mount
[  116.438577][ T7398] XFS (loop1): Quotacheck needed: Please wait.
[  116.456723][ T7398] XFS (loop1): Quotacheck: Done.
[  116.487989][ T5834] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  116.510925][ T7424] set_capacity_and_notify: 3 callbacks suppressed
[  116.510935][ T7424] loop3: detected capacity change from 0 to 512
[  116.764128][ T7441] loop1: detected capacity change from 0 to 2048
[  116.842495][ T7441] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.889908][   T34] audit: type=1800 audit(1770155183.770:6): pid=7441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.523" name="file1" dev="loop1" ino=15 res=0 errno=0
[  117.007704][ T7449] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  117.028374][ T7449] EXT4-fs (loop1): Online defrag not supported with bigalloc
[  117.032151][ T7449] EXT4-fs (loop1): shut down requested (2)
[  117.061345][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.148372][   T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  117.308159][   T10] usb 3-1: Using ep0 maxpacket: 32
[  117.320073][   T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  117.323307][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  117.326937][   T10] usb 3-1: config 0 interface 0 has no altsetting 1
[  117.342231][   T10] usb 3-1: New USB device found, idVendor=1199, idProduct=9004, bcdDevice= f.8c
[  117.345642][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.359267][   T10] usb 3-1: Product: syz
[  117.363509][   T10] usb 3-1: Manufacturer: syz
[  117.365429][   T10] usb 3-1: SerialNumber: syz
[  117.385450][   T10] usb 3-1: config 0 descriptor??
[  117.402425][   T10] qmi_wwan 3-1:0.0: probe with driver qmi_wwan failed with error -22
[  117.618889][   T10] usb 3-1: USB disconnect, device number 9
[  117.950818][ T7471] loop1: detected capacity change from 0 to 128
[  117.978820][ T7471] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  117.987674][ T7471] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  118.065358][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.537'.
[  118.068593][ T7475] netlink: 364 bytes leftover after parsing attributes in process `syz.3.537'.
[  118.071195][ T7475] netlink: 152 bytes leftover after parsing attributes in process `syz.3.537'.
[  118.073863][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.537'.
[  118.110193][ T7478] loop3: detected capacity change from 0 to 128
[  118.114747][ T7478] befs: (loop3): No write support. Marking filesystem read-only
[  118.127160][ T7478] befs: (loop3): invalid magic header
[  118.562777][ T7485] loop2: detected capacity change from 0 to 32768
[  118.621431][ T7485] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  118.653465][ T7485] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x1a9/0x1590, inode 0x2441 dinode
[  118.656399][ T7485] XFS (loop2): Unmount and run xfs_repair
[  118.658173][ T7485] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  118.660343][ T7485] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[  118.662882][ T7485] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  118.665393][ T7485] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 80 32 be 88  ..e.....4.Xh.2..
[  118.668248][ T7485] 00000030: 34 f7 58 68 80 32 be 88 00 00 00 00 00 00 00 00  4.Xh.2..........
[  118.672006][ T7485] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  118.675435][ T7485] 00000050: 00 00 00 02 00 00 00 00 00 91 00 04 00 00 00 00  ................
[  118.679038][ T7485] 00000060: ff ff ff ff 52 7a c8 f1 00 00 00 00 00 00 00 02  ....Rz..........
[  118.682293][ T7485] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08  ................
[  118.685700][ T7485] XFS (loop2): metadata inode 0x2441 type 5 is corrupt
[  118.688348][ T7485] XFS (loop2): failed to read RT inodes
[  118.692347][ T7485] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair.
[  118.838310][   T89] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  118.884773][ T7506] loop1: detected capacity change from 0 to 1024
[  119.288319][   T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  119.290592][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.555'.
[  119.448171][   T10] usb 2-1: Using ep0 maxpacket: 16
[  119.452343][   T10] usb 2-1: config index 0 descriptor too short (expected 46642, got 72)
[  119.455490][   T10] usb 2-1: config 173 has too many interfaces: 131, using maximum allowed: 32
[  119.459194][   T10] usb 2-1: config 173 contains an unexpected descriptor of type 0x1, skipping
[  119.462532][   T10] usb 2-1: config 173 has an invalid descriptor of length 0, skipping remainder of the config
[  119.466320][   T10] usb 2-1: config 173 has 0 interfaces, different from the descriptor's value: 131
[  119.483668][   T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  119.490415][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.496235][   T10] usb 2-1: Product: syz
[  119.498261][   T10] usb 2-1: Manufacturer: syz
[  119.502129][   T10] usb 2-1: SerialNumber: syz
[  119.719874][   T10] usb 2-1: USB disconnect, device number 12
[  119.908961][ T7539] loop2: detected capacity change from 0 to 512
[  119.912983][ T7539] EXT4-fs (loop2): Test dummy encryption mode enabled
[  119.915059][ T7539] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  119.918119][ T6092] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  119.922141][ T7539] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.562: bad orphan inode 131083
[  119.926206][ T7539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.949098][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.068192][ T6092] usb 4-1: Using ep0 maxpacket: 32
[  120.074021][ T6092] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  120.077119][ T6092] usb 4-1: config 0 has no interface number 0
[  120.079632][ T6092] usb 4-1: config 0 interface 184 has no altsetting 0
[  120.084775][ T6092] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  120.088387][ T6092] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.091497][ T6092] usb 4-1: Product: syz
[  120.093207][ T6092] usb 4-1: Manufacturer: syz
[  120.095094][ T6092] usb 4-1: SerialNumber: syz
[  120.100542][ T6092] usb 4-1: config 0 descriptor??
[  120.110799][ T6092] smsc75xx v1.0.0
[  120.383742][ T7553] process 'syz.1.568' launched './file2' with NULL argv: empty string added
[  120.549081][ T7555] loop1: detected capacity change from 0 to 32768
[  120.551944][ T7555] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.569 (7555)
[  120.559784][ T7555] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  120.562796][ T7555] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  120.653546][ T7555] BTRFS info (device loop1): enabling ssd optimizations
[  120.658386][ T7555] BTRFS info (device loop1): enabling free space tree
[  120.668122][ T7555] BTRFS info (device loop1): enabling auto defrag
[  120.670154][ T7555] BTRFS info (device loop1): use lzo compression, level 1
[  120.672541][ T7555] BTRFS info (device loop1): max_inline set to 3
[  120.697686][ T5834] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  121.103852][ T7575] loop1: detected capacity change from 0 to 32768
[  121.114464][ T7575] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.571 (7575)
[  121.118940][ T6092] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  121.126735][ T7575] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  121.130542][ T7575] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  121.183420][ T7575] BTRFS info (device loop1): enabling ssd optimizations
[  121.185405][ T7575] BTRFS info (device loop1): turning on async discard
[  121.187328][ T7575] BTRFS info (device loop1): enabling free space tree
[  121.231172][ T5834] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  121.289001][   T10] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  121.331592][ T6092] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  121.334697][ T6092] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  121.339824][ T6092] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  121.354667][ T6092] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  121.357613][ T6092] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[  121.374217][ T6092] usb 4-1: USB disconnect, device number 7
[  121.441236][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.447708][   T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[  121.453739][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.458934][   T10] usb 3-1: config 0 descriptor??
[  121.461215][ T7604] loop1: detected capacity change from 0 to 128
[  121.465281][   T10] usbhid 3-1:0.0: can't add hid device: -22
[  121.467235][   T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -22
[  121.540768][ T7604] syz.1.578: attempt to access beyond end of device
[  121.540768][ T7604] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128
[  121.544686][ T7604] syz.1.578: attempt to access beyond end of device
[  121.544686][ T7604] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128
[  121.548809][ T7604] syz.1.578: attempt to access beyond end of device
[  121.548809][ T7604] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128
[  121.552710][ T7604] syz.1.578: attempt to access beyond end of device
[  121.552710][ T7604] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128
[  121.556541][ T7604] syz.1.578: attempt to access beyond end of device
[  121.556541][ T7604] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128
[  121.560809][ T7604] syz.1.578: attempt to access beyond end of device
[  121.560809][ T7604] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128
[  121.564550][ T7604] syz.1.578: attempt to access beyond end of device
[  121.564550][ T7604] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128
[  121.568569][ T7604] syz.1.578: attempt to access beyond end of device
[  121.568569][ T7604] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128
[  121.572545][ T7604] syz.1.578: attempt to access beyond end of device
[  121.572545][ T7604] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128
[  121.576555][ T7604] syz.1.578: attempt to access beyond end of device
[  121.576555][ T7604] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128
[  121.666616][ T6092] usb 3-1: USB disconnect, device number 10
[  121.705896][ T7613] netlink: 'syz.1.582': attribute type 4 has an invalid length.
[  122.308449][   T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  122.460650][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  122.464500][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  122.490559][   T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  122.495283][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  122.498566][   T10] usb 4-1: SerialNumber: syz
[  123.103098][   T10] usb 4-1: 0:2 : does not exist
[  123.104908][   T10] usb 4-1: usbmixer: too many channels (61) in unit 5
[  123.113907][   T10] usb 4-1: USB disconnect, device number 8
[  123.150913][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  123.228136][  T860] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  123.387066][  T860] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  123.390710][  T860] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  123.394909][  T860] usb 2-1: config 1 has no interface number 0
[  123.403704][  T860] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.4b
[  123.406944][  T860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.410156][  T860] usb 2-1: Product: syz
[  123.411677][  T860] usb 2-1: Manufacturer: syz
[  123.413350][  T860] usb 2-1: SerialNumber: syz
[  123.420944][  T860] cdc_ether 2-1:1.1: skipping garbage
[  123.422954][  T860] cdc_ether 2-1:1.1: skipping garbage
[  123.424981][  T860] usb 2-1: bad CDC descriptors
[  123.446973][   T34] audit: type=1800 audit(1770155190.320:7): pid=7643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.594" name="/" dev="fuse" ino=1 res=0 errno=0
[  123.622910][  T860] usb 2-1: USB disconnect, device number 13
[  123.651259][ T7645] loop3: detected capacity change from 0 to 512
[  123.659513][ T7645] EXT4-fs (loop3): orphan cleanup on readonly fs
[  123.665270][ T7645] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.595: ea_inode with extended attributes
[  123.676140][ T7645] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.595: error while reading EA inode 11 err=-117
[  123.680786][ T7645] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  123.684883][ T7645] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.595: ea_inode with extended attributes
[  123.693643][ T7645] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.595: error while reading EA inode 11 err=-117
[  123.699495][ T7645] EXT4-fs (loop3): 1 orphan inode deleted
[  123.701886][ T7645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  123.726046][ T6615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.047097][ T7660] Driver unsupported XDP return value 0 on prog  (id 43) dev N/A, expect packet loss!
[  124.240970][ T7668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.605'.
[  124.287788][ T7662] loop3: detected capacity change from 0 to 40427
[  124.290786][ T7662] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  124.295525][ T7662] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  124.300976][ T7662] F2FS-fs (loop3): invalid crc value
[  124.363761][ T7662] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  124.369631][ T7662] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  124.371603][ T7662] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  124.638505][ T7698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.619'.
[  124.645102][ T7698] netlink: 'syz.1.619': attribute type 1 has an invalid length.
[  124.655194][ T7698] netlink: 28 bytes leftover after parsing attributes in process `syz.1.619'.
[  124.830419][ T7714] loop2: detected capacity change from 0 to 4096
[  124.843379][ T7714] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  124.858522][ T7714] ntfs3(loop2): ino=19, mi_enum_attr
[  124.875300][ T7714] ntfs3(loop2): failed to convert "c46c" to cp1255
[  124.882126][ T7714] ntfs3(loop2): ino=20, mi_enum_attr
[  125.036869][ T7709] loop3: detected capacity change from 0 to 32768
[  125.041992][ T7730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.634'.
[  125.058536][ T7709] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  125.099399][ T7709] XFS (loop3): Ending clean mount
[  125.100483][ T7726] loop2: detected capacity change from 0 to 32768
[  125.139819][ T7726] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  125.145616][ T6615] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  125.177581][ T7726] XFS (loop2): Ending clean mount
[  125.185003][ T7726] XFS (loop2): Quotacheck needed: Please wait.
[  125.210746][ T7726] XFS (loop2): Quotacheck: Done.
