last executing test programs:

54.068696671s ago: executing program 0 (id=1389):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @empty}, 0x0, r1})

54.068556466s ago: executing program 0 (id=1390):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40)
syz_usb_disconnect(r0)

53.308515818s ago: executing program 0 (id=1395):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETSHIFTSTATE(r0, 0x4b2f, 0x0)

53.308248013s ago: executing program 0 (id=1396):
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f00000013c0)='./file0\x00', 0x800, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x2, 0x14e1, &(0x7f0000003f40)="$eJzs3AuUjlXbOPB97b3vMTSNp0kOw772dfOkwTZJkkOSHJIkSUJOCaFJkoTEkFPSEHI+TMhhCMlhYpLz+ZRz0uSVJElISLL/S73v53vf3m/5/t/7/v/W+ub6rbXX7Gvu57qe655r1jz3/aw1z/fdhtdsXKtaQyIS/xL440uqECJWCDFYCJFXCBEIIcollEu4ejy3gtR/7UnYv9eTGTe6A3Yj8fxzNp5/zsbzz9l4/jkbzz9n4/nnbDz/nI3nz1hOtnNOoVt45dzF7//nZPz6n7Px/HM2nn/OxvPP2Xj+/wvE/M9Tef45G88/Z+P552w8f8Zyshv9/jOvG7tu9O8fY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLGc4aK/Rgsh/ra/0X0xxhhjjDHGGGPs38fnutEdMMYYY4wxxhhj7P89EFIooUUgYkQuEStyizziJhEnbhbxIq+IiFtEgrhV5BO3ifyigCgoColEUVgUEUagsIJEKIqKYiIqbhfFxR0iSZQQJUUp4URpkSzuFGXEXaKsuFuUE/eI8uJeUUFUFJVEZXGfqCLuF1XFA6KaeFBUFzVETVFLPCRqi4dFHfGIqCseFfXEY6K+eFw0EE+IhuJJ0Ug8JRqLJqKpeFo0E81FC9FStPof5b8meonXRW/RR6SKvqKfeEP0FwPEQDFIDBZviiHiLTFUvC3SxDAxXLwjRoiRYpR4V4wWY8RYMU6MFxPERDFJTBZTRLp4T0wV08R08b6YIWaKWWK2yBBzxFzxgZgn5osF4kOxUHwkFonFYolYKjLFx2KZWC6yxCdihfhUrBSrxGqxRqwV68R6sUFsFJvEZrFFbBXbxHaxQ+wUn4ldYrfYI/aKfWK/OCA+FwfFF+KQ+FJki6/+L/Mv/EN+dxAgQIIEDRpiIAZiIRbyQB6IgziIh3iIQAQSIAHyQT7ID/mhIBSEREiEIlAEEBAICIpCUYhCFIpDcUiCJCgJJcGBg2RIhjJwF5SFslAOykF5KA8VoCJUhMpQGapAFagKVaEaVIPqUB1qQk14CB6Ch6EO1IG6UBfqQT2oD/WhATSAhtAQGkEjaAyNoSk0hWbQDFpAC2gFraA1tIY20AbaQTtoD+2hI3SEFEiBTtAJOkBn6AJdoCt0hW7QDbpDD+gBr8Fr8Dq8Dn2guuwL/aAf9If+MBAGwSB4E4bAW/AWvA1pMAyGwzvwDoyEUXAeRsMYGAtjoYqcABNhEpCcAumQDlNhKkyH6TADZsJMmA0ZMAfmwlyYB/NhPnwIC+Ej+AgWw2JYCpmQCctgOWRBFqyAC7ASVsFqWANrYR2shQ2wETbAZtgCm2EbbIMdsAM+g89gHOyGvbAX9sN++Bw+hy/gC0iDbMiGw3AYjsAROApH4Rgcg+NwHE7ACTgJJ+EUnILTcAbOwhk4B+fgPFyAi3ARLsEluAyvJH7baH+JTWlCXqWlljEyRsbKWJlH5pFxMk7Gy3gZkRGZIBNkPplP5pf5ZUFZUCbKRFlEFpEoUZIMZVFZVEZlVBaXxWWSTJIlZUnppJPJMnmakGVkWVlWlpP3yPLyXllBVpRtXWVZWVaR7VxV+YCsJqvJ6rKGrClryVqytqwt68g6sq6sK+vJerK+fFw2kH1hIDwpr06msRwGTeVwaCabyxaypRwJz8jWchS0kW1lO/mcHAOjoaNs7VLkC7KTnAid5UtyErwsu8op0E2+KrvLHrKnfE32km1cb9lHzoC+sp+cDf3lyCYD5SA5D2rIqxOrKd+WaXKYHC7fkUthpBwl35Wj5Rg5Vo6T4+UEOVFOkpPlFJku35NT5TQ5Xb4vZ8iZcpacLTPkHDlXfiDnyflygfxQLpQfyUVysVwil8pM+bFcJpfLLPmJXCE/lSvlKrlarpFr5Tq5Xm6QG+UmuVlukVvlNrld7pA75Wdyl9wt98i9cp/cLw/Iz+VB+YU8JL+U2fIreVj+RR6RX8uj8ht5TH4rj8vv5An5vTwpf5Cn5I/ytDwjz8qf5Dn5szwvL8iL8hd5Sf4qL8vf5BXppVCgpFJKq0DFqFwqVuVWedRNKk7drOJVXhVRt6gEdavKp25T+VUBVVAVUomqsCqijEJlFalQFVXFVFTdroqrO1SSKqFKqlLKqdIqWd2pyqi7VFl1tyqn7lHl1b2qgqqoKqnK6j5VRd2vqqoHVDX1oKquaqiaqpZ6SNVWD6s66hFVVz2q6qnHVH31uGqgnlAN1ZOqkXpKNVZNVFP1tGqmmqsWqqVqpZ5RrdWzqo1qq9qp51R71UF1VM+rFPWC6qReVJ3VS6qLell1Va+obupV1V31UD3Vb+qK8qq36qNSVV/VT72h+qsBaqAapAarN9UQ9ZYaqt5WaWqYGq7eUSPUSDVKvatGqzFqrBqnxqsJaqKapCarKSpdvaemqmlqunpfzVAz1Sw1W2WoOWrgXyst+G/kT/sn+UN/f/Ydaqf6TO1Su9UetVftU/vVAXVAHVQH1SF1SGWrbHVYHVZH1BF1VB1Vx9QxdVwdVyfUCXVSnVSn1Cl1Wp1Rv6if1Dn1szqvLqgL6hd1SV1Sl//6MxAatNRKax3oGJ1Lx+rcOo++Scfpm3W8zqsj+hadoG/V+fRtOr8uoAvqQjpRF9ZFtNGorSYd6qK6mI7q23VxfYdO0iV0SV1KO11aJ+s7/+X86/XXSrfSrXVr3Ua30e10O91et9cddUedolN0J91Jd9addRfdRXfVXXU33U131911T91T99K9dG/dW6fqVN1Pv6H76wF6oB6kB+s39RA9RA/VQ3WaTtPD9XA9Qo/Qo/QoPVqP1mP1WD1ej9cT9UQ9WU/W6TpdT9VT9XQ9Xc/QM/QsPUtn6Aw9V8/V8/Q8vUAv0Av1Qr1IL9JL9BKdqTP1Mr1MZ+ksvUKv0Cv1Kr1Kr9Fr9Dq9Tm/QG/QmvUlv0Vv0Nr1Nr9Q79U69S+/Se/QevU/v0wf0AX1QH9SH9CGdrbP1YX1YH9FH9FF9VB/Tx/RxfVyf0Cf0SX1Sn9Kn9Gl9Wp/VZ/U5fU6f1+f1RX1RX9KX9GV9WV/RV65e9gUykIEOdBATxASxQWyQJ8gTxAVxQXwQH0SCSJAQJAT5gtuC/EGBoGBQKEgMCgdFAhNgYAMKwqBoUCyIBrcHxYM7gqSgRFAyKBW4oHSQHNwZlAnuCsoGdwflgnuC8sG9QYWgYlApqBzcF1QJ7g+qBg8E1YIHg+pBjaBmUCt4KKgdPBzUCR4J6gaPBvWCx4L6weNBg+CJoGHwZNAoeCpoHDQJmgZPB82C5kGLoGXQ6t9a3/vzBZ51vU0fk2r6mn7mDdPfDDADzSAz2Lxphpi3zFDztkkzw8xw844ZYUaaUeZdM9qMMWPNODPeTDATzSQz2Uwx6eY9M9VMM9PN+2aGmWlmmdkmw8wxc80HZp6ZbxaYD81C85FZZBabJWapyTQfm2Vmuckyn5gV5lOz0qwyq80as9asM+vNBrPRbDKbzRaz1Wwz280Os9N8ZnaZ3WaP2Wv2mf3mgPncHDRfmEPmS5NtvjKHzV/MEfO1OWq+McfMt+a4+c6cMN+bk+YHc8r8aE6bM+as+cmcMz+b8+aCuWh+MZfMr+ay+c1cMf7qxf3Vl3fUqDEGYzAWYzEP5sE4jMN4jMcIRjABEzAf5sP8mB8LYkFMxEQsgkXwKkLColgUoxjF4lgckzAJS2JJdOgwGZOxDJbBslgWy2E5LI/lsQJWwEpYCe/D+/B+vB8fwAfwQXwQa2ANrIW1sDbWxjpYB+tiXayH9bA+1scG2AAbYkNshI2wMTbGptgUm2EzbIEtsBW2wtbYGttgG2yH7bA9tseO2BFTMAU7YSfsjJ2xC3bBrtgVu2E37I7dsSf2xF7YC3tjb0zFVOyH/bA/9seBOBAH42AcgkNwKA7FNEzD4TgcR+AIHIWjcDSOwbE4DsfjBJyIk3AyTsF0TMepOBWn43ScgTNwFs7CDMzAuTgX5+E8XIALcCEuxEW4CJfgEszETFyGyzALs3AFrsCVuBJX42pci2txPa7HjbgRN+Nm3IpbcTtux524E3fhLtyDe3Af7sMDeAAP4kE8hIcwG7PxMB7GI3gEj+JRPIbH8DgexxN4Ak/iSTyFp/A0nsazeBbP4Tk8j+fxIl7ES/grXsbf8Ap6jLW5bR57k42zN9t4m9f+Y1zQFrKJtrAtYo3Nbwv8XYzW2iRbwpa0payzpW2yvfNPcQVb0Vayle19toq931b9U1zbPmzr2EdsXfuorWUf+ru4nn3M1rdNbAP7tG1om9tGtqVtbJvYpvZp28w2ty1sS9vedrAd7fM2xb5gO9kX/xQvs8vtRrvJbrZb7EH7hb1of7En7Pf2kv3V9rZ97GD7ph1i37JD7ds2zQ77UzzWjrPj7QQ70U6yk+2UP8Wz7GybYefYufYDO8/O/1OcaT/2ef+4AbdL7NKr8e89ZdlP7Ar7qY3Gr7Kr7Rq71q6z6+2G/+h1jd1mt9sd9oD93O6yu+0eu9fus/t/j6+exyH7pc22X9nj9jt7xH5tj9qT9pj99vf46vmdtD/YU/ZHe9qesWftT/ac/dmetxd+P/+r5/6T/c1esd4KApKkSFNAMZSLYik35aGbKI5upnjKSxG6hRLoVspHt1F+KkAFqRAlUmEqQoaQLBGFVJSKUZRup+J0ByXFCCGoFDkqTcl0J5Whu6gs3U3l6B4qT/dSBapIlagy3UdV6H6qSg9QNXqQqlMNqkm16CGqTQ9THXqE6tKjVI8eo/r0ODWgJ6ghPUmN6ClqTE2oKT1Nzag5taCW1Iqeodb0LLWhttSOnqP21IE60vOUQi9QJ3qROtNL1IVepq70CnWjV6k79aCe9Br1otepN/WhVOpL/egN6k8DaCANosH0Jg2ht2govU1pNIyG0zs0gkbSKHqXRtMYGkvjaDxNoIk0iSbTFEqn92gqTaPp9D7NoJk0i2ZTBs2hufQBzaP5tIA+pIX0ES2ixbSEllImfUzLaDll0Se0gj6llbSKVtMaWkvraD1toI20iTbTFtpK22g77aCd9Bntot20h/bSPtpPB+hzOkhf0CH6krLpKzpMf6Ej9DUdpW/oGH1Lx+k7OkHf00n6gU7Rj3SaztBZ+onO0c90ni7QRfqFLtGvdJl+oyvkSYQQylCFOgzCmDBXGBvmDvOEN4Vx4c1hfJg3jIS3hAnhrWG+8LYwf1ggLBgWChPDwmGR0IQY2pDCMCwaFguj4e1h8fCOMCksEZYMS4UuLB0mh3eGZcK7wrLh3WG58J6wfHhvWCGsGDZ5tHJ4X1glvD+sGj4QVgsfDKuHNcKaYa3wobB2+HBYJ3wkrBs+GpYNHwvrh4+HDcInwobhk2Gj8KmwcdgkbBo+HTYLm4ctwpZhq/CZsHX4bNgmbBu2C58L24cdwo7h82FK+ELYKXzxusdTw75hv/CN8I3Q+0fUkujSaGb04+iy6PJoVvST6Irop9GV0VXR1dE10bXRddH10Q3RjdFN0c3RLdGt0W3R7dEdUe9r5RIOnHTKaRe4GJfLxbrcLo+7ycW5m128y+si7haX4G51+dxtLr8r4Aq6Qi7RFXZFnHHorCMXuqKumIu6211xd4dLciVcSVfKOVfaJbuWrpVr5Vq7Z10b19a1c8+551wH18E97553L7hO7kXX2b3kuriXXVf3invFveq6ux6up3vN9XKvu96uj0t1qa6f6+f6u/5uoBvoBrvBbogb4oa6oS7Npbnhbrgb4Ua4UW6UG+1Gu7FurBvvxruJbqKb7Ca7dJfuprqpbrqb7ma4GW6Wm+UyXIab6+a6eW6eW+AWuIVJC90it8gtcUtcpst0y9wyl+Wy3Aq3wq10K91qt9qtdWvderfebXQb3Wa32W11W912t93tdDvdLrfL7XF73D63zx1wB9xBd9Adcodctst2h91hd8QdcUfdN+6Y+9Ydd9+5E+57d9L94E65H91pd8addT+5c+5nd95dcBfdL+6S+9Vddr+5K8679Mh7kamRaZHpkfcjMyIzI7MisyMZkTmRuZEPIvMi8yMLIh9GFkY+iiyKLI4siSyNZEY+jiyLLI9kRT6JrIh8GlkZWRVZHVkTWRtZF/G+8K7QF/XFfNTf7ov7O3ySL+FL+lLe+dI+2d/py/i7fFl/ty/n7/Hl/b2+gq/oK/mnfTPf3LfwLX0r/4xv7Z/1bXxb384/59v7Dr6jf96n+Bd8J/+i7+xf8l38y76rf8V386/67r6H7+lf873867637+NTfV/fz7/h+/sBfqAf5Af7N/0Q/5Yf6t/2aX6YH+7f8SP8SD/Kv+tH+zF+rB/nx/sJfqKf5Cf7KT7dv+en+ml+un/fz/Az/Sw/22f4OX6u/8DP8/P9Av+hX+g/8ov8Yr/EL/WZ/mO/zC/3Wf4Tv8J/6lf6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+s/8Lr/b7/F7/T6/3x/wn/uD/gt/yH/ps/1X/rD/iz/iv/ZH/Tf+mP/WH/ff+RP+e3/S/+BP+R/9aX/Gn/U/+XP+Z3/eX/AX/S/+kv/VX/a/+Sv8P2uMMcYYY/8t6jrH+/6T78m/rqv6CSFu3l3o2D/W3Jr/j/0ASGwfEUK80Kfbk39b1aunpqb+9bErlQiKLRZCRETM3/J/30T+2K8S7UQHkSLaijL/tL8Bsscluk796D1C5PlPObHiWuz7/K3+Xf9F/QkLr1t/sRBJxa7l5BbX4mv9l/0v6hdofZ36ub9OF6LNf8qJE9fia/WTxbPiRZHyd49kjDHGGGOMMcb+MEBW6nK9+9ur9+eJ+lpOLnEtvt79OWOMMcYYY4wxxm68l3v0fP6ZlJS2XXjDG97w5j82N/ovE2OMMcYYY+zf7dpF/43uhDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYy7n+f3yc2I0+R8YYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY+xG+z8BAAD//zbsNL4=")
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000005500)='./bus\x00', 0x0, 0x1045802, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x275a, 0x0)