[  125.386006][ T5840] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  125.847339][   T34] audit: type=1326 audit(1770155192.720:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.1.643" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81bcd9acb9 code=0x7ffc0000
[  125.865480][   T34] audit: type=1326 audit(1770155192.730:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.1.643" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81bcd9acb9 code=0x7ffc0000
[  125.882930][   T34] audit: type=1326 audit(1770155192.730:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.1.643" exe="/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f81bcd9acb9 code=0x7ffc0000
[  125.891740][   T34] audit: type=1326 audit(1770155192.730:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.1.643" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81bcd9acb9 code=0x7ffc0000
[  125.901589][   T34] audit: type=1326 audit(1770155192.730:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.1.643" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81bcd9acb9 code=0x7ffc0000
[  126.548547][ T7808] loop3: detected capacity change from 0 to 256
[  126.797530][ T7818] loop2: detected capacity change from 0 to 4096
[  127.388241][  T860] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  127.558255][  T860] usb 4-1: Using ep0 maxpacket: 16
[  127.565566][  T860] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  127.569801][  T860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.572160][  T860] usb 4-1: Product: syz
[  127.573850][  T860] usb 4-1: Manufacturer: syz
[  127.575722][  T860] usb 4-1: SerialNumber: syz
[  127.592885][  T860] r8152-cfgselector 4-1: Unknown version 0x0000
[  127.598180][  T860] r8152-cfgselector 4-1: config 0 descriptor??
[  127.999074][   T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  128.017191][ T5294] r8152-cfgselector 4-1: USB disconnect, device number 9
[  128.161884][   T10] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32
[  128.165213][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.173787][   T10] usb 2-1: config 0 descriptor??
[  128.186340][   T10] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  128.398820][   T10] gp8psk: usb in 128 operation failed.
[  128.401979][   T10] gp8psk: usb in 137 operation failed.
[  128.403995][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  128.409632][   T10] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver)
[  128.419704][   T10] usb 2-1: media controller created
[  128.436532][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  128.479402][   T10] gp8psk_fe: Frontend attached
[  128.481685][   T10] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  128.489212][   T10] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  128.622600][ T7860] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  128.627253][ T5891] IPVS: starting estimator thread 0...
[  128.664905][ T7864] loop3: detected capacity change from 0 to 256
[  128.667207][ T7864] exfat: Deprecated parameter 'utf8'
[  128.670659][ T7864] exfat: Deprecated parameter 'utf8'
[  128.677929][ T7864] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6efbb19, utbl_chksum : 0xe619d30d)
[  128.718187][ T7862] IPVS: using max 66 ests per chain, 158400 per kthread
[  128.729217][  T860] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  128.760132][   T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected.
[  128.762966][   T10] gp8psk: found Genpix USB device pID = 203 (hex)
[  128.878124][  T860] usb 3-1: Using ep0 maxpacket: 16
[  128.882842][  T860] usb 3-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=e8.cf
[  128.885719][  T860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.888380][  T860] usb 3-1: Product: syz
[  128.889745][  T860] usb 3-1: Manufacturer: syz
[  128.891075][  T860] usb 3-1: SerialNumber: syz
[  128.893873][  T860] usb 3-1: config 0 descriptor??
[  128.897091][  T860] cypress_cy7c63 3-1:0.0: Cypress CY7C63xxx device now attached
[  128.963879][   T10] usb 2-1: USB disconnect, device number 14
[  129.027523][   T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected.
[  129.102654][ T5891] usb 3-1: USB disconnect, device number 11
[  129.105458][ T5891] cypress_cy7c63 3-1:0.0: Cypress CY7C63xxx device now disconnected
[  129.736175][ T7881] loop2: detected capacity change from 0 to 16
[  129.754480][ T7881] erofs (device loop2): mounted with root inode @ nid 36.
[  129.767385][ T7881] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36
[  129.776673][ T7881] erofs (device loop2): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 1851
[  129.782480][ T7881] erofs (device loop2): read error -117 @ 43 of nid 36
[  129.840933][ T7887] loop3: detected capacity change from 0 to 47
[  129.987452][ T7893] loop2: detected capacity change from 0 to 1024
[  129.992714][ T7893] EXT4-fs: Ignoring removed nomblk_io_submit option
[  130.019173][ T7893] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.057587][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.441046][  T860] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  130.532308][ T7919] loop3: detected capacity change from 0 to 2048
[  130.543328][ T7919] EXT4-fs: Ignoring removed mblk_io_submit option
[  130.589196][  T860] usb 3-1: Using ep0 maxpacket: 32
[  130.594768][  T860] usb 3-1: config 0 has an invalid interface number: 48 but max is 0
[  130.597542][  T860] usb 3-1: config 0 has no interface number 0
[  130.600394][ T7919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.604956][  T860] usb 3-1: config 0 interface 48 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  130.614358][  T860] usb 3-1: config 0 interface 48 has no altsetting 0
[  130.619279][  T860] usb 3-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=74.d5
[  130.622093][  T860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.624384][  T860] usb 3-1: Product: syz
[  130.625592][  T860] usb 3-1: Manufacturer: syz
[  130.628587][ T7919] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.708: bg 0: block 234: padding at end of block bitmap is not set
[  130.636271][  T860] usb 3-1: SerialNumber: syz
[  130.639264][ T7919] EXT4-fs (loop3): Remounting filesystem read-only
[  130.649861][  T860] usb 3-1: config 0 descriptor??
[  130.657014][  T860] HFC-S_USB 3-1:0.48: probe with driver HFC-S_USB failed with error -5
[  130.664142][ T6615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.860195][  T860] usb 3-1: USB disconnect, device number 12
[  131.172588][ T7923] loop3: detected capacity change from 0 to 2048
[  131.175844][ T7923] EXT4-fs: Ignoring removed bh option
[  131.220392][ T7925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.710'.
[  131.227766][ T7923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.289095][ T6615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.423500][ T7937] qrtr: Invalid version 30
[  131.624421][ T7934] loop3: detected capacity change from 0 to 8192
[  132.976806][ T7966] loop3: detected capacity change from 0 to 128
[  132.982782][ T7966] FAT-fs (loop3): bogus logical sector size 0
[  132.985264][ T7966] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; no bootstrapping code
[  132.990078][ T7966] FAT-fs (loop3): Can't find a valid FAT filesystem
[  133.164686][   T34] audit: type=1326 audit(1770155200.040:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.3.729" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2de39acb9 code=0x7ffc0000
[  133.186494][   T34] audit: type=1326 audit(1770155200.040:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.3.729" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2de39acb9 code=0x7ffc0000
[  133.206988][   T34] audit: type=1326 audit(1770155200.040:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.3.729" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd2de39acb9 code=0x7ffc0000
[  133.219934][   T34] audit: type=1326 audit(1770155200.040:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.3.729" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2de39acb9 code=0x7ffc0000
[  133.245781][   T34] audit: type=1326 audit(1770155200.040:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.3.729" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2de39acb9 code=0x7ffc0000
[  133.254799][   T34] audit: type=1326 audit(1770155200.050:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.3.729" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd2de394ad7 code=0x7ffc0000
[  133.261932][   T34] audit: type=1326 audit(1770155200.050:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.3.729" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd2de33c0d9 code=0x7ffc0000
[  133.271278][   T34] audit: type=1326 audit(1770155200.050:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.3.729" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2de39acb9 code=0x7ffc0000
[  133.279757][   T34] audit: type=1326 audit(1770155200.060:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.3.729" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd2de394ad7 code=0x7ffc0000
[  133.287930][   T34] audit: type=1326 audit(1770155200.060:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.3.729" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd2de33c0d9 code=0x7ffc0000
[  134.066683][ T7984] random: crng reseeded on system resumption
[  134.233199][ T7988] loop2: detected capacity change from 0 to 4096
[  134.241087][ T7988] EXT4-fs: Conflicting test_dummy_encryption options
[  134.791075][  T860] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  134.959935][  T860] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  134.962576][  T860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.966293][  T860] usb 4-1: config 0 descriptor??
[  134.970520][  T860] cp210x 4-1:0.0: cp210x converter detected
[  135.403159][  T860] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  135.419288][  T860] usb 4-1: cp210x converter now attached to ttyUSB0
[  135.622089][ T5891] usb 4-1: USB disconnect, device number 10
[  135.626660][ T5891] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  135.633505][ T5891] cp210x 4-1:0.0: device disconnected
[  135.718531][ T5880] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  135.729931][ T5835] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  135.878286][ T5835] usb 2-1: Using ep0 maxpacket: 16
[  135.886052][ T5835] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  135.889589][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  135.890596][ T5880] usb 3-1: config 8 has an invalid interface number: 250 but max is 0
[  135.892612][ T5835] usb 2-1: Product: syz
[  135.895638][ T5880] usb 3-1: config 8 has no interface number 0
[  135.897393][ T5835] usb 2-1: Manufacturer: syz
[  135.900306][ T5880] usb 3-1: config 8 interface 250 has no altsetting 0
[  135.903726][ T5835] usb 2-1: SerialNumber: syz
[  135.905965][ T5880] usb 3-1: New USB device found, idVendor=0545, idProduct=8333, bcdDevice=8f.86
[  135.910025][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.910896][ T5835] usb 2-1: config 0 descriptor??
[  135.915451][ T5880] usb 3-1: Product: syz
[  135.920194][ T5880] usb 3-1: Manufacturer: syz
[  135.921963][ T5880] usb 3-1: SerialNumber: syz
[  136.140787][ T5880] gspca_main: tv8532-2.14.0 probing 0545:8333
[  136.193990][ T5880] usb 3-1: USB disconnect, device number 13
[  136.376297][  T860] usb 2-1: USB disconnect, device number 15
[  136.403286][ T8022] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  136.703776][ T8032] loop3: detected capacity change from 0 to 4096
[  136.726866][ T8035] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  136.759104][ T8032] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  136.770661][ T8032] Remounting filesystem read-only
[  136.801582][ T8034] loop2: detected capacity change from 0 to 4096
[  136.805274][ T8034] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  136.822716][ T8034] ntfs3(loop2): Failed to load $Extend (-22).
[  136.825058][ T8034] ntfs3(loop2): Failed to initialize $Extend.
[  136.889921][ T8037] netlink: 'syz.3.758': attribute type 3 has an invalid length.
[  136.998584][ T5218] Bluetooth: Unexpected continuation frame (len 4)
[  137.232839][ T8055] ptrace attach of "/syz-executor exec"[5834] was attempted by "                                                                                                                                                                                                "[8055]
[  137.261968][ T8054] loop2: detected capacity change from 0 to 4096
[  137.265291][ T8054] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  137.435188][ T8043] loop3: detected capacity change from 0 to 40427
[  137.443551][ T8043] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  137.452519][ T8043] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  137.482108][ T8043] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  137.597251][ T8043] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  137.648982][ T8043] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  137.651738][ T8043] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  138.172276][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  138.174681][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  138.444305][ T8087] loop2: detected capacity change from 0 to 8
[  138.543873][ T8096] loop3: detected capacity change from 0 to 1764
[  138.727041][ T8106] loop3: detected capacity change from 0 to 2048
[  138.765761][ T8106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.782431][   T34] kauditd_printk_skb: 219 callbacks suppressed
[  138.782446][   T34] audit: type=1800 audit(1770155205.660:242): pid=8106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.787" name="file1" dev="loop3" ino=15 res=0 errno=0
[  138.822799][ T6615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.953282][   T34] audit: type=1326 audit(1770155205.830:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.3.793" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2de39acb9 code=0x7ffc0000
[  138.962333][   T34] audit: type=1326 audit(1770155205.830:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.3.793" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2de39acb9 code=0x7ffc0000
[  138.972457][ T8122] netlink: 16 bytes leftover after parsing attributes in process `syz.1.794'.
[  138.972658][   T34] audit: type=1326 audit(1770155205.830:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.3.793" exe="/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fd2de39acb9 code=0x7ffc0000
[  139.001413][   T34] audit: type=1326 audit(1770155205.830:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.3.793" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2de39acb9 code=0x7ffc0000
[  139.016375][   T34] audit: type=1326 audit(1770155205.830:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.3.793" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2de39acb9 code=0x7ffc0000
[  139.211034][   T34] audit: type=1800 audit(1770155206.030:248): pid=8090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.780" name="/" dev="fuse" ino=9 res=0 errno=0
[  139.405447][ T8138] loop2: detected capacity change from 0 to 4096
[  139.412402][ T8138] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  139.992547][ T8138] ntfs3(loop2): volume is dirty and "force" flag is not set!
[  140.283208][ T8154] loop3: detected capacity change from 0 to 1024
[  140.296995][ T8154] EXT4-fs: Ignoring removed orlov option
[  140.326774][ T8154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.354829][ T6615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.959105][   T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  141.486897][   T24] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  141.490355][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.497078][ T8179] loop2: detected capacity change from 0 to 512
[  141.497826][   T24] usb 4-1: config 0 descriptor??
[  141.503068][ T8179] ext4: Unknown parameter 'euid'
[  141.507562][   T24] cp210x 4-1:0.0: cp210x converter detected
[  141.589925][ T8181] comedi comedi3: 8255: I/O port conflict (0x602,4)
[  141.731730][ T8185] loop2: detected capacity change from 0 to 128
[  141.769812][ T8185] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  141.781641][ T8185] ext4 filesystem being mounted at /256/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  141.829183][ T5840] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  141.902446][ T8192] ipvlan2: entered promiscuous mode
[  141.916568][   T24] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -71
[  141.931322][   T24] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: -71
[  141.933599][   T24] cp210x 4-1:0.0: GPIO initialisation failed: -71
[  141.948448][   T24] usb 4-1: cp210x converter now attached to ttyUSB0
[  141.954981][   T24] usb 4-1: USB disconnect, device number 11
[  141.964859][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  141.967405][   T24] cp210x 4-1:0.0: device disconnected
[  142.120621][ T8204] batadv_slave_1: entered promiscuous mode
[  142.302570][ T8210] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96
[  142.844051][ T8224] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[  143.288190][ T5891] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  143.438248][ T5891] usb 4-1: Using ep0 maxpacket: 16
[  143.446292][ T5891] usb 4-1: config 1 has an invalid interface number: 105 but max is 0
[  143.449959][ T5891] usb 4-1: config 1 has no interface number 0
[  143.452293][ T5891] usb 4-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  143.456084][ T5891] usb 4-1: config 1 interface 105 has no altsetting 0
[  143.463082][ T5891] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  143.466524][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.470408][ T5891] usb 4-1: Product: syz
[  143.473015][ T5891] usb 4-1: Manufacturer: syz
[  143.474638][ T5891] usb 4-1: SerialNumber: syz
[  143.693350][ T5891] aqc111 4-1:1.105: probe with driver aqc111 failed with error -22
[  143.898594][ T5891] usb 4-1: USB disconnect, device number 12
[  143.998233][ T8175] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  144.164899][ T8175] usb 2-1: Using ep0 maxpacket: 8
[  144.176024][ T8175] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  144.180737][ T8175] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  144.184387][ T8175] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  144.188019][ T8175] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  144.194721][ T8175] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  144.198000][ T8175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.411516][ T8175] usb 2-1: GET_CAPABILITIES returned 0
[  144.413425][ T8175] usbtmc 2-1:16.0: can't read capabilities
[  144.474146][ T8274] loop2: detected capacity change from 0 to 256
[  144.487840][ T8274] FAT-fs (loop2): Directory bread(block 64) failed
[  144.489992][ T8274] FAT-fs (loop2): Directory bread(block 65) failed
[  144.491940][ T8274] FAT-fs (loop2): Directory bread(block 66) failed
[  144.494217][ T8274] FAT-fs (loop2): Directory bread(block 67) failed
[  144.496630][ T8274] FAT-fs (loop2): Directory bread(block 68) failed
[  144.500213][ T8274] FAT-fs (loop2): Directory bread(block 69) failed
[  144.504403][ T8274] FAT-fs (loop2): Directory bread(block 70) failed
[  144.506195][ T8274] FAT-fs (loop2): Directory bread(block 71) failed
[  144.514487][ T8274] FAT-fs (loop2): Directory bread(block 72) failed
[  144.516425][ T8274] FAT-fs (loop2): Directory bread(block 73) failed
[  144.616707][ T5891] usb 2-1: USB disconnect, device number 16
[  144.644472][ T8283] netlink: 24 bytes leftover after parsing attributes in process `syz.3.867'.
[  144.782499][ T8293] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.891746][ T8299] loop2: detected capacity change from 0 to 8192
[  144.904685][ T8299] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[  144.907182][ T8299] FAT-fs (loop2): Filesystem has been set read-only
[  144.909418][ T8299] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[  144.912268][ T8299] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[  144.915356][ T8299] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[  144.917933][ T8299] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[  144.922831][ T8299] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[  144.926244][ T8299] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[  144.934869][ T8299] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[  144.938651][ T8299] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[  144.941589][ T8299] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[  144.944906][ T8299] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[  144.950545][   T34] audit: type=1800 audit(1770155211.830:249): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.876" name="file2" dev="loop2" ino=1048625 res=0 errno=0
[  144.993587][ T8301] Process accounting resumed
[  145.336238][ T8303] loop2: detected capacity change from 0 to 32768
[  145.346953][ T8303] (syz.2.878,8303,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  145.362806][ T8303] (syz.2.878,8303,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  145.412504][ T8303] JBD2: Ignoring recovery information on journal
[  145.741283][ T8303] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  145.902700][ T5840] ocfs2: Unmounting device (7,2) on (node local)
[  145.971442][ T8339] netlink: 'syz.1.894': attribute type 10 has an invalid length.
[  145.974459][ T8339] netlink: 2 bytes leftover after parsing attributes in process `syz.1.894'.
[  145.977105][ T8339] team0: entered promiscuous mode
[  145.995882][ T8339] team_slave_0: entered promiscuous mode
[  146.025099][ T8339] team_slave_1: entered promiscuous mode
[  146.034285][ T8339] bridge0: port 3(team0) entered blocking state
[  146.041682][ T8339] bridge0: port 3(team0) entered disabled state
[  146.047397][ T8339] team0: entered allmulticast mode
[  146.052516][ T8339] team_slave_0: entered allmulticast mode
[  146.055407][ T8339] team_slave_1: entered allmulticast mode
[  146.062415][ T8339] bridge0: port 3(team0) entered blocking state
[  146.064684][ T8339] bridge0: port 3(team0) entered forwarding state
[  146.434745][ T8351] loop3: detected capacity change from 0 to 2048
[  146.457391][ T8351] NILFS (loop3): Invalid checkpoint (checkpoint number=2)
[  146.460549][ T8351] NILFS (loop3): error -22 while loading last checkpoint (checkpoint number=2)
[  146.512970][ T8353] Invalid ELF header magic: != ELF
[  146.548469][ T8355] Invalid ELF header magic: != ELF
[  146.640653][ T8175] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  146.715932][ T8357] loop3: detected capacity change from 0 to 32768
[  146.746450][ T8357] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  146.768318][ T8357] XFS (loop3): Ending clean mount
[  146.798210][ T8175] usb 3-1: Using ep0 maxpacket: 8
[  146.802294][ T8175] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  146.806549][ T8175] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  146.811096][ T8175] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  146.815074][ T8175] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  146.820200][ T8175] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  146.823987][ T8175] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  146.827681][ T8175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.836389][ T8175] usb 3-1: config 0 descriptor??
[  146.842827][ T8349] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  147.289130][ T8349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  147.301187][ T8349] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  147.318564][ T5891] usb 3-1: USB disconnect, device number 14
[  147.319087][ T5218] Bluetooth: hci3: Opcode 0x0c03 failed: -71
[  148.166624][ T6615] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  148.171043][ T8385] loop2: detected capacity change from 0 to 1024
[  148.237352][ T4182] hfsplus: b-tree write err: -5, ino 4
[  148.269176][ T8387] netlink: 100 bytes leftover after parsing attributes in process `syz.1.911'.
[  148.392546][ T8392] loop3: detected capacity change from 0 to 1024
[  148.396359][ T8395] loop2: detected capacity change from 0 to 24
[  148.405665][ T8392] hfsplus: type requires a 4 character value
[  148.418587][ T8395] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  148.424415][ T8395] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  148.451523][ T8397] program syz.1.916 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  148.579205][ T8401] netlink: 20 bytes leftover after parsing attributes in process `syz.1.918'.
[  148.917088][ T8421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.928'.
[  148.979592][ T5294] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  149.148148][ T5294] usb 2-1: Using ep0 maxpacket: 16
[  149.160006][ T5294] usb 2-1: config 4 has an invalid interface number: 9 but max is 0
[  149.162536][ T5294] usb 2-1: config 4 has no interface number 0
[  149.178159][ T5294] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  149.181155][ T5294] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  149.184157][ T5294] usb 2-1: config 4 interface 9 has no altsetting 0
[  149.189117][ T5294] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[  149.192731][ T5294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.195795][ T5294] usb 2-1: Product: syz
[  149.197350][ T5294] usb 2-1: Manufacturer: syz
[  149.208127][ T5294] usb 2-1: SerialNumber: syz
[  149.213523][ T8411] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  149.216394][ T8411] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  149.254742][ T5294] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  149.472501][ T6665] usb 2-1: Failed to submit usb control message: -71
[  149.474862][ T5294] usb 2-1: USB disconnect, device number 17
[  149.483776][ T6665] usb 2-1: unable to send the bmi data to the device: -71
[  149.489551][ T6665] usb 2-1: unable to get target info from device
[  149.493633][ T6665] usb 2-1: could not get target info (-71)
[  149.500062][ T6665] usb 2-1: could not probe fw (-71)
[  149.570069][ T8432] netlink: 'syz.3.932': attribute type 3 has an invalid length.
[  149.573799][ T8432] netlink: 236 bytes leftover after parsing attributes in process `syz.3.932'.
[  149.805704][ T8441] loop2: detected capacity change from 0 to 1024
[  149.861632][ T8441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.901617][ T8441] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.935: Allocating blocks 417-513 which overlap fs metadata
[  149.921280][ T8441] EXT4-fs (loop2): Remounting filesystem read-only
[  149.924529][ T8440] EXT4-fs (loop2): pa ffff8881078f4740: logic 16016, phys. 145, len 23
[  149.949748][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.994608][ T8450] loop3: detected capacity change from 0 to 128
[  150.037330][ T8452] loop2: detected capacity change from 0 to 1024
[  150.095077][ T4231] hfsplus: b-tree write err: -5, ino 4
[  150.324865][ T8460] loop2: detected capacity change from 0 to 512
[  150.339838][ T8460] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  150.384532][ T8460] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  150.393846][ T8460] EXT4-fs (loop2): 1 truncate cleaned up
[  150.396540][ T8460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.469129][   T34] audit: type=1800 audit(1770155217.330:250): pid=8460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.943" name="file2" dev="loop2" ino=16 res=0 errno=0
[  150.530373][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.720857][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.951'.
[  150.739477][ T8481] loop2: detected capacity change from 0 to 1024
[  150.746253][ T8481] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  150.749774][ T8481] EXT4-fs (loop2): blocks per group (131072) and clusters per group (8192) inconsistent
[  150.756107][ T8479] bond0: Unable to set up delay as MII monitoring is disabled
[  151.034929][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.960'.
[  151.529161][ T8500] loop2: detected capacity change from 0 to 32768
[  151.537157][ T8500] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  151.549429][ T8500] XFS (loop2): Ending clean mount
[  151.577146][ T5840] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  151.819491][ T8518] netlink: 'syz.1.967': attribute type 11 has an invalid length.
[  151.853321][ T8520] usb usb8: usbfs: process 8520 (syz.1.968) did not claim interface 0 before use
[  151.885703][ T8522] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  151.910459][ T5835] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  152.061042][ T5835] usb 3-1: config 0 has an invalid interface number: 235 but max is 0
[  152.064046][ T5835] usb 3-1: config 0 has no interface number 0
[  152.068516][ T5835] usb 3-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0
[  152.072442][ T5835] usb 3-1: config 0 interface 235 has no altsetting 0
[  152.077092][ T5835] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18
[  152.080848][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.083769][ T5835] usb 3-1: Product: syz
[  152.086456][ T5835] usb 3-1: Manufacturer: syz
[  152.088622][ T5835] usb 3-1: SerialNumber: syz
[  152.092225][ T5835] usb 3-1: config 0 descriptor??
[  152.096181][ T5835] keyspan 3-1:0.235: Keyspan 1 port adapter converter detected
[  152.099771][ T5835] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 87
[  152.102712][ T5835] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 7
[  152.107173][ T5835] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 81
[  152.114300][ T5835] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 1
[  152.116887][ T5835] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 85
[  152.121087][ T5835] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  152.261319][ T8545] netlink: 20 bytes leftover after parsing attributes in process `syz.1.980'.