53.093894931s ago: executing program 0 (id=1398):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r0, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x27}, 0x1c)
sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0)

52.795950136s ago: executing program 0 (id=1402):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x0)

52.592461317s ago: executing program 32 (id=1402):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x0)

48.956080313s ago: executing program 1 (id=1431):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010ef17676000000000000109022400010000d040090400000103000000092100000001220100090581033c"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0)

47.373781435s ago: executing program 1 (id=1441):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9, 0x3, 0x0, 'queue0\x00', 0x6})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x7}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000140)={0x3, 0xffff, 0x46, 0x0, 0xe})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

47.318810645s ago: executing program 1 (id=1442):
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
wait4(r0, 0x0, 0x8, 0x0)
syz_pidfd_open(r0, 0x0)

47.056107791s ago: executing program 1 (id=1443):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000010600)='./file0\x00', 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x1059a, &(0x7f0000010640)="$eJzs3M1rI2UcB/Bftu6r61pkX/TkgAgNmNC03aIgUnUXXbBL8eXgSdNkGrKbZEqTvrhnPemf4FUQ8ebf4MV/Y/EgeBK8rSiZmcpW96A226zbzwem32eePPPL84RcnkyZAI6t2eTXXypxIc5GxExEnI/I25XyyK0U8WxEPB8RJ+47KmX/nx2nIuJcRFwYFy9qVsqXln+7e++r5268+vk3d6uNn77+cnqrBqbtxYjobxbt3X6RWafIW2V/c6ebZ39pp8zihf7t8jwrcjddzyvsNvfHNfNc7BTjs83t4Tg3es3WODvdjbx/c1C84XCns18nv+BWcys/b6freXaHWZ6dO8W89sq8MxwVddplvU/y8jEa7WfRn+6lxXo2b+fZGozK/qJu1k73xrlTZvl20cp67Xwe6//5Y37kvdMdbO8lO+nWsJsNkqv1xsv1xnKtsZW101G6VGv228tLyVynNx5WG6XN/konyzq9tN7K+tVkrtNq1RqNZO5aut5tDpJGo75Yn69drZatl5K3bn6Q9NrJ3Djf6A62R93eMNnItpLiimqyUF98pZq80EjeW11L1t69fn117f2Prn148/XVG2+Wg/42rWRuYX5hodaYry00qtZ/GJXDXc5x5wsE8K/Z/wPTYP9v/x/2v8d+/bZvHIovEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAsfXjye/ezhuzxfmTZf9TZdczEXElIi5HxKWI+P0BZuLUgZoXI6JSth80/uRf5vB9JfIK42tOl8e5iFgpj3tPP+xPAQAAAB5f3/7w6WcRM+Nm/ue1aU+Io1T+aHNmUvXyn3yemFS1i3mxvQlVu7RfciIuR8TJ2Z8nVO1KRJw4//GEqv0jMwfizH1RKeLEUc4GAAA4Ggd3AhPbvQEAAPDI+WLaE2A68vu15f/il/eCTxdR3hA8e+AMAAAA+B+qTHsCAAAAwEOX7/89/w8AAAAeb8Xz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD/YuZfcNGI4DsB/oFPoS0UVj6uwqrpkwSF6hC57gPY22XGGSIhzkF2OEEHEjIMyhN2YAZHvkwbbI/jJRmJhmzEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACc00OxnN+t//1vmrPdNZNnNAAAAMApm2I5LyvDqv0l3f+Wbv2IiGlETCJiHBGn5u69+FjLHEVEJ9VPvb846sN9RJmw/0w/XZ8j4le6nr6f+1sAAACA27VezRYRvX21fPl5qPEOpEWbQa68csnnQ660URn2N1Pa+CUyi0lEFMPHTGnTiOh+/Z1arfz+erVi8KroVEW3jV4AAADtqs8Ess3eAAAAuDp/Lt0BLqPcr03/xU97wf2qSBuCn2otAAAA4HodP21/0Gm3HwAAAMAFlPP/N+f/pVUB5/8BAADAbajO/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCcNsVyvl7NFk1ztrtm8owGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAntmfdxQIgTAIg73r+06D9z+WNGhqalIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALz53V/+T0yNM8nca2PpeSRZOzW2To29c+PoD+Pr1wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzP3QmEQBCEwb7zP6fF/MOSBo1BhCpY+JhhHhYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+KLf/fJ/YmqcSeZOG0vHI8naVWPrqrH3oHH0YLz9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GIHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgr7c2+bMBDGcfi1kyhxm4yQ3uJjBhoqBCPwISFZ8gwMwEI0VLQWi8AKIOCgpTMFz9P8fzpdcQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7+n09MZHRGSfj8wjH67+DpeDr8jXTTP4vma2Oe7rn1tOtrtRyt8Y/xcRUUTWwm8AANpX3jfFYlnNO2m7aXtp+2nLaV3NXvloAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzuzcsWpTURgA4JOkiVYnRyuI4KCLjU2sRsjiUOguCLqFNpZiqpJmaEuXPoHo5Oor2E1fwRcQHLTg4NBBwUUQJclNeoJBUoR7Q/0++O/9c4dzz8kQ+O9/bgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgWA73wtlBngshzM0c5V3vv+6ujDu/ffZhbhBf7ry5GI/ZHaIYQni43mpeT3Et025ze+dRo9VqtiUSiWSYZP3LBADASVNMolvXfyruL3ev5eoh/Ho1Wv9fifLwl/r/88vzFwbxc+tdJ75XXP8vpLbC6VfubDwtb27vXFvfaKw115qPq9XK4s3FG7dvVcq9ZyVlT0wAAAD4N6Uk4vo/X/+z/38mysOE9f+9pQf343sV1P9jHTX9sp4JAADA/+3cpe/fcmOu50qlsNXodNoL/ePwc6V/zGCqx3Yqibj+L9SznhUAAACQhsO93Ej/fzXKw4T9//nXuwfxmIUQwmzS/59fedJaTW85Uy2N14mzXiMAAADZmk0i7v8Xe/v/88MtD/kQwtXL/Tz5G8CJ6v+PL+6OvLQe7/+vprfEqZSv9b+P3rkWwkwt6xkBAABwkp1OolvsHxT3l9s/ni+V7P8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDf7NgxSgNBFAbgzW5WKzFgpVZeQLSzClgIYuMhREHwBCKIBxBbS+9g6R1SK9hYWKbwBvJmd1TSBCx2lXwfTN4jDJmXSZN/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgrun+d1/Fy6jpy/a954+rk6gvMzW8369vxop+0OXQ/9Bgr+8JAAAAWARVzvdFUbzVj4dRy3HK/3XeE5n/YaXpc56fzf25Pt29buT8f328dfl10Kg5Jz707PzidKezb/j3rc7dMUw3n569VOkHKY9u1qZ1us/B7WRysJTa5S6mBQB+YzvXtsn/h6Lu9jkYAAtj2K7iR/6vxv3OBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCFzwAAAP//OCtiEg==")
syz_mount_image$exfat(0x0, &(0x7f0000000200)='./file0\x00', 0x2004808, 0x0, 0x0, 0x0, &(0x7f00000001c0))
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

46.260693467s ago: executing program 1 (id=1445):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000015000100fdffffff00000000021800ff", @ANYRES32, @ANYBLOB="050002"], 0x20}}, 0x0)

45.81862205s ago: executing program 1 (id=1448):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1})
r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x135})
io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000001b80)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)

45.68636522s ago: executing program 33 (id=1448):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1})
r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x135})
io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000001b80)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)

42.237579361s ago: executing program 4 (id=1482):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@allocspi={0xf8, 0x16, 0x629, 0x70bd2a, 0x25dfdbff, {{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@local, 0x4e22, 0xd64c, 0x4e23, 0x4, 0x2, 0x20, 0x0, 0x73}, {@in=@loopback, 0x4d2, 0x33}, @in=@remote, {0x401, 0xd, 0x2, 0xffff, 0x4, 0x6, 0x0, 0xfffffffffffffffa}, {0x4554, 0x0, 0xffffffffffffffff, 0x1000}, {0x5, 0x8, 0x3}, 0x70bd2a, 0x0, 0xa, 0x3, 0xdf, 0x14}, 0x1, 0x6}}, 0xf8}}, 0x4040840)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x2, 0x9, 0x6, 0x2, 0x2, 0x0, 0x70bd0b, 0x25dfdbff}, 0x10}}, 0x10)

42.178721731s ago: executing program 4 (id=1483):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10)
socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fbf, @loopback}, 0x1c)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='reno', 0x4)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080)=0x200ffff, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x104)
sendmsg$inet(r2, &(0x7f00000005c0)={&(0x7f0000000300)={0x2, 0x0, @loopback}, 0x10, 0x0, 0xfffffffffffffd7b, &(0x7f0000000380)}, 0x20040084)
mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x200, 0x0)

40.360076491s ago: executing program 4 (id=1487):
r0 = socket$kcm(0xa, 0x2, 0x3a)
setsockopt$sock_attach_bpf(r0, 0x0, 0x61, 0x0, 0x29)

40.257441745s ago: executing program 4 (id=1489):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@fat=@quiet}, {@shortname_winnt}, {@rodir}, {@fat=@discard}, {@fat=@flush}, {@shortname_winnt}, {@numtail}, {@fat=@dmask={'dmask', 0x3d, 0x100}}, {@fat=@tz_utc}, {@uni_xlate}, {@utf8no}, {@shortname_winnt}]}, 0x0, 0x274, &(0x7f0000000a00)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100)

40.197477532s ago: executing program 4 (id=1491):
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x1, {{0xa, 0x4e20, 0x5, @mcast2, 0x6}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000000a004e2000000000ff"], 0x90)

39.117397163s ago: executing program 4 (id=1524):
writev(0xffffffffffffffff, &(0x7f0000001040)=[{&(0x7f0000000000)="007c0985dd164473618115ad53aa95e4485b369705c617b7d4fd56b3ae03c2d640f1f92505b839d4c80dfb539ef3154ecdadb85bb3c60c729434fee5cecc3560af78d0a68443289e9e16e31e82bcfc5db532bad95fde4fc9d4b50a655737af94b6bb0c6c1b25e048fc3b78b8edc23aeca1977266cb11175de87a972eb09524fa2ee5c6d549592272c2d71c574f", 0x8d}], 0x1)
r0 = socket$packet(0x11, 0x2, 0x300)
sendmmsg(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}, {{&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x3, @local}}, 0x80, 0x0}}], 0x2, 0x45)

38.665961691s ago: executing program 34 (id=1524):
writev(0xffffffffffffffff, &(0x7f0000001040)=[{&(0x7f0000000000)="007c0985dd164473618115ad53aa95e4485b369705c617b7d4fd56b3ae03c2d640f1f92505b839d4c80dfb539ef3154ecdadb85bb3c60c729434fee5cecc3560af78d0a68443289e9e16e31e82bcfc5db532bad95fde4fc9d4b50a655737af94b6bb0c6c1b25e048fc3b78b8edc23aeca1977266cb11175de87a972eb09524fa2ee5c6d549592272c2d71c574f", 0x8d}], 0x1)
r0 = socket$packet(0x11, 0x2, 0x300)
sendmmsg(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}, {{&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x3, @local}}, 0x80, 0x0}}], 0x2, 0x45)

4.263799576s ago: executing program 5 (id=1868):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000008701700ff00000000000109022400010000b000090400faff030001000921f6f4000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000340)={0x20, 0x0, 0x21, {0x21, 0x22, "2af155a21de4080010d75e54a3271ac416658fc6eaa643954c165120f06f83"}}, 0x0, 0x0, 0x0}, 0x0)

2.40631397s ago: executing program 5 (id=1886):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func]}}, 0x0, 0x26}, 0x28)

2.228137254s ago: executing program 5 (id=1888):
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000140)={0x77359400}, 0x10)
bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x275a}], 0x1, 0x60010000, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)

2.037327283s ago: executing program 5 (id=1890):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00002d4000/0x1000)=nil, 0x1000, 0x13)

1.577773358s ago: executing program 5 (id=1894):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001400)={0x1c, &(0x7f0000000100)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0})

1.293660075s ago: executing program 3 (id=1897):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='rss_stat\x00', r0}, 0x18)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)

1.213865387s ago: executing program 3 (id=1900):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fec040b92800000008000300", @ANYRES32=r2, @ANYBLOB="10002f80"], 0x2c}, 0x1, 0x0, 0x0, 0x24000050}, 0x2000c0c0)

1.213206401s ago: executing program 3 (id=1903):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f00000003c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000840)={r3, &(0x7f0000000640), 0x0}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000380), 0x8, 0xd3, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)

647.712625ms ago: executing program 2 (id=1910):
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/uts\x00')
ioctl$NS_GET_NSTYPE(r0, 0x8004b708, 0x0)

647.387616ms ago: executing program 2 (id=1911):
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
rseq(&(0x7f0000000040), 0xfffffe4c, 0x1, 0x0)

577.440159ms ago: executing program 2 (id=1912):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x1, 0xfffffffc, 0x6, 0x4, 0x0, "5debca561a5fbf61048955f6f876b2ff"})
r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})

577.095262ms ago: executing program 2 (id=1913):
syz_mount_image$btrfs(&(0x7f0000000280), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000000)={[{@compress_algo={'compress', 0x3d, 'lzo'}}]}, 0x1, 0x55b1, &(0x7f0000005680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8)
ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, 0x0)

267.676783ms ago: executing program 2 (id=1914):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$revoke(0x3, r0)
keyctl$read(0xb, r0, &(0x7f0000000280)=""/171, 0xab)

192.299843ms ago: executing program 3 (id=1915):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70})

65.144465ms ago: executing program 3 (id=1916):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)

5.960715ms ago: executing program 3 (id=1917):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@security={'security\x00', 0x64, 0x4, 0x4f8, 0x100000c, 0xc0, 0xc0, 0xc0, 0xffffffff, 0xffffffff, 0x460, 0x460, 0x460, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @rand_addr=0x64010100, 0xff000000, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00', {}, {}, 0xff, 0x3}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'syz_tun\x00', 'lo\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x2c8, 0x308, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x2, 0x1}}, @common=@unspec=@bpf1={{0x230}, @fd}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x4, 0x6, 0x1, 0x7f, 0x1, 0x40]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x558)

5.682498ms ago: executing program 2 (id=1918):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, r0}, 0x38)

0s ago: executing program 5 (id=1919):
r0 = socket(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000006380)=[{&(0x7f0000000000)="5e546507da93883e8c628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006440)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x2e}}}, @flowinfo={{0x14, 0x29, 0xb, 0x101}}], 0x30}}], 0x2, 0x4046040)

kernel console output (not intermixed with test programs):