[  152.263912][ T8545] netlink: 20 bytes leftover after parsing attributes in process `syz.1.980'.
[  152.296747][ T8175] usb 3-1: USB disconnect, device number 15
[  152.316227][ T8175] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  152.321670][ T8175] keyspan 3-1:0.235: device disconnected
[  152.367402][ T8555] loop3: detected capacity change from 0 to 512
[  152.393101][ T8555] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349)
[  152.405750][ T8555] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002]
[  152.418667][ T8555] System zones: 1-12
[  152.419990][ T8555] EXT4-fs (loop3): orphan cleanup on readonly fs
[  152.421836][ T8555] EXT4-fs error (device loop3): ext4_read_inode_bitmap:167: comm syz.3.985: Inode bitmap for bg 0 marked uninitialized
[  152.430076][ T8555] EXT4-fs (loop3): Remounting filesystem read-only
[  152.432983][ T8555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  152.449069][ T6615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.746070][ T8571] Attempt to restore checkpoint with obsolete wellknown handles
[  152.897896][ T5294] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  152.945647][ T8573] loop3: detected capacity change from 0 to 32768
[  152.975403][ T8573] ERROR: (device loop3): diRead: i_ino != di_number
[  152.975403][ T8573] 
[  153.066309][ T5294] usb 2-1: Using ep0 maxpacket: 32
[  153.079874][ T5294] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  153.084026][ T5294] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.087623][ T8581] loop2: detected capacity change from 0 to 2048
[  153.091985][ T8581] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  153.096661][ T8581] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  153.103195][ T5294] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  153.106361][ T5294] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  153.116129][ T5294] usb 2-1: Product: syz
[  153.117432][ T5294] usb 2-1: Manufacturer: syz
[  153.131489][ T5294] hub 2-1:4.0: USB hub found
[  153.215493][ T8585] netlink: 44 bytes leftover after parsing attributes in process `syz.3.999'.
[  153.332743][ T5294] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19)
[  153.421062][ T8595] loop2: detected capacity change from 0 to 8
[  153.437133][ T8595] SQUASHFS error: xz decompression failed, data probably corrupt
[  153.449432][ T8595] SQUASHFS error: Failed to read block 0x108: -5
[  153.452620][ T8595] SQUASHFS error: Unable to read metadata cache entry [106]
[  153.457546][ T8595] SQUASHFS error: Unable to read inode 0x11f
[  153.679855][   T33] usb 2-1: USB disconnect, device number 18
[  153.955912][ T8611] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  153.977566][ T8611] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1010: bg 0: block 384: padding at end of block bitmap is not set
[  153.985538][ T8611] EXT4-fs (loop2): Remounting filesystem read-only
[  153.989320][ T8611] EXT4-fs (loop2): 1 truncate cleaned up
[  153.991800][ T8611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.027004][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.809659][ T8643] netlink: 798 bytes leftover after parsing attributes in process `syz.1.1022'.
[  155.873744][ T8641] set_capacity_and_notify: 1 callbacks suppressed
[  155.873754][ T8641] loop3: detected capacity change from 0 to 4096
[  155.897679][ T8641] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  155.918384][ T8641] ntfs3(loop3): ino=3, mi_enum_attr
[  155.950641][ T8641] ntfs3(loop3): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  155.988841][ T8651] loop2: detected capacity change from 0 to 256
[  156.040297][ T8651] exfat: Deprecated parameter 'utf8'
[  156.042002][ T8651] exfat: Deprecated parameter 'utf8'
[  156.045453][ T8654] overlayfs: invalid redirect ((null))
[  156.053292][ T8651] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  156.127930][ T8659] loop2: detected capacity change from 0 to 512
[  156.162701][ T8659] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1030: inode has both inline data and extents flags
[  156.198460][ T8659] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1030: couldn't read orphan inode 15 (err -117)
[  156.214651][ T8659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.238928][ T8659] EXT4-fs error (device loop2): ext4_empty_dir:3075: inode #2: comm syz.2.1030: invalid size
[  156.264316][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.279629][ T5891] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  156.329177][ T8668] vivid-000: disconnect
[  156.331184][ T8668] vivid-000: reconnect
[  156.440888][ T8675] mmap: syz.2.1036 (8675) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  156.464168][ T5891] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  156.503598][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.528499][ T5891] usb 4-1: config 0 descriptor??
[  156.913537][ T8682] netlink: 'syz.1.1040': attribute type 49 has an invalid length.
[  157.002672][ T5891] ath6kl: Failed to submit usb control message: -71
[  157.005388][ T5891] ath6kl: unable to send the bmi data to the device: -71
[  157.028251][ T5891] ath6kl: Unable to send get target info: -71
[  157.040255][ T5891] ath6kl: Failed to init ath6kl core: -71
[  157.043560][ T5891] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[  157.075352][ T5891] usb 4-1: USB disconnect, device number 13
[  157.489087][ T8675] loop2: detected capacity change from 0 to 40427
[  157.778389][ T8702] loop2: detected capacity change from 0 to 512
[  157.781924][ T8702] EXT4-fs (loop2): filesystem is read-only
[  157.784306][ T8702] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  157.821160][ T8702] EXT4-fs (loop2): filesystem is read-only
[  157.823328][ T8702] EXT4-fs (loop2): orphan cleanup on readonly fs
[  157.825903][ T8702] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #16: comm syz.2.1048: iget: bad i_size value: -504403158265486552
[  157.838654][ T8702] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1048: couldn't read orphan inode 16 (err -117)
[  157.849088][ T8702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  157.928827][ T8704] loop3: detected capacity change from 0 to 40427
[  157.931856][ T8704] F2FS-fs (loop3): build fault injection rate: 174
[  157.933790][ T8704] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  157.936340][ T8704] F2FS-fs (loop3): invalid crc value
[  158.003415][ T8704] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  158.007623][ T8704] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  158.159211][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.458535][ T5880] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  158.628998][ T5880] usb 4-1: Using ep0 maxpacket: 16
[  158.636649][ T5880] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  158.642044][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.644577][ T5880] usb 4-1: Product: syz
[  158.646248][ T5880] usb 4-1: Manufacturer: syz
[  158.647903][ T5880] usb 4-1: SerialNumber: syz
[  158.652674][ T5880] usb 4-1: config 0 descriptor??
[  159.066538][ T5880] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  159.073167][ T5880] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  159.076904][ T5880] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  159.112902][ T5880] usb 4-1: media controller created
[  159.127870][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  159.166443][ T8729] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1058'.
[  159.505384][ T5880] zl10353_read_register: readreg error (reg=127, ret==0)
[  159.507955][ T5880] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  159.511632][ T5880] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  159.521621][ T5880] usb 4-1: USB disconnect, device number 14
[  159.540185][ T5880] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  159.591072][ T8175] kernel write not supported for file /932/loginuid (pid: 8175 comm: kworker/1:6)
[  159.819507][ T8744] loop2: detected capacity change from 0 to 7
[  159.823087][ T8744]  loop2:
[  159.824133][ T8744] loop2: partition table partially beyond EOD, truncated
[  159.919247][ T8748] loop3: detected capacity change from 0 to 164
[  159.928852][ T8748] iso9660: Corrupted directory entry in block 2 of inode 1920
[  160.360896][ T8781] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  160.444798][ T8779] loop2: detected capacity change from 0 to 1024
[  161.635390][ T8794] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  161.704914][ T5218] Bluetooth: hci1: link tx timeout
[  161.707327][ T5218] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  161.852080][ T8808] loop3: detected capacity change from 0 to 512
[  161.855844][ T8808] EXT4-fs: Ignoring removed nobh option
[  161.876074][ T8808] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1092: iget: bad i_size value: 38620345925642
[  161.881832][ T8808] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1092: couldn't read orphan inode 15 (err -117)
[  161.894492][ T8808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.917781][ T3856] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u10:10: bg 0: block 5: invalid block bitmap
[  161.925485][ T3856] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  161.933290][ T3856] EXT4-fs (loop3): This should not happen!! Data will be lost
[  161.933290][ T3856] 
[  161.936940][ T3856] EXT4-fs (loop3): Total free blocks count 0
[  161.942612][ T3856] EXT4-fs (loop3): Free/Dirty block details
[  161.948605][ T3856] EXT4-fs (loop3): free_blocks=0
[  161.950509][ T3856] EXT4-fs (loop3): dirty_blocks=4
[  161.952378][ T3856] EXT4-fs (loop3): Block reservation details
[  161.954613][ T3856] EXT4-fs (loop3): i_reserved_data_blocks=4
[  161.985912][ T6615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.995549][ T8834] loop2: detected capacity change from 0 to 512
[  163.020770][ T8834] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  163.040229][ T8834] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  163.060979][ T8823] loop3: detected capacity change from 0 to 32768
[  163.112030][ T8834] EXT4-fs (loop2): 1 truncate cleaned up
[  163.120888][ T8834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.136424][ T8823] 
[  163.136424][ T8823]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  163.136424][ T8823] 
[  163.184291][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.198898][ T6615] 
[  163.198898][ T6615]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  163.198898][ T6615] 
[  163.215216][ T6615] 
[  163.215216][ T6615]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  163.215216][ T6615] 
[  163.263181][ T8839] ip6erspan0: entered allmulticast mode
[  163.728535][ T5846] Bluetooth: hci1: command 0x0406 tx timeout
[  163.738204][ T5891] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  163.890170][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.893825][ T5891] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  163.897356][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.903242][ T5891] usb 4-1: config 0 descriptor??
[  164.524910][ T5891] lg-g15 0003:046D:C222.0003: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0
[  164.598182][ T5880] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  164.716830][ T5891] usb 4-1: USB disconnect, device number 15
[  164.748235][ T5880] usb 3-1: Using ep0 maxpacket: 32
[  164.755815][ T5880] usb 3-1: config 0 has an invalid interface number: 197 but max is 0
[  164.759180][ T5880] usb 3-1: config 0 has no interface number 0
[  164.762586][ T5880] usb 3-1: config 0 interface 197 has no altsetting 0
[  164.767715][ T5880] usb 3-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=32.65
[  164.772552][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.775591][ T5880] usb 3-1: Product: syz
[  164.777103][ T5880] usb 3-1: Manufacturer: syz
[  164.779261][ T5880] usb 3-1: SerialNumber: syz
[  164.783957][ T5880] usb 3-1: config 0 descriptor??
[  164.795175][ T5880] gspca_main: etoms-2.14.0 probing 102c:6151
[  165.627500][ T8878] comedi comedi3: pcl818: I/O port conflict (0x8001,16)
[  165.696220][ T5880] usb 3-1: USB disconnect, device number 16
[  165.928155][   T33] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  166.109356][   T33] usb 4-1: Using ep0 maxpacket: 32
[  166.115497][   T33] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  166.121513][   T33] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  166.125275][   T33] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  166.131732][   T33] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=75.9e
[  166.135085][   T33] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.138484][   T33] usb 4-1: Product: syz
[  166.140184][   T33] usb 4-1: Manufacturer: syz
[  166.142065][   T33] usb 4-1: SerialNumber: syz
[  166.148165][   T33] usb 4-1: config 0 descriptor??
[  166.156275][   T33] iguanair 4-1:0.0: probe with driver iguanair failed with error -12
[  166.362035][   T33] usb 4-1: USB disconnect, device number 16
[  166.674308][ T8897] loop2: detected capacity change from 0 to 32768
[  166.720627][ T8897] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  166.743358][ T8897] XFS (loop2): Ending clean mount
[  166.749280][ T8897] XFS (loop2): Quotacheck needed: Please wait.
[  166.773473][ T8897] XFS (loop2): Quotacheck: Done.
[  166.898607][ T5880] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  167.150194][ T5880] usb 2-1: Using ep0 maxpacket: 16
[  167.155598][ T5880] usb 2-1: config 0 has an invalid interface number: 125 but max is 0
[  167.158556][ T5880] usb 2-1: config 0 has no interface number 0
[  167.162324][ T5880] usb 2-1: New USB device found, idVendor=04e8, idProduct=a100, bcdDevice=b2.9d
[  167.164998][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.167254][ T5880] usb 2-1: Product: syz
[  167.169322][ T5880] usb 2-1: Manufacturer: syz
[  167.170739][ T5880] usb 2-1: SerialNumber: syz
[  167.175439][ T5880] usb 2-1: config 0 descriptor??