06
[  160.384320][ T5918] usb 3-1: USB disconnect, device number 18
[  160.906402][   T24] appletouch 2-1:0.85: Geyser mode initialized.
[  160.914523][   T24] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input13
[  160.967996][ T8880] loop2: detected capacity change from 0 to 512
[  160.997120][ T8880] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  161.033919][ T8880] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  161.068927][ T8880] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.1101: corrupted xattr entries
[  161.075086][ T8880] EXT4-fs (loop2): Remounting filesystem read-only
[  161.078643][ T8880] EXT4-fs (loop2): 1 truncate cleaned up
[  161.082212][ T8880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.108262][ T5815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.127269][   T10] usb 2-1: USB disconnect, device number 22
[  161.154774][   T10] appletouch 2-1:0.85: input: appletouch disconnected
[  161.229121][ T8893] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  161.855643][   T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  162.005769][   T10] usb 3-1: Using ep0 maxpacket: 32
[  162.015070][   T10] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[  162.018402][   T10] usb 3-1: config 0 has no interface number 0
[  162.021535][   T10] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  162.032874][   T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  162.036865][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.040183][   T10] usb 3-1: Product: syz
[  162.041846][   T10] usb 3-1: Manufacturer: syz
[  162.043912][   T10] usb 3-1: SerialNumber: syz
[  162.052487][   T10] usb 3-1: config 0 descriptor??
[  162.055277][ T8903] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  162.119365][ T8921] loop0: detected capacity change from 0 to 4096
[  162.127528][ T8921] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  162.150781][ T8921] ntfs3(loop0): ino=1a, mi_enum_attr
[  162.153056][ T8921] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  162.158121][ T8921] ntfs3(loop0): ino=1a, mi_enum_attr
[  162.160362][ T8921] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[  162.180453][ T8921] ntfs3(loop0): ino=1b, mi_enum_attr
[  162.182457][ T8921] ntfs3(loop0): ino=1b, mi_enum_attr
[  162.269852][ T8903] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  162.475742][ T5811] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  162.785639][ T5860] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  162.879914][   T10] asix 3-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random
[  162.935729][ T5860] usb 1-1: Using ep0 maxpacket: 16
[  162.943087][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.947998][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  162.952020][ T5860] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  162.959340][ T5860] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  162.962445][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.966966][ T5860] usb 1-1: config 0 descriptor??
[  163.080606][   T10] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  163.083668][   T10] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  163.087312][   T10] asix 3-1:0.188: probe with driver asix failed with error -71
[  163.093514][   T10] usb 3-1: USB disconnect, device number 19
[  163.145768][   T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  163.315602][   T24] usb 2-1: Using ep0 maxpacket: 16
[  163.320025][   T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11
[  163.324477][   T24] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  163.329425][   T24] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  163.337302][   T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  163.340852][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  163.343995][   T24] usb 2-1: SerialNumber: syz
[  163.357235][ T8938] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  163.382520][ T5860] shield 0003:0955:7214.0006: unknown main item tag 0x0
[  163.386446][ T5860] shield 0003:0955:7214.0006: unknown main item tag 0x0
[  163.390280][ T5860] shield 0003:0955:7214.0006: unknown main item tag 0x0
[  163.393738][ T5860] shield 0003:0955:7214.0006: unknown main item tag 0x0
[  163.397021][ T5860] shield 0003:0955:7214.0006: unknown main item tag 0x0
[  163.405353][ T5860] input: HID 0955:7214 Haptics as /devices/virtual/input/input14
[  163.455600][ T5860] shield 0003:0955:7214.0006: Registered Thunderstrike controller
[  163.459350][ T5860] shield 0003:0955:7214.0006: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0
[  163.572097][   T24] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[  163.579991][   T24] usb 2-1: USB disconnect, device number 23
[  163.590528][ T8932] netlink: 'syz.0.1123': attribute type 2 has an invalid length.
[  163.593845][ T8932] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1123'.
[  163.602064][   T10] usb 1-1: USB disconnect, device number 20
[  163.604536][ T5918] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  163.616892][ T5918] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  163.626314][ T5918] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  163.631495][ T5918] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  163.705317][ T8940] loop2: detected capacity change from 0 to 4096
[  163.709939][ T8940] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  163.720874][ T8940] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  163.724222][ T8940] ntfs3(loop2): mft corrupted
[  163.726074][ T8940] ntfs3(loop2): Failed to load $Extend (-22).
[  163.728066][ T8940] ntfs3(loop2): Failed to initialize $Extend.
[  163.840745][ T8946] loop2: detected capacity change from 0 to 128
[  163.871458][ T8946] syz.2.1130: attempt to access beyond end of device
[  163.871458][ T8946] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128
[  163.878663][ T8946] Buffer I/O error on dev loop2, logical block 69, lost async page write
[  163.900469][ T8946] syz.2.1130: attempt to access beyond end of device
[  163.900469][ T8946] loop2: rw=2049, sector=140, nr_sectors = 2 limit=128
[  163.906271][ T8946] Buffer I/O error on dev loop2, logical block 70, lost async page write
[  163.915010][ T8946] syz.2.1130: attempt to access beyond end of device
[  163.915010][ T8946] loop2: rw=2049, sector=142, nr_sectors = 2 limit=128
[  163.921389][ T8946] Buffer I/O error on dev loop2, logical block 71, lost async page write
[  163.924766][ T8946] syz.2.1130: attempt to access beyond end of device
[  163.924766][ T8946] loop2: rw=2049, sector=144, nr_sectors = 2 limit=128
[  163.931509][ T8946] Buffer I/O error on dev loop2, logical block 72, lost async page write
[  163.935781][ T8946] syz.2.1130: attempt to access beyond end of device
[  163.935781][ T8946] loop2: rw=2049, sector=146, nr_sectors = 104 limit=128
[  164.110002][ T8950] loop1: detected capacity change from 0 to 128
[  164.144383][ T8953] netlink: 'syz.2.1133': attribute type 2 has an invalid length.
[  164.154851][ T8950] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  164.179525][ T8950] ext4 filesystem being mounted at /285/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  164.307504][ T6422] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  165.333410][ T8984] loop0: detected capacity change from 0 to 16
[  165.351282][ T8984] erofs (device loop0): mounted with root inode @ nid 36.
[  165.905768][   T33] usb 1-1: new full-speed USB device number 21 using dummy_hcd
[  166.031877][ T9014] loop2: detected capacity change from 0 to 40427
[  166.046582][ T9014] F2FS-fs (loop2): invalid crc value
[  166.080292][   T33] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  166.092428][   T33] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[  166.097308][ T9014] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  166.098502][   T33] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  166.100740][ T9014] F2FS-fs (loop2): Start checkpoint disabled!
[  166.103418][   T33] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  166.118516][ T9014] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[  166.118610][   T33] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  166.124465][ T9014] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  166.124517][   T33] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.124529][   T33] usb 1-1: Product: syz
[  166.131862][ T9023] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1165'.
[  166.133802][   T33] usb 1-1: Manufacturer: syz
[  166.137330][   T33] usb 1-1: SerialNumber: syz
[  166.141078][   T33] usb 1-1: config 0 descriptor??
[  166.147037][   T33] xbox_remote_probe: Unexpected endpoint_in
[  166.181971][ T1091] kworker/u10:4: attempt to access beyond end of device
[  166.181971][ T1091] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  166.190746][ T1091] CPU: 1 UID: 0 PID: 1091 Comm: kworker/u10:4 Not tainted syzkaller #0 PREEMPT(full) 
[  166.190760][ T1091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  166.190765][ T1091] Workqueue: writeback wb_workfn (flush-7:2)
[  166.190780][ T1091] Call Trace:
[  166.190783][ T1091]  <TASK>
[  166.190787][ T1091]  dump_stack_lvl+0x189/0x250
[  166.190799][ T1091]  ? __pfx_dump_stack_lvl+0x10/0x10
[  166.190809][ T1091]  ? __pfx_queue_work_on+0x10/0x10
[  166.190816][ T1091]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  166.190827][ T1091]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  166.190840][ T1091]  f2fs_handle_critical_error+0x37c/0x540
[  166.190854][ T1091]  f2fs_write_end_io+0x886/0xb60
[  166.190869][ T1091]  __submit_merged_bio+0x27a/0x6a0
[  166.190881][ T1091]  __submit_merged_write_cond+0x255/0x530
[  166.190894][ T1091]  f2fs_write_data_pages+0x261d/0x3000
[  166.190932][ T1091]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  166.190945][ T1091]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  166.190966][ T1091]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  166.190977][ T1091]  ? trace_f2fs_writepages+0x7f/0x200
[  166.190988][ T1091]  ? f2fs_write_node_pages+0x478/0x6e0
[  166.191000][ T1091]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  166.191011][ T1091]  ? __lock_acquire+0xab9/0xd20
[  166.191021][ T1091]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  166.191028][ T1091]  do_writepages+0x32e/0x550
[  166.191039][ T1091]  ? reacquire_held_locks+0x127/0x1d0
[  166.191047][ T1091]  ? writeback_sb_inodes+0x384/0x1010
[  166.191060][ T1091]  __writeback_single_inode+0x145/0xff0
[  166.191070][ T1091]  ? do_raw_spin_unlock+0x4d/0x240
[  166.191081][ T1091]  writeback_sb_inodes+0x6c7/0x1010
[  166.191100][ T1091]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  166.191128][ T1091]  ? rcu_is_watching+0x15/0xb0
[  166.191140][ T1091]  wb_writeback+0x43b/0xaf0
[  166.191152][ T1091]  ? queue_io+0x341/0x590
[  166.191163][ T1091]  ? __pfx_wb_writeback+0x10/0x10
[  166.191176][ T1091]  ? _raw_spin_unlock_irq+0x23/0x50
[  166.191187][ T1091]  wb_workfn+0x409/0xef0
[  166.191201][ T1091]  ? __pfx_wb_workfn+0x10/0x10
[  166.191211][ T1091]  ? __lock_acquire+0xab9/0xd20
[  166.191221][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[  166.191231][ T1091]  ? _raw_spin_unlock_irq+0x23/0x50
[  166.191240][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[  166.191246][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[  166.191272][ T1091]  process_scheduled_works+0xae1/0x17b0
[  166.191291][ T1091]  ? __pfx_process_scheduled_works+0x10/0x10
[  166.191305][ T1091]  worker_thread+0x8a0/0xda0
[  166.191322][ T1091]  kthread+0x711/0x8a0
[  166.191333][ T1091]  ? __pfx_worker_thread+0x10/0x10
[  166.191340][ T1091]  ? __pfx_kthread+0x10/0x10
[  166.191349][ T1091]  ? _raw_spin_unlock_irq+0x23/0x50
[  166.191358][ T1091]  ? lockdep_hardirqs_on+0x9c/0x150
[  166.191367][ T1091]  ? __pfx_kthread+0x10/0x10
[  166.191381][ T1091]  ret_from_fork+0x4bc/0x870
[  166.191390][ T1091]  ? __pfx_ret_from_fork+0x10/0x10
[  166.191400][ T1091]  ? __switch_to_asm+0x39/0x70
[  166.191405][ T1091]  ? __switch_to_asm+0x33/0x70
[  166.191410][ T1091]  ? __pfx_kthread+0x10/0x10
[  166.191419][ T1091]  ret_from_fork_asm+0x1a/0x30
[  166.191432][ T1091]  </TASK>
[  166.191649][ T1091] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  166.364991][ T9028] loop1: detected capacity change from 0 to 2048
[  166.365212][   T33] usb 1-1: USB disconnect, device number 21
[  166.377622][ T9028] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051
[  166.391445][ T9028] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932307, location=3932307
[  166.395789][ T9028] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  166.400371][ T9028] UDF-fs: Scanning with blocksize 512 failed
[  166.407555][ T9028] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051
[  166.413056][ T9028] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932307, location=3932307
[  166.419013][ T9028] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  166.421868][ T9028] UDF-fs: Scanning with blocksize 1024 failed
[  166.424575][ T9028] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051
[  166.430217][ T9028] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932307, location=3932307
[  166.434373][ T9028] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  166.437226][ T9028] UDF-fs: Scanning with blocksize 2048 failed
[  166.441209][ T9028] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051
[  166.444589][ T9028] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932307, location=3932307
[  166.448452][ T9028] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  166.454401][ T9028] UDF-fs: Scanning with blocksize 4096 failed
[  166.457237][ T9028] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1)
[  166.810017][ T9038] loop2: detected capacity change from 0 to 32768
[  166.825264][ T9038] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  166.855848][   T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  166.869262][ T9038] XFS (loop2): Ending clean mount
[  166.898442][ T5815] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  167.029380][   T24] usb 2-1: config 0 has an invalid interface number: 216 but max is 0
[  167.032071][   T24] usb 2-1: config 0 has no interface number 0
[  167.034174][   T24] usb 2-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64
[  167.038668][   T24] usb 2-1: config 0 interface 216 has no altsetting 0
[  167.040786][   T24] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e
[  167.043851][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.056154][   T24] usb 2-1: config 0 descriptor??
[  167.062903][ T9032] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  167.066484][   T24] usb 2-1: NFC: intf ffff88816a2c9000 id ffffffff8e909e40
[  167.237570][ T9056] tmpfs: Bad value for 'mpol'
[  167.268817][   T10] usb 2-1: USB disconnect, device number 24
[  167.297851][ T9058] loop2: detected capacity change from 0 to 128
[  167.328499][ T9058] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  167.339741][ T9058] ext4 filesystem being mounted at /415/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  167.424365][ T5815] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  167.644613][ T9067] loop2: detected capacity change from 0 to 2048
[  167.672476][ T9068] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  167.695380][ T9068] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  167.704071][ T9068] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[  167.713790][ T9068] Remounting filesystem read-only
[  167.726625][ T5815] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  167.824750][ T9073] loop2: detected capacity change from 0 to 2048
[  167.834523][ T9073] EXT4-fs (loop2): Test dummy encryption mode enabled
[  167.847575][ T9075] loop1: detected capacity change from 0 to 2048
[  167.854552][ T9075] EXT4-fs: Ignoring removed bh option
[  167.859243][ T9073] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.893254][ T9075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.913377][ T5815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.967841][ T6422] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.066604][ T9086] tipc: Started in network mode
[  168.069082][ T9086] tipc: Node identity ac14140f, cluster identity 4711
[  168.073787][ T9086] tipc: New replicast peer: 255.255.255.255
[  168.085183][ T9086] tipc: Enabled bearer <udp:syz2>, priority 10
[  168.088911][ T9086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1187'.
[  168.611801][ T9101] loop1: detected capacity change from 0 to 512
[  168.663019][ T9101] EXT4-fs (loop1): 1 orphan inode deleted
[  168.667838][ T9101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.673194][ T9101] ext4 filesystem being mounted at /302/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.977504][ T9101] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x0000601b, b_size=4096, device loop1 blocksize: 4096
[  168.982145][ T9101] grow_buffers: requested out-of-range block 144115188075855872 for device loop1
[  168.985369][ T9101] EXT4-fs warning (device loop1): ext4_resize_fs:2019: can't read last block, resize aborted
[  169.021072][ T6422] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.085941][ T5918] tipc: Node number set to 2886997007
[  169.625730][   T33] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  169.735912][ T5918] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  169.755677][  T975] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  169.787246][   T33] usb 2-1: config 0 has an invalid interface number: 183 but max is 0
[  169.790651][   T33] usb 2-1: config 0 has no interface number 0
[  169.793045][   T33] usb 2-1: config 0 interface 183 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023
[  169.797830][   T33] usb 2-1: config 0 interface 183 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  169.802396][   T33] usb 2-1: config 0 interface 183 altsetting 0 has an endpoint descriptor with address 0xC7, changing to 0x87
[  169.807534][   T33] usb 2-1: config 0 interface 183 altsetting 0 endpoint 0x87 has an invalid bInterval 250, changing to 11
[  169.811974][   T33] usb 2-1: config 0 interface 183 altsetting 0 endpoint 0x87 has invalid maxpacket 33871, setting to 1024
[  169.817439][   T33] usb 2-1: config 0 interface 183 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  169.822360][   T33] usb 2-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=45.20
[  169.826179][   T33] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.831220][   T33] usb 2-1: config 0 descriptor??
[  169.836242][ T9129] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  169.839303][ T9129] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  169.905733][ T5918] usb 3-1: Using ep0 maxpacket: 16
[  169.907169][  T975] usb 1-1: config 3 has an invalid interface number: 71 but max is 0
[  169.910395][  T975] usb 1-1: config 3 has no interface number 0
[  169.912867][  T975] usb 1-1: config 3 interface 71 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  169.913364][ T5918] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  169.917356][  T975] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice=a7.ac
[  169.921989][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  169.923817][  T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.931427][ T5918] usb 3-1: Product: syz