[  167.178992][ T5880] ax88179_178a 2-1:0.125: probe with driver ax88179_178a failed with error -22
[  167.381557][ T5880] usb 2-1: USB disconnect, device number 19
[  167.417630][ T5840] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  167.816892][ T8939] program syz.2.1144 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  167.910720][ T8944] loop2: detected capacity change from 0 to 256
[  167.930138][ T8944] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395e47cf, utbl_chksum : 0xe619d30d)
[  168.250068][ T8954] o2cb: This node has not been configured.
[  168.251990][ T8954] o2cb: Cluster check failed. Fix errors before retrying.
[  168.254190][ T8954] (syz.2.1150,8954,1):user_dlm_register:674 ERROR: status = -22
[  168.256486][ T8954] (syz.2.1150,8954,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0"
[  168.489475][ T8958] input: syz1 as /devices/virtual/input/input7
[  168.788132][   T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  168.958385][   T24] usb 2-1: Using ep0 maxpacket: 8
[  168.973631][   T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  168.977550][   T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  168.982016][   T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  168.985666][   T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  168.996472][   T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  169.004186][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.224835][   T24] usb 2-1: GET_CAPABILITIES returned 0
[  169.227025][   T24] usbtmc 2-1:16.0: can't read capabilities
[  169.298243][ T5294] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  169.435496][   T24] usb 2-1: USB disconnect, device number 20
[  169.451937][ T5294] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  169.454731][ T5294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.467628][ T5294] usb 3-1: Product: syz
[  169.469066][ T5294] usb 3-1: Manufacturer: syz
[  169.470441][ T5294] usb 3-1: SerialNumber: syz
[  169.479748][ T5294] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  169.529645][ T5891] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  169.878246][ T5294] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  170.028096][ T5294] usb 4-1: Using ep0 maxpacket: 16
[  170.031834][ T5294] usb 4-1: unable to get BOS descriptor or descriptor too short
[  170.035578][ T5294] usb 4-1: config 13 has an invalid interface number: 50 but max is 0
[  170.038388][ T5294] usb 4-1: config 13 has no interface number 0
[  170.040222][ T5294] usb 4-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16
[  170.043177][ T5294] usb 4-1: config 13 interface 50 has no altsetting 0
[  170.047425][ T5294] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  170.050169][ T5294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.052494][ T5294] usb 4-1: Product: syz
[  170.053804][ T5294] usb 4-1: Manufacturer: syz
[  170.055215][ T5294] usb 4-1: SerialNumber: syz
[  170.061235][ T8973] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  170.155361][   T33] usb 3-1: USB disconnect, device number 17
[  170.278198][ T5294] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  170.281204][ T5294] usb 4-1: MIDIStreaming interface descriptor not found
[  170.305773][ T5294] usb 4-1: USB disconnect, device number 17
[  170.354344][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  170.762879][ T5891] usb 3-1: Service connection timeout for: 256
[  170.764694][ T5891] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
[  170.767704][ T5891] ath9k_htc: Failed to initialize the device
[  170.774064][   T33] usb 3-1: ath9k_htc: USB layer deinitialized
[  171.140263][ T9041] loop3: detected capacity change from 0 to 512
[  171.144517][ T9041] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  173.059165][ T9107] syz_tun: entered allmulticast mode
[  173.070629][ T9107] syz_tun: left allmulticast mode
[  173.340626][ T9115] loop2: detected capacity change from 0 to 16
[  173.364008][ T9115] erofs (device loop2): rootino(nid 36) is not a directory(i_mode 63300)
[  173.407265][   T34] audit: type=1326 audit(1770155240.280:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9118 comm="syz.3.1223" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2de39acb9 code=0x7ffc0000
[  173.422987][   T34] audit: type=1326 audit(1770155240.280:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9118 comm="syz.3.1223" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2de39acb9 code=0x7ffc0000
[  173.435775][   T34] audit: type=1326 audit(1770155240.280:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9118 comm="syz.3.1223" exe="/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7fd2de39acb9 code=0x7ffc0000
[  173.443824][   T34] audit: type=1326 audit(1770155240.280:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9118 comm="syz.3.1223" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2de39acb9 code=0x7ffc0000
[  173.460556][   T34] audit: type=1326 audit(1770155240.280:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9118 comm="syz.3.1223" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2de39acb9 code=0x7ffc0000
[  173.468772][   T34] audit: type=1326 audit(1770155240.290:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9118 comm="syz.3.1223" exe="/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7fd2de39acb9 code=0x7ffc0000
[  173.476761][   T34] audit: type=1326 audit(1770155240.290:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9118 comm="syz.3.1223" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2de39acb9 code=0x7ffc0000
[  173.485305][   T34] audit: type=1326 audit(1770155240.290:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9118 comm="syz.3.1223" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2de39acb9 code=0x7ffc0000
[  173.504300][   T34] audit: type=1326 audit(1770155240.290:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9118 comm="syz.3.1223" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd2de39c547 code=0x7ffc0000
[  173.516099][   T34] audit: type=1326 audit(1770155240.290:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9118 comm="syz.3.1223" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2de39acb9 code=0x7ffc0000
[  173.550739][ T9127] loop2: detected capacity change from 0 to 8
[  173.559674][ T9127] SQUASHFS error: xz decompression failed, data probably corrupt
[  173.565359][ T9127] SQUASHFS error: Failed to read block 0x108: -5
[  173.567408][ T9127] SQUASHFS error: Unable to read metadata cache entry [106]
[  173.570443][ T9127] SQUASHFS error: Unable to read inode 0x11f
[  173.580468][ T9103] overlayfs: statfs failed on './file0'
[  173.643755][ T9129] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1229'.
[  174.144057][ T5891] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  174.288140][ T5891] usb 4-1: Using ep0 maxpacket: 16
[  174.291198][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  174.294429][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  174.297382][ T5891] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  174.301360][ T5891] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  174.304180][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.308422][ T5891] usb 4-1: config 0 descriptor??
[  175.246232][ T5891] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0004/input/input8
[  175.275965][ T5891] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  175.293420][ T5891] usb 4-1: USB disconnect, device number 18
[  175.470617][   T24] libceph: connect (1)[c::]:6789 error -101
[  175.473336][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  175.480445][   T24] libceph: connect (1)[c::]:6789 error -101
[  175.482803][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  175.599146][ T9149] ceph: No mds server is up or the cluster is laggy
[  175.653431][ T9159] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105)
[  175.656999][ T9159] team0 (unregistering): Port device team_slave_0 removed
[  175.665928][ T9159] team0 (unregistering): Failed to send options change via netlink (err -105)
[  175.671318][ T9159] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105)
[  175.679042][ T9159] team0 (unregistering): Port device team_slave_1 removed
[  175.823788][ T9168] loop2: detected capacity change from 0 to 128
[  175.841077][ T9168] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  175.858870][ T9168] hpfs: filesystem error: improperly stopped
[  175.861085][ T9168] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  175.863917][ T9168] hpfs: You really don't want any checks? You are crazy...
[  175.894389][ T9168] hpfs: hpfs_map_sector(): read error
[  175.897042][ T9168] hpfs: code page support is disabled
[  175.901721][ T9168] hpfs: hpfs_map_4sectors(): unaligned read
[  175.904330][ T9168] hpfs: hpfs_map_4sectors(): unaligned read
[  175.906494][ T9168] hpfs: filesystem error: unable to find root dir
[  175.953036][ T9173] loop3: detected capacity change from 0 to 2048
[  176.000773][ T5844]  loop3: p3 p4 < >
[  176.002409][ T5844] loop3: p3 size 861184 extends beyond EOD, truncated
[  176.019530][ T9173]  loop3: p3 p4 < >
[  176.022336][ T9173] loop3: p3 size 861184 extends beyond EOD, truncated
[  176.043676][ T5276]  loop3: p3 p4 < >
[  176.045180][ T5276] loop3: p3 size 861184 extends beyond EOD, truncated
[  176.164402][ T5844] udevd[5844]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  176.174030][ T5943] udevd[5943]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  176.205683][ T5844] udevd[5844]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  176.211405][ T5943] udevd[5943]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  176.468105][ T5835] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  176.618222][ T5835] usb 4-1: Using ep0 maxpacket: 8
[  176.630977][ T5835] usb 4-1: unable to get BOS descriptor or descriptor too short
[  176.634937][ T5835] usb 4-1: config 7 has an invalid interface number: 142 but max is 0
[  176.637860][ T5835] usb 4-1: config 7 has no interface number 0
[  176.649751][ T5835] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d
[  176.652390][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.654802][ T5835] usb 4-1: Product: syz
[  176.656131][ T5835] usb 4-1: Manufacturer: syz
[  176.657467][ T5835] usb 4-1: SerialNumber: syz
[  176.888606][ T9202] loop2: detected capacity change from 0 to 512
[  176.898189][ T9202] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  176.901079][ T5835] usb 4-1: USB disconnect, device number 19
[  176.920815][ T9202] EXT4-fs (loop2): 1 truncate cleaned up
[  176.931188][ T9202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.963616][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.068414][ T5900] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  177.228183][ T5900] usb 2-1: Using ep0 maxpacket: 16
[  177.231812][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  177.237021][ T5900] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  177.242747][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.245485][ T5900] usb 2-1: Product: syz
[  177.253330][ T5900] usb 2-1: Manufacturer: syz
[  177.254782][ T5900] usb 2-1: SerialNumber: syz
[  177.263231][ T5900] usb 2-1: config 0 descriptor??
[  177.304443][ T9216] loop2: detected capacity change from 0 to 4096
[  177.472090][ T9222] loop3: detected capacity change from 0 to 128
[  177.479966][   T24] usb 2-1: USB disconnect, device number 21
[  177.648212][ T5900] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  177.818525][ T5900] usb 3-1: Using ep0 maxpacket: 8
[  177.822250][ T5900] usb 3-1: too many endpoints for config 1 interface 0 altsetting 1: 255, using maximum allowed: 30
[  177.826209][ T5900] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 139, changing to 11
[  177.830834][ T5900] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32
[  177.835039][ T5900] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  177.838950][ T5900] usb 3-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  177.843572][ T5900] usb 3-1: config 1 interface 0 has no altsetting 0
[  177.847071][ T5900] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  177.851614][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  177.854558][ T5900] usb 3-1: SerialNumber: syz
[  177.860594][ T9218] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  177.865863][ T9218] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  178.028132][   T24] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  178.076935][ T5900] cdc_acm 3-1:1.0: Control and data interfaces are not separated!
[  178.084365][ T5900] cdc_acm 3-1:1.0: ttyACM0: USB ACM device
[  178.090960][ T5900] usb 3-1: USB disconnect, device number 18
[  178.180342][   T24] usb 4-1: config 0 has an invalid interface number: 11 but max is 0
[  178.183473][   T24] usb 4-1: config 0 has no interface number 0
[  178.185800][   T24] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[  178.190915][   T24] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  178.195738][   T24] usb 4-1: config 0 interface 11 has no altsetting 0
[  178.198621][   T24] usb 4-1: New USB device found, idVendor=06cd, idProduct=012a, bcdDevice=d5.1b
[  178.201969][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.207109][   T24] usb 4-1: config 0 descriptor??