[  169.932367][  T975] ati_remote 1-1:3.71: ati_remote_probe: Unexpected endpoint_in
[  169.933198][ T5918] usb 3-1: Manufacturer: syz
[  169.938377][ T5918] usb 3-1: SerialNumber: syz
[  169.946867][ T5918] usb 3-1: config 0 descriptor??
[  170.047446][   T33] radio-si470x 2-1:0.183: si470x_get_report: usb_control_msg returned -71
[  170.051662][   T33] radio-si470x 2-1:0.183: probe with driver radio-si470x failed with error -5
[  170.058685][   T33] usb 2-1: USB disconnect, device number 25
[  170.137675][ T5918] usb 1-1: USB disconnect, device number 22
[  170.170772][  T975] usb 3-1: USB disconnect, device number 20
[  170.677783][ T9141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1210'.
[  170.824410][ T9149] loop1: detected capacity change from 0 to 1024
[  170.844341][ T9149] ext4: Unknown parameter 'obj_user'
[  170.851399][ T9152] netlink: 'syz.2.1214': attribute type 1 has an invalid length.
[  170.856198][ T5811] Bluetooth: hci0: unexpected event for opcode 0x2060
[  170.871001][ T9155] netlink: 'syz.0.1215': attribute type 1 has an invalid length.
[  170.873491][ T9155] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1215'.
[  170.904906][ T9152] 8021q: adding VLAN 0 to HW filter on device bond2
[  170.951072][ T9152] bond2: (slave veth3): Enslaving as an active interface with a down link
[  170.969578][ T9152] bond2: (slave veth0_to_bond): making interface the new active one
[  170.973942][ T9152] veth0_to_bond: entered promiscuous mode
[  170.978042][ T9152] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  170.998332][ T9152] bond2: entered promiscuous mode
[  171.000645][ T9152] bond2: entered allmulticast mode
[  171.002866][ T9152] veth0_to_bond: entered allmulticast mode
[  171.034252][ T9161] loop0: detected capacity change from 0 to 4096
[  171.040214][ T9161] ntfs3(loop0): ino=3, Correct links count -> 2.
[  171.104189][   T34] audit: type=1800 audit(1764022550.147:23): pid=9161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1218" name="file1" dev="loop0" ino=33 res=0 errno=0
[  171.219794][ T9169] loop2: detected capacity change from 0 to 2048
[  171.237790][ T9169] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.241716][ T9169] ext4 filesystem being mounted at /433/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.286249][ T9177] pimreg: tun_chr_ioctl cmd 2147767506
[  171.301988][ T5815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.602265][ T9147] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  171.853992][ T9186] netlink: 'syz.2.1228': attribute type 2 has an invalid length.
[  172.573995][ T9194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1230'.
[  172.598167][ T9194] input: syz1 as /devices/virtual/input/input16
[  173.107294][ T9199] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1233'.
[  173.269557][ T9209] loop1: detected capacity change from 0 to 764
[  173.353096][ T9215] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  173.502555][ T9229] loop0: detected capacity change from 0 to 2048
[  173.503109][ T9231] ieee802154 phy0 wpan0: encryption failed: -22
[  173.568726][ T9229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  173.603297][ T5813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.648624][ T9242] loop0: detected capacity change from 0 to 8
[  173.653445][ T9242] SQUASHFS error: lzo decompression failed, data probably corrupt
[  173.658878][ T9242] SQUASHFS error: Failed to read block 0x91: -5
[  173.676139][ T9242] SQUASHFS error: Unable to read metadata cache entry [8f]
[  173.678972][ T9242] SQUASHFS error: Unable to read inode 0x11f
[  173.716071][   T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  173.880431][   T24] usb 3-1: Using ep0 maxpacket: 16
[  173.885377][   T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  173.893113][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  173.901304][   T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  173.904316][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.907391][   T24] usb 3-1: Product: syz
[  173.909205][   T24] usb 3-1: Manufacturer: syz
[  173.910813][   T24] usb 3-1: SerialNumber: syz
[  173.930092][   T24] usb 3-1: config 0 descriptor??
[  173.946164][   T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  173.947314][   T24] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  173.953161][   T24] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  174.095996][   T10] usb 2-1: Using ep0 maxpacket: 32
[  174.101815][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  174.106775][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  174.110440][   T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  174.113608][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.125643][   T10] usb 2-1: config 0 descriptor??
[  174.578264][   T24] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  174.582567][   T10] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[  174.589242][   T24] em28xx 3-1:0.0: Config register raw data: 0x13
[  174.795367][   T24] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[  174.798559][   T24] em28xx 3-1:0.0: No AC97 audio processor
[  174.821186][   T24] usb 3-1: USB disconnect, device number 21
[  174.827767][   T24] em28xx 3-1:0.0: Disconnecting em28xx
[  174.834794][   T10] usb 2-1: USB disconnect, device number 26
[  174.860242][ T5816] udevd[5816]: setting owner of /dev/media28 to uid=0, gid=28 failed: No such file or directory
[  174.861425][   T24] em28xx 3-1:0.0: Freeing device
[  175.603990][ T9276] ieee802154 phy0 wpan0: encryption failed: -22
[  176.052259][ T9312] loop0: detected capacity change from 0 to 512
[  176.102525][ T9312] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.109668][ T9312] ext4 filesystem being mounted at /439/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  176.139851][ T9312] EXT4-fs (loop0): shut down requested (2)
[  176.163733][ T5813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.515992][  T975] usb 1-1: new low-speed USB device number 23 using dummy_hcd
[  176.659172][ T9331] ref_ctr increment failed for inode: 0x6cd offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888169efa040
[  176.688163][  T975] usb 1-1: unable to get BOS descriptor or descriptor too short
[  176.701713][  T975] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  176.709715][  T975] usb 1-1: string descriptor 0 read error: -22
[  176.712554][  T975] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0
[  176.724422][  T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.954811][  T975] usb 1-1: USB disconnect, device number 23
[  177.689455][  T975] kernel write not supported for file /sequencer (pid: 975 comm: kworker/0:2)
[  177.778722][ T9346] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  178.106720][  T975] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  178.289490][  T975] usb 2-1: config 0 interface 0 has no altsetting 0
[  178.291640][  T975] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  178.294835][  T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.309083][  T975] usb 2-1: config 0 descriptor??
[  178.535922][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1300'.
[  178.908837][ T9363] loop0: detected capacity change from 0 to 4096
[  178.927921][  T975] video4linux radio48: keene_cmd_set failed (-71)
[  178.932472][  T975] radio-keene 2-1:0.0: V4L2 device registered as radio48
[  178.939821][  T975] usb 2-1: USB disconnect, device number 27
[  178.957586][   T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  179.100611][ T9367] loop0: detected capacity change from 0 to 4096
[  179.135759][   T10] usb 3-1: Using ep0 maxpacket: 32
[  179.142735][   T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  179.153551][   T10] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  179.159392][   T10] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  179.164191][   T10] usb 3-1: Product: syz
[  179.166523][   T10] usb 3-1: Manufacturer: syz
[  179.168459][   T10] usb 3-1: SerialNumber: syz
[  179.172512][   T10] usb 3-1: config 0 descriptor??
[  179.176717][ T9359] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  179.182818][   T10] hub 3-1:0.0: bad descriptor, ignoring hub
[  179.189712][   T10] hub 3-1:0.0: probe with driver hub failed with error -5
[  179.207665][ T9370] loop0: detected capacity change from 0 to 8192
[  179.257844][ T5816]  loop0: AHDI p1 p2
[  179.259756][ T5816] loop0: p1 size 65535 extends beyond EOD, truncated
[  179.268025][ T9370]  loop0: AHDI p1 p2
[  179.269950][ T9370] loop0: p1 size 65535 extends beyond EOD, truncated
[  179.351211][ T7830] udevd[7830]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  179.363561][ T7830] udevd[7830]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  179.586740][ T9392] tmpfs: Bad value for 'mpol'
[  180.012158][ T9419] loop1: detected capacity change from 0 to 512
[  180.020896][ T9419] EXT4-fs (loop1): orphan cleanup on readonly fs
[  180.027626][ T9419] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.1334: ea_inode with extended attributes
[  180.034970][ T9419] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1334: error while reading EA inode 11 err=-117
[  180.039341][ T9419] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  180.043238][ T9419] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.1334: ea_inode with extended attributes
[  180.048035][ T9419] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1334: error while reading EA inode 11 err=-117
[  180.054091][ T9419] EXT4-fs (loop1): 1 orphan inode deleted
[  180.058058][ T9419] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  180.081166][ T6422] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.097294][ T9422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1335'.
[  180.465794][   T10] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  180.629971][   T10] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  180.633794][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.637792][   T10] usb 1-1: Product: syz
[  180.639728][   T10] usb 1-1: Manufacturer: syz
[  180.641988][   T10] usb 1-1: SerialNumber: syz
[  180.646947][   T10] usb 1-1: config 0 descriptor??
[  180.651885][   T10] gspca_main: sq930x-2.14.0 probing 2770:930c
[  181.054148][   T10] gspca_sq930x: ucbus_write failed -71
[  181.275553][   T10] gspca_sq930x: Sensor ov9630 not yet treated
[  181.277980][   T10] sq930x 1-1:0.0: probe with driver sq930x failed with error -22
[  181.282074][   T10] usb 1-1: USB disconnect, device number 24
[  181.662472][ T9433] loop0: detected capacity change from 0 to 8192
[  181.667941][ T9433] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  181.678949][ T5202] Bluetooth: hci1: command 0x0406 tx timeout
[  181.685247][ T9433] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 1046)
[  181.689672][ T9433] FAT-fs (loop0): Filesystem has been set read-only
[  181.707541][ T5813] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 1046)
[  181.980884][ T9451] loop0: detected capacity change from 0 to 1024
[  181.998872][ T9451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  182.003437][ T9451] ext4 filesystem being mounted at /472/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.018948][ T9451] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.1348: lblock 0 mapped to illegal pblock 0 (length 6)
[  182.028433][ T9451] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  182.032342][ T9451] EXT4-fs (loop0): This should not happen!! Data will be lost
[  182.032342][ T9451] 
[  182.700355][   T33] usb 3-1: USB disconnect, device number 22
[  182.936259][ T9459] Invalid option length (1048467) for dns_resolver key
[  183.107632][ T9466] loop1: detected capacity change from 0 to 128
[  183.113361][ T9466] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  183.123260][ T9466] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  183.379622][ T9470] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1351'.
[  183.548122][   T27] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 8: comm kworker/u10:0: lblock 8 mapped to illegal pblock 8 (length 8)
[  183.588714][   T27] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  183.593298][   T27] EXT4-fs (loop0): This should not happen!! Data will be lost
[  183.593298][   T27] 
[  183.603210][ T5813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  183.888718][ T9488] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0
[  183.930666][ T9489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1362'.
[  184.158020][ T9495] loop1: detected capacity change from 0 to 1024
[  184.188794][ T9495] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  184.208495][ T9495] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869)
[  184.250936][ T9495] EXT4-fs (loop1): journal inode is deleted
[  184.501923][ T9501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1368'.
[  185.078584][ T9519] loop2: detected capacity change from 0 to 24
[  185.084144][ T9519] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  185.095105][ T9519] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  185.112775][ T9519] VFS: Lookup of 'file0' in romfs loop2 would have caused loop
[  185.172172][ T9521] input: syz0 as /devices/virtual/input/input17
[  185.354452][ T9527] loop0: detected capacity change from 0 to 512
[  185.585355][ T9541] program syz.0.1387 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  185.607266][   T33] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  185.676665][ T9535] loop1: detected capacity change from 0 to 32768
[  185.681102][ T9535] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1384 (9535)
[  185.690185][ T9535] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  185.694112][ T9535] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  185.716624][ T9535] BTRFS info (device loop1): enabling ssd optimizations
[  185.719783][ T9535] BTRFS info (device loop1): turning on async discard
[  185.722234][ T9535] BTRFS info (device loop1): enabling free space tree
[  185.738449][ T6422] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  185.768632][   T33] usb 3-1: Using ep0 maxpacket: 8
[  185.789075][   T33] usb 3-1: config 1 interface 0 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 64
[  185.792740][   T33] usb 3-1: config 1 interface 0 has no altsetting 0
[  185.821023][   T33] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  185.824322][   T33] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.833942][   T33] usb 3-1: Product: syz
[  185.842661][   T33] usb 3-1: Manufacturer: syz
[  185.844827][   T33] usb 3-1: SerialNumber: syz
[  185.862185][ T9528] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  186.113877][   T33] usb 3-1: USB disconnect, device number 23
[  186.194384][ T9570] loop1: detected capacity change from 0 to 65536
[  186.238855][ T9570] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  186.250637][ T9570] XFS (loop1): Ending clean mount
[  186.276033][ T6422] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  186.490354][ T9582] loop0: detected capacity change from 0 to 256
[  186.514968][ T9582] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd22393c8, utbl_chksum : 0xe619d30d)
[  186.576793][ T9582] loop0: detected capacity change from 256 to 0
[  186.628666][ T5813] Buffer I/O error on dev loop0, logical block 0, lost sync page write
[  186.708392][ T9588] loop2: detected capacity change from 0 to 512
[  186.779614][  T975] usb 2-1: new full-speed USB device number 28 using dummy_hcd
[  186.891563][ T9592] loop2: detected capacity change from 0 to 512
[  186.927873][  T975] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  186.944184][  T975] usb 2-1: config 0 interface 0 has no altsetting 0
[  186.956998][  T975] usb 2-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00
[  186.958569][ T9592] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  186.974333][  T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.989034][  T975] usb 2-1: config 0 descriptor??
[  186.992309][ T9586] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  187.233928][ T5202] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  187.240943][ T5202] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  187.245181][ T5202] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  187.248469][ T5202] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  187.251378][ T5202] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  187.414965][ T9597] chnl_net:caif_netlink_parms(): no params data found
[  187.427990][  T975] uclogic 0003:28BD:0078.0008: interface is invalid, ignoring
[  187.504525][ T9597] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.507479][ T9597] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.509826][ T9597] bridge_slave_0: entered allmulticast mode
[  187.512842][ T9597] bridge_slave_0: entered promiscuous mode
[  187.518420][ T9597] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.521443][ T9597] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.524563][ T9597] bridge_slave_1: entered allmulticast mode
[  187.529403][ T9597] bridge_slave_1: entered promiscuous mode
[  187.553961][ T9597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  187.558850][ T9597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.588994][ T9597] team0: Port device team_slave_0 added
[  187.592835][ T9597] team0: Port device team_slave_1 added
[  187.624178][ T5918] usb 2-1: USB disconnect, device number 28
[  187.648854][ T9597] batman_adv: batadv0: Adding interface: batadv_slave_0
[  187.658757][ T9597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  187.683360][ T9597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  187.688765][ T9597] batman_adv: batadv0: Adding interface: batadv_slave_1
[  187.691334][ T9597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  187.713745][ T9597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  187.724044][ T9611] loop2: detected capacity change from 0 to 1024
[  187.727611][ T9611] hfsplus: unable to find HFS+ superblock
[  187.740478][ T9611] openvswitch: netlink: nsh attr 12948 is out of range max 3
[  187.743125][ T9611] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.807642][ T9597] hsr_slave_0: entered promiscuous mode
[  187.811135][ T9597] hsr_slave_1: entered promiscuous mode
[  187.817284][ T9597] debugfs: 'hsr0' already exists in 'hsr'
[  187.820224][ T9597] Cannot create hsr debugfs directory
[  187.857558][ T9615] loop2: detected capacity change from 0 to 512
[  187.867050][ T9615] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  187.899173][ T9615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  187.903971][ T9615] ext4 filesystem being mounted at /474/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  187.965328][ T5815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  188.066142][ T9620] vivid-004: disconnect
[  188.068844][ T9619] vivid-004: reconnect
[  188.098739][ T9597] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  188.107100][ T9597] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  188.111790][ T9597] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  188.119240][ T9597] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  188.198625][ T9633] loop1: detected capacity change from 0 to 16
[  188.212634][ T9633] erofs (device loop1): mounted with root inode @ nid 36.
[  188.214464][ T9597] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.226933][ T9633] erofs (device loop1): invalid de[0].nameoff 0 @ nid 36