[  178.215774][ T9232] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  178.222953][   T24] keyspan 4-1:0.11: Keyspan 4 port adapter converter detected
[  178.231377][   T24] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 81
[  178.234392][   T24] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 1
[  178.241278][   T24] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  178.252818][   T24] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 82
[  178.256323][   T24] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 2
[  178.262483][   T24] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  178.281978][   T24] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 83
[  178.285033][   T24] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 3
[  178.297951][   T24] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  178.304973][   T24] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 84
[  178.307930][   T24] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 4
[  178.313733][   T24] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  178.348122][ T5880] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  178.358384][ T5294] page_pool_release_retry() stalled pool shutdown: id 23, 1 inflight 60 sec
[  178.430643][   T24] usb 4-1: USB disconnect, device number 20
[  178.435406][   T24] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  178.439961][   T24] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  178.444934][   T24] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  178.455966][   T24] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  178.460082][   T24] keyspan 4-1:0.11: device disconnected
[  178.501147][ T5880] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  178.503863][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.506810][ T5880] usb 2-1: Product: syz
[  178.508266][ T5880] usb 2-1: Manufacturer: syz
[  178.509627][ T5880] usb 2-1: SerialNumber: syz
[  178.761692][ T9240] loop2: detected capacity change from 0 to 32768
[  178.768180][ T9240] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1276 (9240)
[  178.782955][ T9240] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  178.785869][ T9240] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  178.789038][ T9240] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  178.839026][ T9240] BTRFS info (device loop2): rebuilding free space tree
[  178.878310][ T9240] BTRFS info (device loop2): disabling free space tree
[  178.881109][ T9240] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  178.883983][ T9240] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  178.892723][ T9240] BTRFS info (device loop2): enabling ssd optimizations
[  178.894703][ T9240] BTRFS info (device loop2): enabling disk space caching
[  178.896969][ T9240] BTRFS info (device loop2): force clearing of disk cache
[  178.900359][ T9240] BTRFS info (device loop2): force zstd compression, level 3
[  178.913650][   T34] kauditd_printk_skb: 5 callbacks suppressed
[  178.913659][   T34] audit: type=1800 audit(1770155245.790:266): pid=9240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1276" name="file1" dev="loop2" ino=260 res=0 errno=0
[  178.988857][ T5840] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  179.369009][ T5891] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  179.529088][ T5891] usb 4-1: Using ep0 maxpacket: 8
[  179.534741][ T5891] usb 4-1: unable to get BOS descriptor or descriptor too short
[  179.540876][ T5880] cdc_ncm 2-1:1.0: failed to get mac address
[  179.546309][ T5891] usb 4-1: config 4 interface 0 has no altsetting 0
[  179.547955][ T5880] cdc_ncm 2-1:1.0: bind() failure
[  179.555587][ T5880] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71
[  179.558536][ T5880] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71
[  179.561844][ T5880] usbtest 2-1:1.1: probe with driver usbtest failed with error -71
[  179.565980][ T5891] usb 4-1: string descriptor 0 read error: -22
[  179.569034][ T5880] usb 2-1: USB disconnect, device number 22
[  179.569847][ T5891] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  179.574508][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.599595][ T5891] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  179.613010][ T5891] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  179.623576][ T5891] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  179.626273][ T5891] usb 4-1: media controller created
[  179.645004][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  179.929564][ T9286] xt_TCPMSS: Only works on TCP SYN packets
[  180.033557][ T5880] usb 4-1: USB disconnect, device number 21
[  180.458161][ T8175] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  180.629612][ T8175] usb 2-1: config 0 has an invalid interface number: 50 but max is 0
[  180.632561][ T8175] usb 2-1: config 0 has no interface number 0
[  180.636274][ T8175] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  180.640501][ T8175] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.643040][ T8175] usb 2-1: Product: syz
[  180.644568][ T8175] usb 2-1: Manufacturer: syz
[  180.647018][ T8175] usb 2-1: SerialNumber: syz
[  180.657511][ T8175] usb 2-1: config 0 descriptor??
[  180.661906][ T8175] yurex 2-1:0.50: Could not find endpoints
[  180.681813][ T9309] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1301'.
[  180.712389][ T9311] binder: 9310:9311 ioctl 400c620e 0 returned -14
[  180.787325][ T9317] netlink: 'syz.2.1304': attribute type 62 has an invalid length.
[  180.876193][ T5891] usb 2-1: USB disconnect, device number 23
[  181.597558][ T9343] loop3: detected capacity change from 0 to 16
[  181.603443][ T9343] erofs (device loop3): mounted with root inode @ nid 36.
[  181.623077][ T9343] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36
[  181.634363][ T9343] erofs (device loop3): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 1851
[  181.640509][ T9343] erofs (device loop3): read error -117 @ 43 of nid 36
[  181.725671][ T9347] loop3: detected capacity change from 0 to 8
[  181.748531][ T5835] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  181.776909][ T9347] SQUASHFS error: Unable to read inode 0xa7
[  181.929939][ T5835] usb 2-1: Using ep0 maxpacket: 32
[  181.933609][ T5835] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  181.938406][ T5835] usb 2-1: config 0 has no interface number 0
[  181.947742][ T5835] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  181.951219][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.952779][ T9357] loop3: detected capacity change from 0 to 128
[  181.953570][ T5835] usb 2-1: Product: syz
[  181.957367][ T5835] usb 2-1: Manufacturer: syz
[  181.961652][ T5835] usb 2-1: SerialNumber: syz
[  181.966328][ T5835] usb 2-1: config 0 descriptor??
[  181.969903][ T5835] smsc95xx v2.0.0
[  181.984699][ T9357] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  181.990291][ T9357] ext4 filesystem being mounted at /301/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  182.003177][ T9357] fscrypt (loop3, inode 12): Unsupported encryption flags (0x10)
[  182.028178][ T6615] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  182.616435][ T9369] netlink: zone id is out of range
[  182.618272][ T9369] netlink: zone id is out of range
[  182.620282][ T9369] netlink: zone id is out of range
[  182.622259][ T9369] netlink: zone id is out of range
[  182.623957][ T9369] netlink: zone id is out of range
[  182.631855][ T9369] netlink: zone id is out of range
[  182.633633][ T9369] netlink: zone id is out of range
[  182.635615][ T9369] netlink: zone id is out of range
[  182.638727][ T9369] netlink: zone id is out of range
[  182.641660][ T9369] netlink: zone id is out of range
[  183.145514][ T5835] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  183.151014][ T5835] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  184.003723][ T5835] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  184.019592][ T5835] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[  184.029084][ T5835] usb 2-1: USB disconnect, device number 24
[  184.396868][ T9386] loop3: detected capacity change from 0 to 32768
[  184.401070][ T9386] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1331 (9386)
[  184.409144][ T9386] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  184.413594][ T9386] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  184.624133][ T9386] BTRFS info (device loop3): enabling ssd optimizations
[  184.631783][ T9386] BTRFS info (device loop3): turning on async discard
[  184.634415][ T9386] BTRFS info (device loop3): enabling free space tree
[  184.682579][ T6615] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  185.407217][ T9419] loop3: detected capacity change from 0 to 32768
[  185.429804][ T9419] JBD2: Ignoring recovery information on journal
[  185.466817][ T9419] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  185.561037][ T6615] ocfs2: Unmounting device (7,3) on (node local)
[  185.672629][ T9429] loop3: detected capacity change from 0 to 8
[  185.698488][ T5294] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[  185.850685][ T5294] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  185.853517][ T5294] usb 2-1: config 0 has no interface number 0
[  185.855778][ T5294] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  185.865998][ T5294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.880948][ T5294] usb 2-1: config 0 descriptor??
[  185.886983][ T5294] usb 2-1: selecting invalid altsetting 1
[  185.893054][ T5294] dvb_ttusb_budget: ttusb_init_controller: error
[  185.895407][ T5294] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  185.968003][ T5294] DVB: Unable to find symbol cx22700_attach()
[  186.011728][ T5294] DVB: Unable to find symbol tda10046_attach()
[  186.013471][ T5294] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  186.095802][ T8175] usb 2-1: USB disconnect, device number 25
[  186.238436][ T5880] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  186.278525][ T5218] Bluetooth: hci2: command 0x0406 tx timeout
[  186.280030][   T57] Bluetooth: hci0: command 0x0406 tx timeout
[  186.400180][ T5880] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[  186.403593][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.406460][ T5880] usb 4-1: Product: syz
[  186.416263][ T5880] usb 4-1: Manufacturer: syz
[  186.418454][ T5880] usb 4-1: SerialNumber: syz
[  186.431033][ T5880] usb 4-1: config 0 descriptor??
[  186.658575][ T8175] usb 4-1: USB disconnect, device number 22
[  187.351551][   T34] audit: type=1800 audit(1770155254.230:267): pid=9492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1369" name="file0" dev="tmpfs" ino=2877 res=0 errno=0
[  187.420335][ T9497] loop3: detected capacity change from 0 to 1024
[  187.422907][ T9497] EXT4-fs: inline encryption not supported
[  187.424924][ T9497] EXT4-fs: Ignoring removed nobh option
[  187.426660][ T9497] EXT4-fs: Ignoring removed bh option
[  187.635377][ T9508] fuse: Bad value for 'fd'
[  187.669013][ T9497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  187.687789][ T6615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.338173][ T5294] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  188.388220][ T5891] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  188.508193][ T5294] usb 4-1: Using ep0 maxpacket: 32
[  188.513559][ T5294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  188.516840][ T5294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.522128][ T5294] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  188.526260][ T5294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.531297][ T5294] usb 4-1: config 0 descriptor??
[  188.539534][ T5294] hub 4-1:0.0: USB hub found
[  188.559253][ T5891] usb 2-1: Using ep0 maxpacket: 16
[  188.563141][ T5891] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  188.565838][ T5891] usb 2-1: config 0 has no interface number 0
[  188.568985][ T5891] usb 2-1: config 0 interface 41 has no altsetting 0
[  188.575367][ T5891] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  188.580715][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.583909][ T5891] usb 2-1: Product: syz
[  188.585545][ T5891] usb 2-1: Manufacturer: syz
[  188.587364][ T5891] usb 2-1: SerialNumber: syz
[  188.603857][ T5891] usb 2-1: config 0 descriptor??
[  188.612706][ T5891] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -22
[  188.742232][ T5294] hub 4-1:0.0: 1 port detected
[  188.812682][ T5880] usb 2-1: USB disconnect, device number 26
[  188.980760][ T9556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1399'.
[  189.131121][ T9562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1402'.
[  189.346113][ T5294] hub 4-1:0.0: activate --> -90
[  189.752007][ T5294] usb 4-1-port1: config error
[  189.754655][ T5891] usb 4-1: USB disconnect, device number 23
[  190.227478][ T9598] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.1419'.
[  190.331616][ T9602] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1421'.
[  191.688142][ T5900] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  191.850623][ T5900] usb 4-1: config 0 has an invalid interface number: 64 but max is 0
[  191.853631][ T5900] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  191.857333][ T5900] usb 4-1: config 0 has no interface number 0
[  191.870498][ T5900] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[  191.873856][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.876796][ T5900] usb 4-1: Product: syz
[  191.878900][ T5900] usb 4-1: Manufacturer: syz
[  191.881282][ T5900] usb 4-1: SerialNumber: syz
[  191.886136][ T5900] usb 4-1: config 0 descriptor??
[  192.151244][ T5294] usb 4-1: USB disconnect, device number 24
[  192.441230][ T5846] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  192.444851][ T5846] Bluetooth: hci2: Injecting HCI hardware error event
[  192.448886][ T5846] Bluetooth: hci2: hardware error 0x00
[  193.183561][ T9662] fuse: Bad value for 'fd'
[  193.763238][ T9688] virtiofs: Bad value for 'dax'
[  194.518259][ T5846] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  195.508241][ T5900] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  195.668178][ T5900] usb 2-1: Using ep0 maxpacket: 16
[  195.672470][ T5900] usb 2-1: config 7 has an invalid interface number: 148 but max is 0
[  195.675672][ T5900] usb 2-1: config 7 has no interface number 0
[  195.681218][ T5900] usb 2-1: config 7 interface 148 altsetting 6 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  195.685325][ T5900] usb 2-1: config 7 interface 148 has no altsetting 0
[  195.692619][ T5900] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=58.61
[  195.696112][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.699711][ T5900] usb 2-1: Product: syz
[  195.701435][ T5900] usb 2-1: Manufacturer: syz
[  195.703282][ T5900] usb 2-1: SerialNumber: syz
[  195.819748][ T9735] loop3: detected capacity change from 0 to 512
[  195.823427][ T9735] EXT4-fs: Ignoring removed orlov option
[  195.838464][ T9735] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  195.853937][ T9735] EXT4-fs (loop3): invalid journal inode
[  195.856799][ T9735] EXT4-fs (loop3): can't get journal size
[  195.876138][ T9735] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #2: comm syz.3.1480: blocks 7-7 from inode overlap system zone
[  195.885455][ T9735] EXT4-fs (loop3): failed to initialize system zone (-117)
[  195.889010][ T9735] EXT4-fs (loop3): mount failed
[  195.929981][ T5900] usb 2-1: probing VID:PID(0424:012C)   
[  195.939012][ T5900] usb 2-1: vub300 testing UNKNOWN EndPoint(0) 01
[  195.948491][ T5900] usb 2-1: vub300 ignoring EndPoint(0) 01
[  195.951894][ T5900] usb 2-1: vub300 testing UNKNOWN EndPoint(1) 05
[  195.956568][ T5900] usb 2-1: vub300 ignoring EndPoint(1) 05
[  195.964216][ T5900] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs
[  195.970843][ T5900] vub300 2-1:7.148: probe with driver vub300 failed with error -22
[  195.992229][ T5900] usb 2-1: USB disconnect, device number 27
[  196.022327][ T9738] loop3: detected capacity change from 0 to 512
[  196.025731][ T9738] EXT4-fs: Ignoring removed oldalloc option
[  196.057372][ T9738] EXT4-fs error (device loop3): ext4_iget_extra_inode:5072: inode #15: comm syz.3.1481: corrupted in-inode xattr: e_value size too large
[  196.063010][ T9738] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1481: couldn't read orphan inode 15 (err -117)
[  196.069315][ T9738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.467034][ T9749] syz.3.1481 (9749) used greatest stack depth: 18336 bytes left
[  196.634422][ T9757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  196.927791][ T6615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.538158][ T8175] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  197.708127][ T8175] usb 4-1: Using ep0 maxpacket: 16
[  197.715001][ T8175] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.723204][ T8175] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  197.733455][ T8175] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[  197.744245][ T8175] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.751129][ T8175] usb 4-1: config 0 descriptor??