[  188.240977][ T9597] 8021q: adding VLAN 0 to HW filter on device team0
[  188.248754][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.251452][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  188.263503][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.266142][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  188.307230][ T9636] loop1: detected capacity change from 0 to 1024
[  188.322285][ T9636] EXT4-fs: Ignoring removed nobh option
[  188.327575][ T9634] loop2: detected capacity change from 0 to 8192
[  188.330498][ T9636] EXT4-fs: Ignoring removed orlov option
[  188.360877][ T9636] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  188.379979][ T9636] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 12. Delete some EAs or run e2fsck.
[  188.427663][ T6422] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.462220][ T9597] 8021q: adding VLAN 0 to HW filter on device batadv0
[  188.531814][ T9597] veth0_vlan: entered promiscuous mode
[  188.550865][ T9597] veth1_vlan: entered promiscuous mode
[  188.616459][ T9597] veth0_macvtap: entered promiscuous mode
[  188.628604][ T9597] veth1_macvtap: entered promiscuous mode
[  188.657362][ T9597] batman_adv: batadv0: Interface activated: batadv_slave_0
[  188.671746][ T9597] batman_adv: batadv0: Interface activated: batadv_slave_1
[  188.694723][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.700767][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.709859][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.740159][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.761582][ T9653] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1419'.
[  188.765079][ T9653] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1419'.
[  188.945945][ T6975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.950065][ T6975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.039728][ T6975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.042262][ T6975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.277303][ T5202] Bluetooth: hci1: command tx timeout
[  189.368292][ T9664] loop3: detected capacity change from 0 to 512
[  189.383768][ T9664] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  189.398778][ T9664] EXT4-fs (loop3): 1 truncate cleaned up
[  189.406431][   T24] usb 2-1: new full-speed USB device number 29 using dummy_hcd
[  189.406626][ T9664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.500804][ T9597] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.570703][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  189.577511][   T24] usb 2-1: not running at top speed; connect to a high speed hub
[  189.581730][ T9667] loop3: detected capacity change from 0 to 512
[  189.582196][   T24] usb 2-1: config 9 has an invalid interface number: 207 but max is 0
[  189.588795][   T24] usb 2-1: config 9 has no interface number 0
[  189.590798][   T24] usb 2-1: config 9 interface 207 has no altsetting 0
[  189.604717][   T24] usb 2-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a
[  189.604944][ T9667] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  189.610260][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.615279][   T24] usb 2-1: Product: syz
[  189.617978][   T24] usb 2-1: Manufacturer: syz
[  189.619920][   T24] usb 2-1: SerialNumber: syz
[  189.625670][ T9667] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  189.650358][ T9667] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[  189.654315][ T9667] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  189.658613][ T9667] System zones: 0-2, 18-18, 34-34
[  189.662872][ T9667] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1424: iget: bad i_size value: 360287970189639680
[  189.671157][ T9667] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1424: couldn't read orphan inode 15 (err -117)
[  189.681429][ T9667] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  189.774560][ T9597] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.932247][   T24] usb 2-1: USB disconnect, device number 29
[  190.667584][ T9681] loop1: detected capacity change from 0 to 512
[  190.670101][ T9681] EXT4-fs: Ignoring removed nomblk_io_submit option
[  190.672552][ T9681] EXT4-fs: Ignoring removed nomblk_io_submit option
[  190.680563][ T9681] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  190.690088][ T9681] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  190.693340][ T9681] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  190.704813][ T9681] EXT4-fs (loop1): 1 truncate cleaned up
[  190.718020][ T9681] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.729964][ T9681] EXT4-fs (loop1): shut down requested (1)
[  190.752047][ T6422] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.841946][ T9690] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1433'.
[  190.883880][ T9692] loop2: detected capacity change from 0 to 512
[  190.948824][ T9694] loop2: detected capacity change from 0 to 4096
[  191.036013][ T5280] usb 2-1: new full-speed USB device number 30 using dummy_hcd
[  191.187325][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  191.191428][ T5280] usb 2-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[  191.195032][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.206178][ T5280] usb 2-1: config 0 descriptor??
[  191.266298][ T5918] usb 3-1: new full-speed USB device number 24 using dummy_hcd
[  191.355918][ T5202] Bluetooth: hci1: command tx timeout
[  191.419590][ T5918] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  191.428088][ T5918] usb 3-1: config 7 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  191.439138][ T5918] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  191.442486][ T5918] usb 3-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0
[  191.447641][ T5918] usb 3-1: Manufacturer: syz
[  191.629545][ T5280] lenovo 0003:17EF:6067.0009: unknown main item tag 0x0
[  191.637978][ T5280] lenovo 0003:17EF:6067.0009: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.1-1/input0
[  191.658341][ T5918] usb 3-1: USB disconnect, device number 24
[  191.695845][   T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  191.833067][ T5280] usb 2-1: USB disconnect, device number 30
[  191.847147][   T10] usb 4-1: Using ep0 maxpacket: 16
[  191.853076][   T10] usb 4-1: config 0 has an invalid interface number: 57 but max is 0
[  191.857486][   T10] usb 4-1: config 0 has no interface number 0
[  191.861664][   T10] usb 4-1: config 0 interface 57 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  191.866753][   T10] usb 4-1: config 0 interface 57 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  191.871269][   T10] usb 4-1: config 0 interface 57 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024
[  191.875795][   T10] usb 4-1: config 0 interface 57 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024
[  191.880932][   T10] usb 4-1: config 0 interface 57 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  191.890282][   T10] usb 4-1: New USB device found, idVendor=13d3, idProduct=3327, bcdDevice= c.71
[  191.893598][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.897436][   T10] usb 4-1: Product: syz
[  191.899164][   T10] usb 4-1: Manufacturer: syz
[  191.901270][   T10] usb 4-1: SerialNumber: syz
[  191.905813][   T10] usb 4-1: config 0 descriptor??
[  191.909460][ T9698] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  191.914509][   T10] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones
[  192.123733][  T975] usb 4-1: USB disconnect, device number 2
[  192.485606][   T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  192.915601][ T5918] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  193.069223][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  193.073191][ T5918] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  193.077867][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.084459][ T5918] usb 4-1: config 0 descriptor??
[  193.145773][ T9712] loop1: detected capacity change from 0 to 131072
[  193.150881][ T9712] F2FS-fs (loop1): Test dummy encryption mode enabled
[  193.156161][ T9712] F2FS-fs (loop1): invalid crc value
[  193.195619][ T9712] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  193.200656][   T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  193.205269][ T9712] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  193.208563][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  193.211931][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  193.215752][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  193.220627][   T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  193.227542][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.239939][   T10] usb 3-1: config 0 descriptor??
[  193.280789][ T9712] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  193.302826][ T5918] usb 4-1: USB disconnect, device number 3
[  193.410905][ T9712] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  193.436992][ T5202] Bluetooth: hci1: command tx timeout
[  193.475332][ T6422] F2FS-fs (loop1): f2fs_fill_dentries: corrupted namelen=1025, run fsck to fix.
[  193.668602][   T10] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  194.131609][ T9736] loop3: detected capacity change from 0 to 128
[  194.137991][ T9736] FAT-fs (loop3): invalid media value (0x01)
[  194.142883][ T9736] FAT-fs (loop3): Can't find a valid FAT filesystem
[  194.196998][ T5811] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  194.203600][ T5811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  194.208647][ T5811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  194.213167][ T5811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  194.218172][ T5811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  194.265925][ T9742] loop3: detected capacity change from 0 to 16
[  194.274654][ T9742] erofs (device loop3): mounted with root inode @ nid 36.
[  194.470101][ T9737] chnl_net:caif_netlink_parms(): no params data found
[  194.738351][ T9737] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.740945][ T9737] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.744529][ T9737] bridge_slave_0: entered allmulticast mode
[  194.750766][ T9737] bridge_slave_0: entered promiscuous mode
[  194.760403][ T9737] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.763868][ T9737] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.769027][ T9737] bridge_slave_1: entered allmulticast mode
[  194.780522][ T9737] bridge_slave_1: entered promiscuous mode
[  194.891080][ T9737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  194.899299][ T9737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  194.933115][ T9737] team0: Port device team_slave_0 added
[  194.939883][ T9737] team0: Port device team_slave_1 added
[  194.959795][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  194.962324][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.976941][ T9737] batman_adv: batadv0: Adding interface: batadv_slave_0
[  194.982787][ T9737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  194.993246][ T9737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  194.999815][ T9737] batman_adv: batadv0: Adding interface: batadv_slave_1
[  195.002406][ T9737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  195.011155][ T9737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  195.041962][ T9737] hsr_slave_0: entered promiscuous mode
[  195.045200][ T9737] hsr_slave_1: entered promiscuous mode
[  195.047812][ T9737] debugfs: 'hsr0' already exists in 'hsr'
[  195.049782][ T9737] Cannot create hsr debugfs directory
[  195.184710][ T9737] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  195.198225][ T9737] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  195.205309][ T9737] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  195.219708][ T9737] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  195.250822][ T9737] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.253227][ T9737] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.257587][ T9737] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.259904][ T9737] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.294029][ T9737] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.303612][ T6975] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.310743][ T6975] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.321922][ T9737] 8021q: adding VLAN 0 to HW filter on device team0
[  195.330111][ T6975] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.332851][ T6975] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.338622][ T6975] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.341105][ T6975] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.516129][ T5811] Bluetooth: hci1: command tx timeout
[  195.550662][ T9737] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.818625][ T9737] veth0_vlan: entered promiscuous mode
[  195.833029][ T5860] usb 3-1: USB disconnect, device number 25
[  195.836502][ T9737] veth1_vlan: entered promiscuous mode
[  195.863115][ T9737] veth0_macvtap: entered promiscuous mode
[  195.869577][ T9737] veth1_macvtap: entered promiscuous mode
[  195.883972][ T9737] batman_adv: batadv0: Interface activated: batadv_slave_0
[  195.892452][ T9772] loop3: detected capacity change from 0 to 32768
[  195.906412][ T9737] batman_adv: batadv0: Interface activated: batadv_slave_1
[  195.938293][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.941974][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.950289][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.953548][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.977908][ T9772] JBD2: Ignoring recovery information on journal
[  196.050497][ T9793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1464'.
[  196.219449][   T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.224045][ T9772] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  196.234712][   T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.246667][ T5811] Bluetooth: hci3: command tx timeout
[  196.293460][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.298213][ T9597] ocfs2: Unmounting device (7,3) on (node local)
[  196.298932][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.607982][ T9800] loop4: detected capacity change from 0 to 32768
[  196.613916][ T9800] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1466 (9800)
[  196.634500][ T9800] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  196.638652][ T9800] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  196.641699][ T9800] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  196.808228][ T9800] BTRFS info (device loop4): enabling ssd optimizations
[  196.814600][ T9800] BTRFS info (device loop4): disabling tree log
[  196.820765][ T9800] BTRFS info (device loop4): turning on async discard
[  196.830618][ T9800] BTRFS info (device loop4): enabling disk space caching
[  196.832919][ T9800] BTRFS info (device loop4): force clearing of disk cache
[  196.839070][ T9800] BTRFS info (device loop4): force zlib compression, level 3
[  196.868860][ T9800] BTRFS info (device loop4 state M): rebuilding free space tree
[  196.995307][ T9800] BTRFS info (device loop4 state M): disabling free space tree
[  197.013327][ T9800] BTRFS info (device loop4 state M): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  197.025847][ T9800] BTRFS info (device loop4 state M): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  197.057025][ T9800] BTRFS info (device loop4 state M): force clearing of disk cache
[  197.101908][ T9737] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  197.181267][ T9837] loop2: detected capacity change from 0 to 1024
[  197.201569][   T34] audit: type=1800 audit(1764022576.237:24): pid=9837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1476" name="file1" dev="loop2" ino=20 res=0 errno=0
[  197.472417][ T9849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1481'.
[  198.315791][ T5811] Bluetooth: hci3: command tx timeout
[  199.355756][   T34] audit: type=1326 audit(1764022578.397:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9864 comm="syz.2.1486" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f956c98f749 code=0x0
[  199.457609][ T9873] loop4: detected capacity change from 0 to 128
[  199.491933][ T9875] loop3: detected capacity change from 0 to 8
[  199.505280][ T9875] unable to read xattr id index table
[  199.811584][ T9889] loop3: detected capacity change from 0 to 64
[  199.814778][ T9889] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  199.828137][ T9889] MINIX-fs warning: remounting unchecked fs, running fsck is recommended
[  199.910574][ T9895] loop3: detected capacity change from 0 to 256
[  200.098445][ T9907] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) !
[  200.153449][ T9911] openvswitch: netlink: nsh attr 0 has unexpected len 16 expected 0
[  200.157358][ T9911] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  200.267823][ T9921] netlink: 'syz.2.1513': attribute type 11 has an invalid length.
[  200.332841][ T9925] netem: change failed
[  200.470553][ T9933] loop2: detected capacity change from 0 to 8
[  200.478266][ T9933] SQUASHFS error: lzo decompression failed, data probably corrupt
[  200.484911][ T9933] SQUASHFS error: Failed to read block 0x91: -5
[  200.488019][ T9933] SQUASHFS error: Unable to read metadata cache entry [8f]
[  200.493029][ T9933] SQUASHFS error: Unable to read inode 0x11f
[  200.553472][ T9937] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1521'.
[  200.824615][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.117409][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.140798][ T9950] loop3: detected capacity change from 0 to 512
[  201.148602][ T9950] EXT4-fs: Ignoring removed oldalloc option
[  201.181490][ T9950] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.1528: Parent and EA inode have the same ino 15
[  201.201776][ T5202] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  201.208269][ T5202] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  201.212406][ T5202] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  201.218205][ T5202] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  201.223555][ T5202] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  201.250004][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.274942][ T9950] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.1528: Parent and EA inode have the same ino 15
[  201.279430][ T9950] EXT4-fs (loop3): 1 orphan inode deleted
[  201.281932][ T9950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.308860][ T9597] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.354272][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.462773][ T9953] chnl_net:caif_netlink_parms(): no params data found
[  201.667569][   T13] bridge_slave_1: left allmulticast mode
[  201.669870][   T13] bridge_slave_1: left promiscuous mode
[  201.672176][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.693855][   T13] bridge_slave_0: left allmulticast mode
[  201.702940][   T13] bridge_slave_0: left promiscuous mode
[  201.704781][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.763729][ T9965] loop3: detected capacity change from 0 to 32768
[  201.768897][ T9965] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1532 (9965)