[  197.800713][ T5846] Bluetooth: hci1: command 0x0406 tx timeout
[  198.184237][ T8175] zydacron 0003:13EC:0006.0005: unknown main item tag 0x7
[  198.187272][ T8175] zydacron 0003:13EC:0006.0005: unknown main item tag 0x0
[  198.190032][ T8175] zydacron 0003:13EC:0006.0005: item fetching failed at offset 4/5
[  198.194738][ T8175] zydacron 0003:13EC:0006.0005: parse failed
[  198.197230][ T8175] zydacron 0003:13EC:0006.0005: probe with driver zydacron failed with error -22
[  198.384063][ T5900] usb 4-1: USB disconnect, device number 25
[  199.560544][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  199.766814][ T9867] loop3: detected capacity change from 0 to 256
[  201.294576][ T9896] loop3: detected capacity change from 0 to 32768
[  201.312338][ T9896] (syz.3.1530,9896,1):ocfs2_check_set_options:1259 ERROR: Group quotas were requested, but this filesystem does not have the feature enabled.
[  201.350287][ T9896] (syz.3.1530,9896,1):ocfs2_fill_super:1177 ERROR: status = -22
[  201.932203][ T9905] loop3: detected capacity change from 0 to 32768
[  201.995693][ T9905] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  202.048947][ T9905] XFS (loop3): Ending clean mount
[  202.108947][ T6615] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  202.756912][ T9942] capability: warning: `syz.3.1545' uses 32-bit capabilities (legacy support in use)
[  203.912387][ T9957] tipc: Started in network mode
[  203.914513][ T9957] tipc: Node identity , cluster identity 4711
[  205.776309][   T34] audit: type=1800 audit(1770155272.650:268): pid=9997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1555" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  205.990838][T10002] netlink: 'syz.2.1571': attribute type 21 has an invalid length.
[  205.993217][T10002] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1571'.
[  206.217852][T10011] loop3: detected capacity change from 0 to 1024
[  206.221713][T10011] EXT4-fs: Ignoring removed nobh option
[  206.224135][T10011] EXT4-fs: Ignoring removed bh option
[  206.250740][T10011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.279136][ T6615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.428239][ T5903] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  206.590227][ T5903] usb 2-1: Using ep0 maxpacket: 32
[  206.593567][ T5903] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  206.596119][ T5903] usb 2-1: config 0 has no interface number 0
[  206.599576][ T5903] usb 2-1: config 0 interface 184 has no altsetting 0
[  206.605136][ T5903] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  206.609368][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.613907][ T5903] usb 2-1: Product: syz
[  206.618115][ T5903] usb 2-1: Manufacturer: syz
[  206.619982][ T5903] usb 2-1: SerialNumber: syz
[  206.637317][ T5903] usb 2-1: config 0 descriptor??
[  206.650500][ T5903] smsc75xx v1.0.0
[  206.652042][ T5903] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  206.667027][ T5903] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22
[  206.874442][ T5903] usb 2-1: USB disconnect, device number 28
[  207.809896][ T5903] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  207.958228][ T5903] usb 4-1: Using ep0 maxpacket: 32
[  207.961905][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.965206][ T5903] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[  207.968670][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.976771][ T5903] usb 4-1: config 0 descriptor??
[  208.387196][ T5903] samsung 0003:0419:0600.0006: item fetching failed at offset 0/2
[  208.392125][ T5903] samsung 0003:0419:0600.0006: parse failed
[  208.394519][ T5903] samsung 0003:0419:0600.0006: probe with driver samsung failed with error -22
[  208.528194][ T5835] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  208.589850][   T24] usb 4-1: USB disconnect, device number 26
[  208.821397][ T5835] usb 2-1: unable to get BOS descriptor or descriptor too short
[  208.826239][ T5835] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 1023
[  208.830137][ T5835] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 1023
[  208.834020][ T5835] usb 2-1: config 1 interface 0 has no altsetting 0
[  208.838917][ T5835] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  208.842256][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.845186][ T5835] usb 2-1: Product: syz
[  208.846776][ T5835] usb 2-1: Manufacturer: syz
[  208.848739][ T5835] usb 2-1: SerialNumber: syz
[  208.856752][T10065] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  208.860073][T10065] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  209.273520][ T5835] usb 2-1: bad CDC descriptors
[  209.282602][ T5835] usb 2-1: USB disconnect, device number 29
[  209.350257][T10071] loop3: detected capacity change from 0 to 128
[  209.355329][T10071] befs: (loop3): No write support. Marking filesystem read-only
[  209.370217][T10071] befs: (loop3): invalid blocksize: 2066842815
[  210.270112][T10091] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  210.332209][T10095] loop3: detected capacity change from 0 to 256
[  210.390801][T10095] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x8d1bf2bd, utbl_chksum : 0xe619d30d)
[  211.543200][T10127] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1623'.
[  211.662869][T10135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1627'.
[  211.723688][T10137] xt_CT: You must specify a L4 protocol and not use inversions on it
[  211.744508][T10141] netlink: 'syz.3.1630': attribute type 7 has an invalid length.
[  212.376466][ T8175] libceph: connect (1)[c::]:6789 error -101
[  212.380036][ T8175] libceph: mon0 (1)[c::]:6789 connect error
[  212.478161][   T24] usb 4-1: new full-speed USB device number 27 using dummy_hcd
[  212.633603][   T24] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76
[  212.637936][T10152] ceph: No mds server is up or the cluster is laggy
[  212.638162][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.644610][   T24] usb 4-1: Product: syz
[  212.646212][   T24] usb 4-1: Manufacturer: syz
[  212.659795][   T24] usb 4-1: SerialNumber: syz
[  212.679038][   T24] usb 4-1: config 0 descriptor??
[  212.896594][   T24] usb 4-1: ignoring: not an USB2CAN converter
[  213.126156][ T5891] usb 4-1: USB disconnect, device number 27
[  213.339064][T10174] Cannot find del_set index 4 as target
[  213.724430][T10178] loop3: detected capacity change from 0 to 256
[  213.756030][T10178] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  213.821102][T10182] loop3: detected capacity change from 0 to 128
[  214.045417][T10184] loop3: detected capacity change from 0 to 4096
[  214.526976][T10198] loop3: detected capacity change from 0 to 2048
[  214.575146][T10198] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  214.606138][T10198] UDF-fs: Scanning with blocksize 512 failed
[  214.621543][T10198] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  214.650200][T10198] [syz.3.1651/10198] FS: loop3 File: /bus/file1 would truncate fibmap result
[  215.230388][T10234] loop3: detected capacity change from 0 to 1024
[  215.285890][T10234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  215.310965][T10234] ==================================================================
[  215.313921][T10234] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x8e9/0x1e20
[  215.316822][T10234] Read of size 18446744073709551588 at addr ffff8881b112a840 by task syz.3.1668/10234
[  215.320718][T10234] 
[  215.321964][T10234] CPU: 0 UID: 0 PID: 10234 Comm: syz.3.1668 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  215.321987][T10234] Tainted: [L]=SOFTLOCKUP
[  215.321993][T10234] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  215.322004][T10234] Call Trace:
[  215.322011][T10234]  <TASK>
[  215.322018][T10234]  dump_stack_lvl+0xe8/0x150
[  215.322039][T10234]  print_report+0xba/0x230
[  215.322055][T10234]  ? ext4_xattr_set_entry+0x8e9/0x1e20
[  215.322079][T10234]  kasan_report+0x117/0x150
[  215.322098][T10234]  ? ext4_xattr_set_entry+0x8e9/0x1e20
[  215.322114][T10234]  ? ext4_xattr_set_entry+0x8e9/0x1e20
[  215.322129][T10234]  kasan_check_range+0x264/0x2c0
[  215.322147][T10234]  ? ext4_xattr_set_entry+0x8e9/0x1e20
[  215.322161][T10234]  __asan_memmove+0x29/0x70
[  215.322175][T10234]  ext4_xattr_set_entry+0x8e9/0x1e20
[  215.322198][T10234]  ext4_xattr_block_set+0x878/0x2ad0
[  215.322213][T10234]  ? __pfx_ext4_free_in_core_inode+0x10/0x10
[  215.322238][T10234]  ? __pfx_evict+0x10/0x10
[  215.322252][T10234]  ? do_raw_spin_unlock+0x4d/0x210
[  215.322273][T10234]  ? _raw_spin_unlock+0x28/0x50
[  215.322292][T10234]  ? iput+0xcc2/0x1020
[  215.322315][T10234]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[  215.322330][T10234]  ? ext4_xattr_ibody_set+0x510/0x6a0
[  215.322348][T10234]  ext4_xattr_set_handle+0x1286/0x14c0
[  215.322370][T10234]  ? __pfx_ext4_xattr_set_handle+0x10/0x10
[  215.322384][T10234]  ? ext4_journal_check_start+0x1c/0x2b0
[  215.322402][T10234]  ? __ext4_journal_start_sb+0x259/0x570
[  215.322418][T10234]  ext4_xattr_set+0x255/0x340
[  215.322435][T10234]  ? __pfx_ext4_xattr_set+0x10/0x10
[  215.322450][T10234]  ? __pfx_evm_protect_xattr+0x10/0x10
[  215.322469][T10234]  ? __pfx_ext4_xattr_trusted_set+0x10/0x10
[  215.322486][T10234]  __vfs_setxattr+0x43c/0x480
[  215.322508][T10234]  __vfs_setxattr_noperm+0x12d/0x660
[  215.322563][T10234]  vfs_setxattr+0x16a/0x2e0
[  215.322584][T10234]  ? __pfx_vfs_setxattr+0x10/0x10
[  215.322606][T10234]  filename_setxattr+0x281/0x630
[  215.322629][T10234]  ? __pfx_filename_setxattr+0x10/0x10
[  215.322650][T10234]  ? getname_flags+0x1e4/0x540
[  215.322670][T10234]  path_setxattrat+0x3f3/0x430
[  215.322687][T10234]  ? __pfx_path_setxattrat+0x10/0x10
[  215.322701][T10234]  ? do_futex+0x333/0x420
[  215.322724][T10234]  ? ksys_write+0xf8/0x270
[  215.322739][T10234]  ? __pfx___se_sys_futex+0x10/0x10
[  215.322755][T10234]  ? __pfx_ksys_write+0x10/0x10
[  215.322772][T10234]  __x64_sys_lsetxattr+0xbf/0xe0
[  215.322794][T10234]  do_syscall_64+0xe2/0xf80
[  215.322808][T10234]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.322821][T10234]  ? trace_irq_disable+0x37/0x100
[  215.322843][T10234]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.322858][T10234] RIP: 0033:0x7fd2de39acb9
[  215.322872][T10234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  215.322886][T10234] RSP: 002b:00007fd2df2d9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[  215.322904][T10234] RAX: ffffffffffffffda RBX: 00007fd2de615fa0 RCX: 00007fd2de39acb9
[  215.322915][T10234] RDX: 0000200000000000 RSI: 0000200000000180 RDI: 00002000000001c0