[  201.861390][ T9965] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  201.868135][ T9965] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  201.969617][ T9981] netlink: 'syz.2.1535': attribute type 1 has an invalid length.
[  201.972100][ T9981] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1535'.
[  202.318525][ T9965] BTRFS info (device loop3): enabling ssd optimizations
[  202.321155][ T9965] BTRFS info (device loop3): turning on async discard
[  202.323487][ T9965] BTRFS info (device loop3): enabling free space tree
[  202.390352][ T9597] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  202.682390][ T9999] loop3: detected capacity change from 0 to 2048
[  202.760973][T10003] random: crng reseeded on system resumption
[  202.767881][ T9999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.813510][T10003] loop2: detected capacity change from 0 to 128
[  202.849225][T10003] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  202.857700][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  202.861337][T10003] ext4 filesystem being mounted at /526/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  202.863104][ T9597] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.889038][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  202.898269][   T13] bond0 (unregistering): Released all slaves
[  202.992877][ T9953] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.010349][ T9953] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.013285][ T9953] bridge_slave_0: entered allmulticast mode
[  203.033149][ T9953] bridge_slave_0: entered promiscuous mode
[  203.053402][ T9953] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.057949][ T5815] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  203.058476][ T9953] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.071978][ T9953] bridge_slave_1: entered allmulticast mode
[  203.079420][ T9953] bridge_slave_1: entered promiscuous mode
[  203.213843][ T9953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  203.222736][ T9953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  203.283244][ T5811] Bluetooth: hci3: command tx timeout
[  203.319314][ T9953] team0: Port device team_slave_0 added
[  203.323909][ T9953] team0: Port device team_slave_1 added
[  203.428944][ T9953] batman_adv: batadv0: Adding interface: batadv_slave_0
[  203.431200][ T9953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  203.440763][ T9953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  203.445218][ T9953] batman_adv: batadv0: Adding interface: batadv_slave_1
[  203.449476][ T9953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  203.458207][ T9953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  203.501520][   T13] hsr_slave_0: left promiscuous mode
[  203.503888][   T13] hsr_slave_1: left promiscuous mode
[  203.506848][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  203.518782][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.523955][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  203.529011][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  203.547998][   T13] veth1_macvtap: left promiscuous mode
[  203.550019][   T13] veth0_macvtap: left promiscuous mode
[  203.551964][   T13] veth1_vlan: left promiscuous mode
[  203.553700][   T13] veth0_vlan: left promiscuous mode
[  204.038335][   T13] team0 (unregistering): Port device team_slave_1 removed
[  204.086914][   T13] team0 (unregistering): Port device team_slave_0 removed
[  204.510227][ T9953] hsr_slave_0: entered promiscuous mode
[  204.512540][ T9953] hsr_slave_1: entered promiscuous mode
[  204.515138][ T9953] debugfs: 'hsr0' already exists in 'hsr'
[  204.517564][ T9953] Cannot create hsr debugfs directory
[  204.520925][T10037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1550'.
[  204.847034][ T9953] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  204.853999][ T9953] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  204.859581][ T9953] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  204.867181][ T9953] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  204.932118][ T9953] 8021q: adding VLAN 0 to HW filter on device bond0
[  204.944145][ T9953] 8021q: adding VLAN 0 to HW filter on device team0
[  204.951345][T10061] loop2: detected capacity change from 0 to 2048
[  204.967267][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.969558][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  204.976553][T10063] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  204.986471][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.988863][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.150520][ T9953] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.216531][T10081] loop2: detected capacity change from 0 to 128
[  205.222860][T10081] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  205.238029][T10081] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  205.307177][ T1110] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  205.353428][T10090] loop2: detected capacity change from 0 to 256
[  205.356535][ T5811] Bluetooth: hci3: command tx timeout
[  205.452289][T10094] use of bytesused == 0 is deprecated and will be removed in the future,
[  205.460882][T10094] use the actual size instead.
[  205.464440][ T9953] veth0_vlan: entered promiscuous mode
[  205.484132][ T9953] veth1_vlan: entered promiscuous mode
[  205.525842][ T9953] veth0_macvtap: entered promiscuous mode
[  205.540514][ T9953] veth1_macvtap: entered promiscuous mode
[  205.570322][ T9953] batman_adv: batadv0: Interface activated: batadv_slave_0
[  205.582197][ T9953] batman_adv: batadv0: Interface activated: batadv_slave_1
[  205.608639][ T5838] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.616269][ T5838] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.624095][ T5838] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.629354][ T5838] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.703868][ T6966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.706794][ T6966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.727496][ T3560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.729981][ T3560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.865917][ T5918] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  205.982933][T10106] loop5: detected capacity change from 0 to 40427
[  205.999643][T10106] F2FS-fs (loop5): build fault injection rate: 14
[  206.002195][T10106] F2FS-fs (loop5): build fault injection type: 0x3bfe8c
[  206.007866][T10106] F2FS-fs (loop5): invalid crc value
[  206.012608][    C0] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  206.027575][    C0] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  206.035834][ T5918] usb 3-1: Using ep0 maxpacket: 32
[  206.048977][ T5918] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  206.052491][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.056275][ T5918] usb 3-1: Product: syz
[  206.058179][ T5918] usb 3-1: Manufacturer: syz
[  206.059704][ T5918] usb 3-1: SerialNumber: syz
[  206.062993][ T5918] usb 3-1: config 0 descriptor??
[  206.089069][T10106] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  206.092836][T10106] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  206.100730][T10106] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  206.109532][T10106] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  206.117845][T10106] F2FS-fs (loop5): inject inconsistent footer in sanity_check_node_footer of f2fs_write_inline_data+0x9b/0x790
[  206.123112][T10106] F2FS-fs (loop5): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0]
[  206.156226][ T9953] syz-executor: attempt to access beyond end of device
[  206.156226][ T9953] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  206.162106][ T9953] CPU: 0 UID: 0 PID: 9953 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  206.162124][ T9953] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  206.162131][ T9953] Call Trace:
[  206.162137][ T9953]  <TASK>
[  206.162143][ T9953]  dump_stack_lvl+0x189/0x250
[  206.162167][ T9953]  ? __pfx_dump_stack_lvl+0x10/0x10
[  206.162182][ T9953]  ? __pfx_queue_work_on+0x10/0x10
[  206.162194][ T9953]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  206.162212][ T9953]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  206.162238][ T9953]  f2fs_handle_critical_error+0x37c/0x540
[  206.162260][ T9953]  f2fs_write_end_io+0x886/0xb60
[  206.162288][ T9953]  __submit_merged_bio+0x27a/0x6a0
[  206.162308][ T9953]  __submit_merged_write_cond+0x255/0x530
[  206.162333][ T9953]  f2fs_write_data_pages+0x261d/0x3000
[  206.162380][ T9953]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  206.162431][ T9953]  ? __page_cache_release+0x8a6/0xbb0
[  206.162453][ T9953]  ? folios_put_refs+0x584/0x670
[  206.162474][ T9953]  ? __pfx_folios_put_refs+0x10/0x10
[  206.162486][ T9953]  ? rcu_is_watching+0x15/0xb0
[  206.162508][ T9953]  ? __lock_acquire+0xab9/0xd20
[  206.162531][ T9953]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  206.162543][ T9953]  do_writepages+0x32e/0x550
[  206.162566][ T9953]  ? do_raw_spin_unlock+0x4d/0x240
[  206.162586][ T9953]  filemap_fdatawrite+0x199/0x240
[  206.162602][ T9953]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  206.162650][ T9953]  ? do_raw_spin_unlock+0x4d/0x240
[  206.162694][ T9953]  f2fs_sync_dirty_inodes+0x31f/0x830
[  206.162718][ T9953]  f2fs_write_checkpoint+0x93e/0x2440
[  206.162730][ T9953]  ? __lock_acquire+0xab9/0xd20
[  206.162761][ T9953]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  206.162817][ T9953]  kill_f2fs_super+0x2cc/0x6d0
[  206.162836][ T9953]  ? __pfx_kill_f2fs_super+0x10/0x10
[  206.162863][ T9953]  ? shrinker_free+0x2ce/0x3e0
[  206.162877][ T9953]  deactivate_locked_super+0xbc/0x130
[  206.162894][ T9953]  cleanup_mnt+0x425/0x4c0
[  206.162909][ T9953]  ? lockdep_hardirqs_on+0x9c/0x150
[  206.162927][ T9953]  task_work_run+0x1d4/0x260
[  206.162947][ T9953]  ? __pfx_task_work_run+0x10/0x10
[  206.162961][ T9953]  ? __x64_sys_umount+0x122/0x160
[  206.162981][ T9953]  ? exit_to_user_mode_loop+0x40/0x130
[  206.162995][ T9953]  exit_to_user_mode_loop+0xe9/0x130
[  206.163006][ T9953]  do_syscall_64+0x2bd/0xfa0
[  206.163022][ T9953]  ? lockdep_hardirqs_on+0x9c/0x150
[  206.163039][ T9953]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.163050][ T9953]  ? exc_page_fault+0xab/0x100
[  206.163067][ T9953]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.163078][ T9953] RIP: 0033:0x7f5e92790a77
[  206.163090][ T9953] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  206.163100][ T9953] RSP: 002b:00007ffdae2317b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  206.163113][ T9953] RAX: 0000000000000000 RBX: 00007f5e92813d7d RCX: 00007f5e92790a77
[  206.163120][ T9953] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdae231870
[  206.163128][ T9953] RBP: 00007ffdae231870 R08: 0000000000000000 R09: 0000000000000000
[  206.163135][ T9953] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdae232900
[  206.163142][ T9953] R13: 00007f5e92813d7d R14: 00000000000324ca R15: 00007ffdae232940
[  206.163166][ T9953]  </TASK>
[  206.163172][ T9953] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  206.619139][T10113] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1566'.
[  206.678234][ T5918] peak_usb 3-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels)
[  206.682785][ T5918] peak_usb 3-1:0.0 can0: sending command failure: -22
[  206.695557][ T5918] peak_usb 3-1:0.0 can0: sending command failure: -22
[  206.754257][T10124] loop5: detected capacity change from 0 to 256
[  206.758878][ T5918] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22
[  206.887210][   T24] usb 3-1: USB disconnect, device number 26
[  207.025818][ T5918] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  207.061354][T10133] loop5: detected capacity change from 0 to 4096
[  207.175586][ T5918] usb 4-1: Using ep0 maxpacket: 8
[  207.179212][ T5918] usb 4-1: unable to get BOS descriptor or descriptor too short
[  207.182929][ T5918] usb 4-1: config 50 has an invalid interface number: 75 but max is 0
[  207.188856][ T5918] usb 4-1: config 50 has no interface number 0
[  207.190843][ T5918] usb 4-1: config 50 interface 75 altsetting 42 endpoint 0x3 has invalid maxpacket 592, setting to 64
[  207.203373][ T5918] usb 4-1: config 50 interface 75 has no altsetting 0
[  207.217514][ T5918] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[  207.220727][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.223733][ T5918] usb 4-1: Product: syz
[  207.225115][ T5918] usb 4-1: Manufacturer: syz
[  207.227592][ T5918] usb 4-1: SerialNumber: syz
[  207.373335][T10144] loop5: detected capacity change from 0 to 512
[  207.379734][T10144] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  207.437413][T10144] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.447594][ T5811] Bluetooth: hci3: command tx timeout
[  207.447653][T10144] ext4 filesystem being mounted at /12/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  207.456062][ T5918] radioshark 4-1:50.75: Invalid radioSHARK device
[  207.458146][ T5918] radioshark 4-1:50.75: probe with driver radioshark failed with error -22
[  207.460927][ T5918] usbhid 4-1:50.75: couldn't find an input interrupt endpoint
[  207.470586][T10144] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.1579: corrupted inode contents
[  207.478964][ T5918] usb 4-1: USB disconnect, device number 4
[  207.489331][T10144] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.1579: mark_inode_dirty error
[  207.495979][T10144] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.1579: corrupted inode contents
[  207.499977][T10144] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.1579: mark_inode_dirty error
[  207.538530][ T9953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.615208][ T6523] IPVS: starting estimator thread 0...
[  207.624599][T10153] IPVS: fo: FWM 3 0x00000003 - no destination available
[  207.628713][    C0] IPVS: fo: FWM 3 0x00000003 - no destination available
[  207.706165][T10156] IPVS: using max 79 ests per chain, 189600 per kthread
[  207.714244][T10162] loop2: detected capacity change from 0 to 256
[  207.734772][T10162] FAT-fs (loop2): Directory bread(block 64) failed
[  207.737398][T10162] FAT-fs (loop2): Directory bread(block 65) failed
[  207.740308][T10162] FAT-fs (loop2): Directory bread(block 66) failed
[  207.743062][T10162] FAT-fs (loop2): Directory bread(block 67) failed
[  207.751189][T10162] FAT-fs (loop2): Directory bread(block 68) failed
[  207.753293][T10162] FAT-fs (loop2): Directory bread(block 69) failed
[  207.755390][T10162] FAT-fs (loop2): Directory bread(block 70) failed
[  207.761503][T10162] FAT-fs (loop2): Directory bread(block 71) failed
[  207.764154][T10162] FAT-fs (loop2): Directory bread(block 72) failed
[  207.767171][T10162] FAT-fs (loop2): Directory bread(block 73) failed
[  207.899999][T10170] loop2: detected capacity change from 0 to 512
[  207.903047][T10170] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  207.909153][T10170] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1590: invalid indirect mapped block 4294967295 (level 0)
[  207.916132][T10170] EXT4-fs (loop2): Remounting filesystem read-only
[  207.918609][T10170] EXT4-fs (loop2): 1 orphan inode deleted
[  207.920653][T10170] EXT4-fs (loop2): 1 truncate cleaned up
[  207.923389][T10170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.942521][ T5815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.006001][ T5918] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  208.186340][ T5918] usb 6-1: Using ep0 maxpacket: 16
[  208.191415][ T5918] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  208.194833][ T5918] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  208.199171][ T5918] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  208.205167][ T5918] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  208.211804][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.214999][ T5918] usb 6-1: Product: syz
[  208.224171][ T5918] usb 6-1: Manufacturer: syz
[  208.226577][ T5918] usb 6-1: SerialNumber: syz
[  208.234801][T10186] loop2: detected capacity change from 0 to 4096
[  208.244311][T10186] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  208.264926][T10186] ntfs3(loop2): ino=1a, mi_enum_attr
[  208.269969][T10186] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  208.407406][T10190] loop3: detected capacity change from 0 to 256
[  208.439006][T10190] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  208.473526][T10190] exFAT-fs (loop3): start_clu is invalid cluster(0xffffffff)
[  208.477837][T10190] exFAT-fs (loop3): valid_size(150994954) is greater than size(10)
[  208.638478][ T5918] usb 6-1: 0:2 : does not exist
[  208.677909][T10207] loop3: detected capacity change from 0 to 128
[  208.805937][  T794] usb 3-1: new full-speed USB device number 27 using dummy_hcd
[  209.030007][  T794] usb 3-1: config 4 has an invalid interface number: 247 but max is 0
[  209.033358][  T794] usb 3-1: config 4 has no interface number 0
[  209.046130][  T794] usb 3-1: config 4 interface 247 altsetting 119 has a duplicate endpoint with address 0xB, skipping
[  209.067222][  T794] usb 3-1: config 4 interface 247 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85
[  209.075175][  T794] usb 3-1: config 4 interface 247 altsetting 119 endpoint 0x85 has invalid maxpacket 11067, setting to 64
[  209.082934][  T794] usb 3-1: config 4 interface 247 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  209.095468][  T794] usb 3-1: config 4 interface 247 has no altsetting 0
[  209.130106][  T794] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=69.5d
[  209.134924][  T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.145477][  T794] usb 3-1: Product: syz
[  209.150831][  T794] usb 3-1: Manufacturer: syz
[  209.156602][  T794] usb 3-1: SerialNumber: syz
[  209.222519][T10199] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  209.237279][  T794] ni6501 3-1:4.247: driver 'ni6501' failed to auto-configure device.
[  209.434089][   T10] usb 3-1: USB disconnect, device number 27
[  209.462969][ T5918] usb 6-1: 1:0: failed to get current value for ch 0 (-22)
[  209.481243][ T5918] usb 6-1: USB disconnect, device number 2
[  209.518155][ T5811] Bluetooth: hci3: command tx timeout
[  210.015734][ T5918] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  210.033830][T10221] loop2: detected capacity change from 0 to 512
[  210.061125][T10221] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1614: bad orphan inode 15
[  210.066331][T10221] ext4_test_bit(bit=14, block=5) = 0
[  210.069967][T10221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.083141][T10221] EXT4-fs error (device loop2): __ext4_new_inode:1073: comm syz.2.1614: reserved inode found cleared - inode=1
[  210.092387][T10221] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters
[  210.106495][T10221] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  210.129765][ T5815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.180105][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  210.184631][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  210.195326][ T5918] usb 4-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00
[  210.205211][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.217512][ T5918] usb 4-1: config 0 descriptor??
[  210.258587][T10232] loop5: detected capacity change from 0 to 256