[  215.322926][T10234] RBP: 00007fd2de408bf7 R08: 0000000000000000 R09: 0000000000000000
[  215.322936][T10234] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000
[  215.322945][T10234] R13: 00007fd2de616038 R14: 00007fd2de615fa0 R15: 00007fff624f2e28
[  215.322963][T10234]  </TASK>
[  215.322968][T10234] 
[  215.444561][T10234] Allocated by task 10234:
[  215.446206][T10234]  kasan_save_track+0x3e/0x80
[  215.447971][T10234]  __kasan_kmalloc+0x93/0xb0
[  215.449704][T10234]  __kmalloc_node_track_caller_noprof+0x558/0x7f0
[  215.452008][T10234]  kmemdup_noprof+0x2b/0x70
[  215.453711][T10234]  ext4_xattr_block_set+0x787/0x2ad0
[  215.455746][T10234]  ext4_xattr_set_handle+0x1286/0x14c0
[  215.457801][T10234]  ext4_xattr_set+0x255/0x340
[  215.459576][T10234]  __vfs_setxattr+0x43c/0x480
[  215.461322][T10234]  __vfs_setxattr_noperm+0x12d/0x660
[  215.463289][T10234]  vfs_setxattr+0x16a/0x2e0
[  215.464987][T10234]  filename_setxattr+0x281/0x630
[  215.466826][T10234]  path_setxattrat+0x3f3/0x430
[  215.468606][T10234]  __x64_sys_lsetxattr+0xbf/0xe0
[  215.470458][T10234]  do_syscall_64+0xe2/0xf80
[  215.472136][T10234]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.474380][T10234] 
[  215.475289][T10234] The buggy address belongs to the object at ffff8881b112a800
[  215.475289][T10234]  which belongs to the cache kmalloc-1k of size 1024
[  215.480294][T10234] The buggy address is located 64 bytes inside of
[  215.480294][T10234]  1024-byte region [ffff8881b112a800, ffff8881b112ac00)
[  215.485091][T10234] 
[  215.485997][T10234] The buggy address belongs to the physical page:
[  215.488395][T10234] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1b1128
[  215.491652][T10234] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  215.494687][T10234] ksm flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  215.497634][T10234] page_type: f5(slab)
[  215.499120][T10234] raw: 057ff00000000040 ffff888100041dc0 ffffea0004536800 dead000000000003
[  215.502231][T10234] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  215.505422][T10234] head: 057ff00000000040 ffff888100041dc0 ffffea0004536800 dead000000000003
[  215.508574][T10234] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  215.511709][T10234] head: 057ff00000000003 ffffea0006c44a01 00000000ffffffff 00000000ffffffff
[  215.514759][T10234] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  215.517837][T10234] page dumped because: kasan: bad access detected
[  215.520150][T10234] page_owner tracks the page as allocated
[  215.522193][T10234] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6519, tgid 6518 (syz.2.216), ts 89025618869, free_ts 81746648891
[  215.529713][T10234]  post_alloc_hook+0x231/0x280
[  215.531471][T10234]  get_page_from_freelist+0x24dc/0x2580
[  215.533531][T10234]  __alloc_frozen_pages_noprof+0x18d/0x380
[  215.535788][T10234]  alloc_pages_mpol+0x232/0x4a0
[  215.537529][T10234]  allocate_slab+0x86/0x3a0
[  215.539208][T10234]  ___slab_alloc+0xd82/0x1760
[  215.540959][T10234]  __slab_alloc+0x65/0x100
[  215.542625][T10234]  __kvmalloc_node_noprof+0x673/0x8d0
[  215.544552][T10234]  rhashtable_init_noprof+0x52e/0xa70
[  215.546461][T10234]  ipc_init_ids+0x7b/0x1f0
[  215.548137][T10234]  copy_ipcs+0x433/0x4f0
[  215.549772][T10234]  create_new_namespaces+0x210/0x6a0
[  215.551735][T10234]  unshare_nsproxy_namespaces+0x11a/0x160
[  215.553816][T10234]  ksys_unshare+0x4f4/0x900
[  215.555521][T10234]  __x64_sys_unshare+0x38/0x50
[  215.557326][T10234]  do_syscall_64+0xe2/0xf80
[  215.559019][T10234] page last free pid 6335 tgid 6331 stack trace:
[  215.561340][T10234]  __free_frozen_pages+0xbb9/0xd10
[  215.563250][T10234]  __put_partials+0x146/0x170
[  215.565061][T10234]  __slab_free+0x294/0x320
[  215.566739][T10234]  qlist_free_all+0x97/0x100
[  215.568455][T10234]  kasan_quarantine_reduce+0x148/0x160
[  215.570484][T10234]  __kasan_slab_alloc+0x22/0x80
[  215.572309][T10234]  __kmalloc_noprof+0x3c2/0x7e0
[  215.574112][T10234]  copy_splice_read+0x16f/0xaa0
[  215.575950][T10234]  splice_direct_to_actor+0x4a0/0xc70
[  215.577917][T10234]  do_splice_direct+0x195/0x290
[  215.579712][T10234]  do_sendfile+0x535/0x7c0
[  215.581399][T10234]  __se_sys_sendfile64+0x144/0x1a0
[  215.583236][T10234]  do_syscall_64+0xe2/0xf80
[  215.584849][T10234]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.586936][T10234] 
[  215.587821][T10234] Memory state around the buggy address:
[  215.589749][T10234]  ffff8881b112a700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  215.592588][T10234]  ffff8881b112a780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  215.595427][T10234] >ffff8881b112a800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  215.598406][T10234]                                            ^
[  215.600656][T10234]  ffff8881b112a880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  215.603566][T10234]  ffff8881b112a900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  215.606423][T10234] ==================================================================
[  215.621934][T10234] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  215.624490][T10234] CPU: 0 UID: 0 PID: 10234 Comm: syz.3.1668 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  215.628539][T10234] Tainted: [L]=SOFTLOCKUP
[  215.630074][T10234] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  215.633622][T10234] Call Trace:
[  215.634825][T10234]  <TASK>
[  215.635909][T10234]  vpanic+0x1e0/0x670
[  215.637309][T10234]  panic+0xc5/0xd0
[  215.638709][T10234]  ? __pfx_panic+0x10/0x10
[  215.640338][T10234]  ? preempt_schedule_thunk+0x16/0x30
[  215.642251][T10234]  ? ext4_xattr_set_entry+0x8e9/0x1e20
[  215.644309][T10234]  check_panic_on_warn+0x89/0xb0
[  215.646129][T10234]  ? ext4_xattr_set_entry+0x8e9/0x1e20
[  215.648105][T10234]  end_report+0x6f/0x140
[  215.649621][T10234]  kasan_report+0x128/0x150
[  215.651292][T10234]  ? ext4_xattr_set_entry+0x8e9/0x1e20
[  215.653288][T10234]  ? ext4_xattr_set_entry+0x8e9/0x1e20
[  215.655221][T10234]  kasan_check_range+0x264/0x2c0
[  215.657000][T10234]  ? ext4_xattr_set_entry+0x8e9/0x1e20
[  215.658937][T10234]  __asan_memmove+0x29/0x70
[  215.660641][T10234]  ext4_xattr_set_entry+0x8e9/0x1e20
[  215.662601][T10234]  ext4_xattr_block_set+0x878/0x2ad0
[  215.664526][T10234]  ? __pfx_ext4_free_in_core_inode+0x10/0x10
[  215.666727][T10234]  ? __pfx_evict+0x10/0x10
[  215.668354][T10234]  ? do_raw_spin_unlock+0x4d/0x210
[  215.670275][T10234]  ? _raw_spin_unlock+0x28/0x50
[  215.672080][T10234]  ? iput+0xcc2/0x1020
[  215.673620][T10234]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[  215.675814][T10234]  ? ext4_xattr_ibody_set+0x510/0x6a0
[  215.677821][T10234]  ext4_xattr_set_handle+0x1286/0x14c0
[  215.679861][T10234]  ? __pfx_ext4_xattr_set_handle+0x10/0x10
[  215.682038][T10234]  ? ext4_journal_check_start+0x1c/0x2b0
[  215.684136][T10234]  ? __ext4_journal_start_sb+0x259/0x570
[  215.686211][T10234]  ext4_xattr_set+0x255/0x340
[  215.687958][T10234]  ? __pfx_ext4_xattr_set+0x10/0x10
[  215.689921][T10234]  ? __pfx_evm_protect_xattr+0x10/0x10
[  215.691974][T10234]  ? __pfx_ext4_xattr_trusted_set+0x10/0x10
[  215.694156][T10234]  __vfs_setxattr+0x43c/0x480
[  215.695953][T10234]  __vfs_setxattr_noperm+0x12d/0x660
[  215.697912][T10234]  vfs_setxattr+0x16a/0x2e0
[  215.699593][T10234]  ? __pfx_vfs_setxattr+0x10/0x10
[  215.701466][T10234]  filename_setxattr+0x281/0x630
[  215.703328][T10234]  ? __pfx_filename_setxattr+0x10/0x10
[  215.705314][T10234]  ? getname_flags+0x1e4/0x540
[  215.707150][T10234]  path_setxattrat+0x3f3/0x430
[  215.708929][T10234]  ? __pfx_path_setxattrat+0x10/0x10
[  215.710896][T10234]  ? do_futex+0x333/0x420
[  215.712520][T10234]  ? ksys_write+0xf8/0x270
[  215.714185][T10234]  ? __pfx___se_sys_futex+0x10/0x10
[  215.716148][T10234]  ? __pfx_ksys_write+0x10/0x10
[  215.717958][T10234]  __x64_sys_lsetxattr+0xbf/0xe0
[  215.719837][T10234]  do_syscall_64+0xe2/0xf80
[  215.721542][T10234]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.723785][T10234]  ? trace_irq_disable+0x37/0x100
[  215.725681][T10234]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.727858][T10234] RIP: 0033:0x7fd2de39acb9
[  215.729556][T10234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  215.736435][T10234] RSP: 002b:00007fd2df2d9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[  215.739542][T10234] RAX: ffffffffffffffda RBX: 00007fd2de615fa0 RCX: 00007fd2de39acb9
[  215.742454][T10234] RDX: 0000200000000000 RSI: 0000200000000180 RDI: 00002000000001c0
[  215.745386][T10234] RBP: 00007fd2de408bf7 R08: 0000000000000000 R09: 0000000000000000
[  215.748289][T10234] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000
[  215.751207][T10234] R13: 00007fd2de616038 R14: 00007fd2de615fa0 R15: 00007fff624f2e28
[  215.754218][T10234]  </TASK>
[  215.756080][T10234] Kernel Offset: disabled
[  215.757680][T10234] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:48:02  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000003600 RDI=0000000000003601 RBP=00000000000003f8 RSP=ffffc90003886d90
R8 =ffff888109b30237 R9 =1ffff11021366046 R10=dffffc0000000000 R11=ffffffff8525f980
R12=dffffc0000000000 R13=ffffffff99df0a48 R14=ffffffff9a104f80 R15=0000000000000000
RIP=ffffffff8525f9fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd2df2d96c0 ffffffff 00c00000
GS =0000 ffff88818e324000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32423ffc CR3=000000001c078000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0072657070752e79 616c7265766f2e64
XMM02=00007fd2de5e4488 00007fd2de5e44b8 XMM03=00007fd2de5e44a0 00007fd2de5e4480
XMM04=00007fd2df14d020 00007fd2de5e4460 XMM05=00007fd2de5e4470 00007fd2de5e44b0
XMM06=00007fd2de5e4498 00007fd2de5e4468 XMM07=00007fd2de5e44a0 00007fd2de5e4480
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000263a2d RBX=ffffffff81984a1d RCX=0000000080000001 RDX=0000000000000001
RSI=ffffffff8dad1bc6 RDI=ffffffff8be74c00 RBP=ffffc90000197f10 RSP=ffffc90000197e20
R8 =ffff88823c6336db R9 =1ffff110478c66db R10=dffffc0000000000 R11=ffffed10478c66dc
R12=ffffffff8fcef870 R13=1ffff1102c154000 R14=0000000000000001 R15=0000000000000001
RIP=ffffffff8b78fb2f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a9924000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f81bd017dac CR3=0000000166bb2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 00007f81bdb4d560
XMM02=00007f81bcfe4488 00007f81bcfe44b8 XMM03=00007f81bcfe44a0 00007f81bcfe4480
XMM04=00007f81bdb4d020 00007f81bcfe4460 XMM05=00007f81bcfe4470 00007f81bcfe44b0
XMM06=00007f81bcfe4498 00007f81bcfe4468 XMM07=00007f81bcfe44a0 00007f81bcfe4480
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