[  210.269941][T10232] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  210.302551][T10232] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  210.452547][T10246] pimreg: entered allmulticast mode
[  210.457369][T10246] pimreg: left allmulticast mode
[  210.644226][ T5918] cypress 0003:04B4:0001.000B: unknown main item tag 0x0
[  210.648073][ T5918] cypress 0003:04B4:0001.000B: unknown main item tag 0x0
[  210.654309][ T5918] cypress 0003:04B4:0001.000B: unknown main item tag 0x0
[  210.657538][ T5918] cypress 0003:04B4:0001.000B: unknown main item tag 0x0
[  210.661033][ T5918] cypress 0003:04B4:0001.000B: unknown main item tag 0x0
[  210.664993][ T5918] cypress 0003:04B4:0001.000B: unknown main item tag 0x0
[  210.668626][ T5918] cypress 0003:04B4:0001.000B: unknown main item tag 0x0
[  210.673732][ T5918] cypress 0003:04B4:0001.000B: hidraw0: USB HID v0.00 Device [HID 04b4:0001] on usb-dummy_hcd.3-1/input0
[  210.845518][   T10] usb 4-1: USB disconnect, device number 5
[  211.104654][T10272] loop2: detected capacity change from 0 to 32768
[  211.123150][T10272] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  211.141246][T10272] XFS (loop2): Ending clean mount
[  211.170476][ T5815] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  211.273579][T10282] loop2: detected capacity change from 0 to 16
[  211.278243][T10282] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  211.552905][T10296] loop3: detected capacity change from 0 to 2048
[  211.572778][T10296] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  211.592240][   T34] audit: type=1800 audit(1764022590.637:26): pid=10296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1636" name="file1" dev="loop3" ino=1346 res=0 errno=0
[  211.608359][   T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  211.760453][   T10] usb 3-1: config 0 has an invalid interface number: 199 but max is 1
[  211.763714][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  211.769022][   T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  211.772405][   T10] usb 3-1: config 0 has no interface number 0
[  211.774807][   T10] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  211.779411][   T10] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  211.787828][   T10] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  211.791175][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  211.793957][   T10] usb 3-1: SerialNumber: syz
[  211.803617][   T10] usb 3-1: config 0 descriptor??
[  211.812591][   T10] uvcvideo 3-1:0.199: Found UVC 0.00 device <unnamed> (0002:0000)
[  211.816765][   T10] uvcvideo 3-1:0.199: No valid video chain found.
[  212.017647][T10313] netlink: 'syz.3.1643': attribute type 1 has an invalid length.
[  212.029500][  T794] usb 3-1: USB disconnect, device number 28
[  212.690013][T10323] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  212.965069][T10325] binfmt_misc: register: failed to install interpreter file ./file0
[  213.451876][T10341] loop3: detected capacity change from 0 to 1024
[  213.605648][ T6523] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  213.759910][ T6523] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  213.769839][ T6523] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  213.773542][ T6523] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  213.780075][ T6523] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 4.00
[  213.784357][ T6523] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  213.791166][ T6523] usb 3-1: Manufacturer: syz
[  213.796606][ T6523] usb 3-1: config 0 descriptor??
[  214.086728][T10365] loop5: detected capacity change from 0 to 1024
[  214.258404][ T6523] hid-udraw 0003:20D6:CB17.000C: global environment stack underflow
[  214.267178][ T6523] hid-udraw 0003:20D6:CB17.000C: item 0 2 1 11 parsing failed
[  214.272685][ T6523] hid-udraw 0003:20D6:CB17.000C: parse failed
[  214.290547][ T6523] hid-udraw 0003:20D6:CB17.000C: probe with driver hid-udraw failed with error -22
[  214.502357][ T5918] usb 3-1: USB disconnect, device number 29
[  216.425554][ T5918] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  216.561601][T10407] loop3: detected capacity change from 0 to 32768
[  216.599524][ T5918] usb 3-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=d6.bb
[  216.604290][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.609067][T10407] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  216.616600][ T5918] usb 3-1: Product: syz
[  216.618518][ T5918] usb 3-1: Manufacturer: syz
[  216.624711][ T5918] usb 3-1: SerialNumber: syz
[  216.636551][ T5918] usb 3-1: config 0 descriptor??
[  216.647803][T10407] XFS (loop3): Ending clean mount
[  216.648245][ T5918] gspca_main: sn9c2028-2.14.0 probing 0c45:8003
[  216.657891][T10407] XFS (loop3): Quotacheck needed: Please wait.
[  216.702439][T10407] XFS (loop3): Quotacheck: Done.
[  216.764467][ T9597] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  216.861177][ T5918] gspca_sn9c2028: read1 error -71
[  216.864711][ T5918] gspca_sn9c2028: read1 error -71
[  216.871399][ T5918] gspca_sn9c2028: read1 error -71
[  216.874132][ T5918] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -71
[  216.897025][ T5918] usb 3-1: USB disconnect, device number 30
[  216.961380][  T794] IPVS: starting estimator thread 0...
[  217.057986][T10434] IPVS: using max 49 ests per chain, 117600 per kthread
[  217.171752][T10447] loop3: detected capacity change from 0 to 256
[  217.183336][T10447] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[  217.196405][T10447] exFAT-fs (loop3): start_clu is invalid cluster(0x400)
[  217.241702][T10449] loop3: detected capacity change from 0 to 1024
[  217.410094][T10455] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1688'.
[  217.558390][T10462] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  217.675739][ T5918] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  217.836365][ T5918] usb 4-1: Using ep0 maxpacket: 16
[  217.841496][ T5918] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  217.847016][ T5918] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  217.850858][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.859608][ T5918] usb 4-1: config 0 descriptor??
[  217.892453][ T5918] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input19
[  218.085010][ T5246] bcm5974 4-1:0.0: could not read from device
[  218.119836][ T5918] bcm5974 4-1:0.0: could not read from device
[  218.126641][ T5246] bcm5974 4-1:0.0: could not read from device
[  218.139483][ T5918] input: failed to attach handler mousedev to device input19, error: -5
[  218.168053][ T5246] bcm5974 4-1:0.0: could not read from device
[  218.174747][ T5918] usb 4-1: USB disconnect, device number 6
[  218.181835][ T5246] bcm5974 4-1:0.0: could not read from device
[  218.707637][T10466] vivid-000: disconnect
[  218.709211][T10464] vivid-000: reconnect
[  218.819192][T10470] mkiss: ax0: crc mode is auto.
[  218.866769][T10468] loop2: detected capacity change from 0 to 32768
[  218.871702][T10468] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1693 (10468)
[  218.885506][T10468] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  218.888775][T10468] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  219.021262][T10484] loop3: detected capacity change from 0 to 4096
[  219.046577][T10468] BTRFS info (device loop2): enabling ssd optimizations
[  219.049870][T10468] BTRFS info (device loop2): turning on async discard
[  219.052500][T10468] BTRFS info (device loop2): enabling free space tree
[  219.092917][T10484] ntfs3(loop3): Failed to initialize $Extend/$ObjId.
[  219.190899][ T5815] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  219.836024][  T794] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  219.985557][  T794] usb 4-1: Using ep0 maxpacket: 16
[  219.989177][  T794] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  219.992975][  T794] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[  219.998415][  T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7
[  220.003430][  T794] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  220.011312][  T794] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  220.014425][  T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.018271][  T794] usb 4-1: Product: syz
[  220.019763][  T794] usb 4-1: Manufacturer: syz
[  220.021295][  T794] usb 4-1: SerialNumber: syz
[  220.024861][  T794] usb 4-1: config 0 descriptor??
[  220.065528][  T794] rc_core: IR keymap rc-xbox-dvd not found
[  220.067562][  T794] Registered IR keymap rc-empty
[  220.069829][  T794] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  220.073616][  T794] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input20
[  220.242926][ T6523] usb 4-1: USB disconnect, device number 7
[  220.242981][    C1] xbox_remote 4-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19
[  220.584258][T10513] loop2: detected capacity change from 0 to 4096
[  220.597822][T10513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.611931][   T34] audit: type=1800 audit(1764022599.657:27): pid=10513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1705" name="file2" dev="loop2" ino=16 res=0 errno=0
[  220.632179][ T5815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.940608][T10521] loop2: detected capacity change from 0 to 32768
[  220.946567][T10521] (syz.2.1708,10521,0):ocfs2_slot_map_physical_size:223 ERROR: Slot map file is too small!  (size 0, needed 8)
[  220.950393][T10521] (syz.2.1708,10521,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 69
[  222.639957][T10567] ipvlan0: entered allmulticast mode
[  222.642568][T10567] veth0_vlan: entered allmulticast mode
[  222.678949][T10569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1730'.
[  223.288726][T10601] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1745'.
[  223.292198][T10601] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1745'.
[  223.313277][T10603] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1746'.
[  223.326327][T10603] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1746'.
[  223.329681][T10603] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1746'.
[  223.733630][T10611] loop3: detected capacity change from 0 to 32768
[  223.773155][T10611] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  223.816974][T10611] XFS (loop3): Ending clean mount
[  223.820848][T10611] XFS (loop3): Quotacheck needed: Please wait.
[  223.855274][T10611] XFS (loop3): Quotacheck: Done.
[  223.858641][T10624] loop2: detected capacity change from 0 to 128
[  223.870802][T10624] udf: Unknown parameter 'kD4o0]nu-ʽo4sz"Mn'
[  224.042055][ T9597] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  224.109393][T10614] loop5: detected capacity change from 0 to 32768
[  224.166299][T10614] ERROR: (device loop5): dbDiscardAG: -EIO
[  224.166299][T10614] 
[  224.185685][T10614] ERROR: (device loop5): remounting filesystem as read-only
[  224.267069][T10632] loop2: detected capacity change from 0 to 764
[  224.642913][T10647] loop2: detected capacity change from 0 to 512
[  224.686725][T10647] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1761: inode has both inline data and extents flags
[  224.699297][T10647] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1761: couldn't read orphan inode 15 (err -117)
[  224.711616][T10647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  225.673068][T10657] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  225.931209][T10653] loop3: detected capacity change from 0 to 32768
[  225.969938][T10653] ERROR: (device loop3): duplicateIXtree: 
[  225.969938][T10653] 
[  225.973454][T10653] ERROR: (device loop3): remounting filesystem as read-only
[  226.232291][ T5815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.303645][T10668] loop3: detected capacity change from 0 to 128
[  226.309461][T10669] loop2: detected capacity change from 0 to 64
[  226.329126][T10669] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  226.337693][T10668] qnx6: superblock #1 checksum error
[  226.650125][T10660] loop5: detected capacity change from 0 to 65536
[  226.697908][T10660] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  226.737936][T10660] XFS (loop5): Ending clean mount
[  226.755895][T10660] XFS (loop5): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  226.765557][T10660] XFS (loop5): Unmount and run xfs_repair
[  226.768394][T10660] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  226.776012][T10660] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  226.779302][T10660] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  226.792951][T10660] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 01 00 00 04  ................
[  226.795712][T10677] loop2: detected capacity change from 0 to 32768
[  226.797153][T10660] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  226.806827][T10686] XFS (loop5): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x8001 
[  226.810177][T10686] XFS (loop5): Unmount and run xfs_repair
[  226.812091][T10686] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  226.812381][T10660] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  226.815025][T10686] 00000000: 58 41 47 46 00 00 00 01 00 00 00 01 00 00 40 00  XAGF..........@.
[  226.823281][T10686] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  226.826581][T10686] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  226.827677][T10671] loop3: detected capacity change from 0 to 32768
[  226.829593][T10686] 00000030: 00 00 00 04 00 00 3b 5f 00 00 3b 5c 00 00 00 00  ......;_..;\....
[  226.831519][T10660] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  226.833990][T10686] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  226.834001][T10686] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  226.834006][T10686] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  226.834012][T10686] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  226.834210][T10686] XFS (loop5): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x8001 len 1 error 74
[  226.838918][ T7830]  loop2: p1 p2 p3 < p5 p6 p7 >
[  226.869199][T10671] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  226.872398][ T7830] loop2: p2 size 16775168 extends beyond EOD, truncated
[  226.876864][T10660] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  226.884445][T10660] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  226.887735][ T7830] loop2: p5 start 4294970168 is beyond EOD, truncated
[  226.892987][T10660] XFS (loop5): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  226.916400][T10671] XFS (loop3): Ending clean mount
[  226.918341][T10660] XFS (loop5): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  226.923800][T10660] XFS (loop5): Please unmount the filesystem and rectify the problem(s)
[  226.935644][T10677]  loop2: p1 p2 p3 < p5 p6 p7 >
[  226.943142][T10677] loop2: p2 size 16775168 extends beyond EOD, truncated
[  226.959443][T10677] loop2: p5 start 4294970168 is beyond EOD, truncated
[  226.989505][ T9953] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  226.998294][ T9597] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  227.304913][T10699] loop2: detected capacity change from 0 to 4096
[  227.309281][T10699] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  227.334465][T10699] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  227.354583][ T5819] udevd[5819]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory
[  227.357491][ T5816] udevd[5816]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  227.368811][ T5812] udevd[5812]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  227.370410][ T7830] udevd[7830]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  227.373625][ T5943] udevd[5943]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory
[  227.392026][T10703] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  227.437477][T10705] loop5: detected capacity change from 0 to 8
[  227.472184][T10705] SQUASHFS error: Failed to read block 0x2d7: -5
[  227.474643][T10705] SQUASHFS error: Unable to read metadata cache entry [2d5]
[  227.522687][ T5812] udevd[5812]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory
[  227.673343][T10720] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1784'.
[  227.677067][T10720] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1784'.
[  227.826743][T10731] loop2: detected capacity change from 0 to 7
[  227.831004][T10731] Dev loop2: unable to read RDB block 7
[  227.833358][T10731]  loop2: AHDI p1 p2 p3
[  227.835197][T10731] loop2: partition table partially beyond EOD, truncated
[  227.839601][T10731] loop2: p1 start 1818582900 is beyond EOD, truncated
[  227.842791][T10731] loop2: p3 start 335544320 is beyond EOD, truncated
[  228.237016][  T794] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  228.388726][  T794] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  228.393116][  T794] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  228.400083][  T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  228.405071][  T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64
[  228.409776][  T794] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  228.419318][  T794] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  228.423057][  T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.427471][  T794] usb 4-1: Product: syz
[  228.429175][  T794] usb 4-1: Manufacturer: syz
[  228.431022][  T794] usb 4-1: SerialNumber: syz
[  228.435264][  T794] usb 4-1: config 0 descriptor??
[  228.440404][T10738] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  228.447410][  T794] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input21
[  228.578600][T10742] loop2: detected capacity change from 0 to 256
[  228.682767][   T10] usb 4-1: USB disconnect, device number 8
[  228.879899][T10746] loop2: detected capacity change from 0 to 32768
[  228.895267][T10746] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  228.913934][T10746] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  228.929009][T10746] (syz.2.1797,10746,1):ocfs2_read_blocks:239 ERROR: status = -12
[  228.932241][T10746] (syz.2.1797,10746,1):ocfs2_xattr_block_find:2831 ERROR: status = -12
[  228.961913][ T5815] ocfs2: Unmounting device (7,2) on (node local)
[  229.188486][T10752] loop2: detected capacity change from 0 to 164
[  229.280486][T10758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1802'.
[  229.284586][T10758] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1802'.
[  229.393032][   T34] audit: type=1326 audit(1764022608.437:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.3.1805" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60dd38f749 code=0x7ffc0000
[  229.404770][   T34] audit: type=1326 audit(1764022608.437:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.3.1805" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60dd38f749 code=0x7ffc0000
[  229.411963][   T34] audit: type=1326 audit(1764022608.437:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.3.1805" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60dd38f749 code=0x7ffc0000
[  229.422785][   T34] audit: type=1326 audit(1764022608.437:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.3.1805" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60dd38f749 code=0x7ffc0000
[  229.432415][   T34] audit: type=1326 audit(1764022608.457:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.3.1805" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f60dd38f749 code=0x7ffc0000
[  229.449621][   T34] audit: type=1326 audit(1764022608.457:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.3.1805" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60dd38f749 code=0x7ffc0000
[  229.465570][   T34] audit: type=1326 audit(1764022608.457:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.3.1805" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60dd38f749 code=0x7ffc0000
[  229.486837][   T34] audit: type=1326 audit(1764022608.457:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.3.1805" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60dd38f749 code=0x7ffc0000
[  229.497963][   T34] audit: type=1326 audit(1764022608.457:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.3.1805" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60dd38f749 code=0x7ffc0000
[  229.500732][T10771] loop3: detected capacity change from 0 to 1024
[  229.510104][   T34] audit: type=1326 audit(1764022608.457:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.3.1805" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f60dd38f749 code=0x7ffc0000
[  229.521258][T10771] hfsplus: invalid btree extent records (0 size)
[  229.538560][T10771] hfsplus: failed to load extents file
[  229.686973][T10776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1810'.
[  229.944706][T10790] loop3: detected capacity change from 0 to 1024
[  229.955813][T10790] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  229.966808][T10790] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  229.970502][T10790] EXT4-fs (loop3): orphan cleanup on readonly fs
[  229.973130][T10790] EXT4-fs error (device loop3): ext4_free_blocks:6706: comm syz.3.1817: Freeing blocks not in datazone - block = 0, count = 4096
[  229.987563][T10790] EXT4-fs (loop3): 1 orphan inode deleted
[  229.991111][T10790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  230.001593][T10790] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1817: bg 0: block 10: padding at end of block bitmap is not set
[  230.026333][ T9597] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.721428][T10805] loop2: detected capacity change from 0 to 512
[  230.738287][T10805] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  230.751926][T10805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.757080][T10805] ext4 filesystem being mounted at /627/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  230.849499][ T5815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.339425][T10822] loop3: detected capacity change from 0 to 4096
[  232.416477][T10847] input: syz1 as /devices/virtual/input/input22
[  232.419179][T10847] input: failed to attach handler leds to device input22, error: -6
[  232.546323][T10851] loop3: detected capacity change from 0 to 8
[  232.652052][T10855] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1841'.
[  232.656543][T10855] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1841'.
[  232.699092][T10857] loop2: detected capacity change from 0 to 4096
[  232.710173][T10857] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  232.713885][T10857] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  232.731132][T10857] ntfs3(loop2): volume is dirty and "force" flag is not set!
[  232.800435][T10861] netlink: 'syz.2.1845': attribute type 2 has an invalid length.
[  232.803724][T10861] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1845'.
[  233.002046][T10871] loop2: detected capacity change from 0 to 512
[  233.013325][T10871] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  233.034999][T10871] EXT4-fs (loop2): 1 truncate cleaned up
[  233.040294][T10871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  233.157820][T10878] EXT4-fs error (device loop2): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.2.1850: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  233.171824][T10878] EXT4-fs (loop2): Remounting filesystem read-only
[  233.996031][ T5918] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  234.055762][ T5860] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  234.188490][ T5918] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  234.192723][ T5918] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  234.196532][ T5918] usb 4-1: config 1 has no interface number 1
[  234.199545][ T5918] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  234.204845][ T5918] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  234.212694][ T5918] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  234.216450][ T5860] usb 6-1: Using ep0 maxpacket: 16
[  234.219482][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.223166][ T5918] usb 4-1: Product: syz
[  234.224941][ T5918] usb 4-1: Manufacturer: syz
[  234.226835][ T5918] usb 4-1: SerialNumber: syz
[  234.228711][ T5860] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  234.234721][ T5860] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  234.239611][ T5860] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  234.245978][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.274225][ T5860] usb 6-1: config 0 descriptor??
[  234.352795][ T5815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.475508][ T5918] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[  234.478760][ T5918] usb 4-1: found format II with max.bitrate = 2, frame size=62645
[  234.487128][ T5918] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[  234.492115][ T5918] usb 4-1: found format II with max.bitrate = 2, frame size=62645
[  234.547881][ T5918] usb 4-1: USB disconnect, device number 9
[  234.707802][ T5860] logitech 0003:046D:C29C.000D: unknown main item tag 0x0
[  234.710105][ T5860] logitech 0003:046D:C29C.000D: unknown main item tag 0x0
[  234.712812][ T5860] logitech 0003:046D:C29C.000D: unknown main item tag 0x0
[  234.719308][ T5860] logitech 0003:046D:C29C.000D: unknown main item tag 0x0
[  234.725769][ T5860] logitech 0003:046D:C29C.000D: unknown main item tag 0x0
[  234.730076][ T5860] logitech 0003:046D:C29C.000D: unknown main item tag 0x0
[  234.733565][ T5860] logitech 0003:046D:C29C.000D: unknown main item tag 0x0
[  234.736053][ T5860] logitech 0003:046D:C29C.000D: unknown main item tag 0x0
[  234.738707][ T5860] logitech 0003:046D:C29C.000D: unknown main item tag 0x0
[  234.741127][ T5860] logitech 0003:046D:C29C.000D: unknown main item tag 0x0
[  234.746145][ T5860] logitech 0003:046D:C29C.000D: unbalanced collection at end of report description
[  234.750701][ T5860] logitech 0003:046D:C29C.000D: parse failed
[  234.752821][ T5860] logitech 0003:046D:C29C.000D: probe with driver logitech failed with error -22
[  234.920909][ T5860] usb 6-1: USB disconnect, device number 3
[  235.149219][T10913] loop3: detected capacity change from 0 to 1024
[  235.152853][T10913] EXT4-fs: Ignoring removed oldalloc option
[  235.157410][T10913] EXT4-fs: Ignoring removed orlov option
[  235.161505][T10913] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  235.179240][T10913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.188967][   T34] kauditd_printk_skb: 25 callbacks suppressed
[  235.188978][   T34] audit: type=1800 audit(1764022614.237:63): pid=10913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1866" name="file1" dev="loop3" ino=15 res=0 errno=0
[  235.698872][T10924] loop2: detected capacity change from 0 to 736
[  235.840881][T10925] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.1866: Allocating blocks 449-513 which overlap fs metadata
[  235.935817][ T6523] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  236.057149][ T9597] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.085707][ T6523] usb 6-1: Using ep0 maxpacket: 8
[  236.090970][ T6523] usb 6-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30
[  236.109745][ T6523] usb 6-1: config 0 interface 0 altsetting 250 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  236.114410][ T6523] usb 6-1: config 0 interface 0 altsetting 250 endpoint 0x81 has invalid wMaxPacketSize 0
[  236.126004][ T6523] usb 6-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  236.135985][ T6523] usb 6-1: config 0 interface 0 has no altsetting 0
[  236.139150][ T6523] usb 6-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[  236.142424][ T6523] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.153177][ T6523] usb 6-1: config 0 descriptor??
[  236.341362][T10942] loop3: detected capacity change from 0 to 32768
[  236.349109][T10942] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  236.366746][T10942] XFS (loop3): Ending clean mount
[  236.392509][ T9597] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  236.432679][   T10] usb 3-1: new full-speed USB device number 31 using dummy_hcd
[  236.576413][ T6523] gt683r_led 0003:1770:FF00.000E: ignoring exceeding usage max
[  236.583946][ T6523] gt683r_led 0003:1770:FF00.000E: hidraw0: USB HID vf4.f6 Device [HID 1770:ff00] on usb-dummy_hcd.5-1/input0
[  236.601635][   T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  236.608093][   T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  236.615776][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  236.618386][   T10] usb 3-1: SerialNumber: syz
[  236.627945][   T10] cdc_acm 3-1:1.0: skipping garbage
[  236.630618][   T10] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12
[  236.783630][ T6523] usb 6-1: USB disconnect, device number 4
[  236.800064][   T10] gt683r_led 0003:1770:FF00.000E: failed to send set report request: -19
[  236.803329][T10961] loop3: detected capacity change from 0 to 4096
[  236.807931][T10961] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  236.827403][T10961] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  236.840359][ T5860] usb 3-1: USB disconnect, device number 31
[  236.852247][   T34] audit: type=1800 audit(1764022615.897:64): pid=10961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1881" name="file1" dev="loop3" ino=30 res=0 errno=0
[  237.623455][T10981] loop2: detected capacity change from 0 to 1024
[  237.657084][T10981] hfsplus: unable to find HFS+ superblock
[  237.766756][   T34] audit: type=1107 audit(1764022616.817:65): pid=10982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  237.906981][T10987] netlink: 'syz.2.1892': attribute type 21 has an invalid length.
[  237.958383][T10987] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1892'.
[  238.169965][T10990] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input23
[  238.441591][T11000] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1898'.
[  238.445848][ T5860] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  238.685755][ T5860] usb 6-1: Using ep0 maxpacket: 16
[  238.692795][ T5860] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  238.701738][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.704431][ T5860] usb 6-1: Product: syz
[  238.707082][ T5860] usb 6-1: Manufacturer: syz
[  238.708551][ T5860] usb 6-1: SerialNumber: syz
[  238.711804][ T5860] usb 6-1: config 0 descriptor??
[  238.716220][T11019] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1906'.
[  238.719832][ T5860] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  238.723337][ T5860] usb 6-1: Detected FT-X
[  238.976107][ T5860] ftdi_sio ttyUSB0: Unable to read latency timer: -121
[  239.180872][ T5860] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  239.189066][ T5860] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71
[  239.192745][ T5860] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  239.206063][ T5860] usb 6-1: USB disconnect, device number 5
[  239.210503][ T5860] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  239.216336][ T5860] ftdi_sio 6-1:0.0: device disconnected
[  239.295156][T11034] loop2: detected capacity change from 0 to 32768
[  239.299793][T11034] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1913 (11034)
[  239.316107][T11034] BTRFS info (device loop2): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  239.320715][T11034] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  239.377286][T11034] BTRFS info (device loop2): enabling ssd optimizations
[  239.380421][T11034] BTRFS info (device loop2): turning on async discard
[  239.383505][T11034] BTRFS info (device loop2): enabling free space tree
[  239.387253][T11034] BTRFS info (device loop2): use lzo compression, level 1
[  239.454817][ T5815] BTRFS info (device loop2): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  239.657596][T11055] tipc: Started in network mode
[  239.659160][T11055] tipc: Node identity ac14140f, cluster identity 4711
[  239.661456][T11055] tipc: New replicast peer: 255.255.255.255
[  239.663700][T11055] tipc: Enabled bearer <udp:syz2>, priority 10
Connection to localhost closed by remote host.
[  240.131213][ T6110] syz_tun (unregistering): left allmulticast mode
[  240.183451][T10992] ==================================================================
[  240.186782][T10992] BUG: KASAN: slab-use-after-free in __mutex_lock+0x801/0x1350
[  240.189878][T10992] Read of size 8 at addr ffff8881208200a0 by task khidpd_10cf0005/10992
[  240.194057][T10992] 
[  240.195227][T10992] CPU: 1 UID: 0 PID: 10992 Comm: khidpd_10cf0005 Not tainted syzkaller #0 PREEMPT(full) 
[  240.195244][T10992] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  240.195252][T10992] Call Trace:
[  240.195259][T10992]  <TASK>
[  240.195264][T10992]  dump_stack_lvl+0x189/0x250
[  240.195289][T10992]  ? __kasan_check_byte+0x12/0x40
[  240.195302][T10992]  ? __pfx_dump_stack_lvl+0x10/0x10
[  240.195318][T10992]  ? lock_release+0x4b/0x3e0
[  240.195330][T10992]  ? __virt_addr_valid+0x4a5/0x5c0
[  240.195347][T10992]  print_report+0xca/0x240
[  240.195360][T10992]  ? __mutex_lock+0x801/0x1350
[  240.195370][T10992]  kasan_report+0x118/0x150
[  240.195383][T10992]  ? __mutex_lock+0x801/0x1350
[  240.195395][T10992]  __mutex_lock+0x801/0x1350
[  240.195407][T10992]  ? __mutex_lock+0x5bb/0x1350
[  240.195419][T10992]  ? l2cap_unregister_user+0x6a/0x1b0
[  240.195435][T10992]  ? __pfx___mutex_lock+0x10/0x10
[  240.195447][T10992]  ? __pfx___timer_delete_sync+0x10/0x10
[  240.195464][T10992]  l2cap_unregister_user+0x6a/0x1b0
[  240.195478][T10992]  hidp_session_thread+0x3c9/0x410
[  240.195541][T10992]  ? __pfx_hidp_session_thread+0x10/0x10
[  240.195564][T10992]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  240.195580][T10992]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  240.195596][T10992]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  240.195610][T10992]  ? __kthread_parkme+0x7b/0x200
[  240.195624][T10992]  ? __kthread_parkme+0x1a1/0x200
[  240.195683][T10992]  kthread+0x711/0x8a0
[  240.195701][T10992]  ? __pfx_hidp_session_thread+0x10/0x10
[  240.195716][T10992]  ? __pfx_kthread+0x10/0x10
[  240.195731][T10992]  ? _raw_spin_unlock_irq+0x23/0x50
[  240.195746][T10992]  ? lockdep_hardirqs_on+0x9c/0x150
[  240.195762][T10992]  ? __pfx_kthread+0x10/0x10
[  240.195777][T10992]  ret_from_fork+0x4bc/0x870
[  240.195790][T10992]  ? __pfx_ret_from_fork+0x10/0x10
[  240.195804][T10992]  ? __switch_to_asm+0x39/0x70
[  240.195814][T10992]  ? __switch_to_asm+0x33/0x70
[  240.195824][T10992]  ? __pfx_kthread+0x10/0x10
[  240.195838][T10992]  ret_from_fork_asm+0x1a/0x30
[  240.195854][T10992]  </TASK>
[  240.195858][T10992] 
[  240.279758][T10992] Allocated by task 9953:
[  240.281468][T10992]  kasan_save_track+0x3e/0x80
[  240.283400][T10992]  __kasan_kmalloc+0x93/0xb0
[  240.285289][T10992]  __kmalloc_noprof+0x41d/0x800
[  240.287300][T10992]  hci_alloc_dev_priv+0x28/0x2060
[  240.289252][T10992]  vhci_create_device+0x120/0x650
[  240.291264][T10992]  vhci_write+0x3ce/0x4a0
[  240.293155][T10992]  vfs_write+0x5c9/0xb30
[  240.295104][T10992]  ksys_write+0x145/0x250
[  240.296921][T10992]  do_syscall_64+0xfa/0xfa0
[  240.298810][T10992]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.301116][T10992] 
[  240.302072][T10992] Freed by task 10818:
[  240.303697][T10992]  kasan_save_track+0x3e/0x80
[  240.305561][T10992]  kasan_save_free_info+0x46/0x50
[  240.307548][T10992]  __kasan_slab_free+0x5c/0x80
[  240.309383][T10992]  kfree+0x19a/0x6d0
[  240.310964][T10992]  bt_host_release+0x82/0x90
[  240.312753][T10992]  device_release+0x9c/0x1c0
[  240.314671][T10992]  kobject_put+0x22b/0x480
[  240.316575][T10992]  vhci_release+0x15a/0x1a0
[  240.318523][T10992]  __fput+0x44c/0xa70
[  240.320334][T10992]  task_work_run+0x1d4/0x260
[  240.322541][T10992]  do_exit+0x6b5/0x2300
[  240.324476][T10992]  do_group_exit+0x21c/0x2d0
[  240.326626][T10992]  get_signal+0x1285/0x1340
[  240.328570][T10992]  arch_do_signal_or_restart+0xa0/0x790
[  240.330805][T10992]  exit_to_user_mode_loop+0x72/0x130
[  240.332935][T10992]  do_syscall_64+0x2bd/0xfa0
[  240.335069][T10992]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.337502][T10992] 
[  240.338514][T10992] Last potentially related work creation:
[  240.341237][T10992]  kasan_save_stack+0x3e/0x60
[  240.343358][T10992]  kasan_record_aux_stack+0xbd/0xd0
[  240.345262][T10992]  insert_work+0x3d/0x330
[  240.346787][T10992]  __queue_work+0xbaf/0xfb0
[  240.348354][T10992]  queue_work_on+0x181/0x270
[  240.349967][T10992]  process_scheduled_works+0xae1/0x17b0
[  240.351807][T10992]  worker_thread+0x8a0/0xda0
[  240.353258][T10992]  kthread+0x711/0x8a0
[  240.354793][T10992]  ret_from_fork+0x4bc/0x870
[  240.356281][T10992]  ret_from_fork_asm+0x1a/0x30
[  240.357847][T10992] 
[  240.358581][T10992] Second to last potentially related work creation:
[  240.361155][T10992]  kasan_save_stack+0x3e/0x60
[  240.362825][T10992]  kasan_record_aux_stack+0xbd/0xd0
[  240.364631][T10992]  insert_work+0x3d/0x330
[  240.366091][T10992]  __queue_work+0xcd2/0xfb0
[  240.367487][T10992]  call_timer_fn+0x17e/0x5f0
[  240.368896][T10992]  __run_timer_base+0x646/0x860
[  240.370452][T10992]  run_timer_softirq+0xb7/0x180
[  240.372002][T10992]  handle_softirqs+0x286/0x870
[  240.373539][T10992]  __irq_exit_rcu+0xca/0x1f0
[  240.375075][T10992]  irq_exit_rcu+0x9/0x30
[  240.376553][T10992]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  240.378319][T10992]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  240.380125][T10992] 
[  240.380855][T10992] The buggy address belongs to the object at ffff888120820000
[  240.380855][T10992]  which belongs to the cache kmalloc-8k of size 8192
[  240.385205][T10992] The buggy address is located 160 bytes inside of
[  240.385205][T10992]  freed 8192-byte region [ffff888120820000, ffff888120822000)
[  240.389419][T10992] 
[  240.390166][T10992] The buggy address belongs to the physical page:
[  240.392155][T10992] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888120824000 pfn:0x120820
[  240.395441][T10992] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  240.398674][T10992] flags: 0x17ff00000000240(workingset|head|node=0|zone=2|lastcpupid=0x7ff)
[  240.401892][T10992] page_type: f5(slab)
[  240.403552][T10992] raw: 017ff00000000240 ffff888100042280 ffffea00044d8810 ffffea00007aa410
[  240.406798][T10992] raw: ffff888120824000 0000000000020001 00000000f5000000 0000000000000000
[  240.409704][T10992] head: 017ff00000000240 ffff888100042280 ffffea00044d8810 ffffea00007aa410
[  240.412358][T10992] head: ffff888120824000 0000000000020001 00000000f5000000 0000000000000000
[  240.415117][T10992] head: 017ff00000000003 ffffea0004820801 00000000ffffffff 00000000ffffffff
[  240.417942][T10992] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  240.421810][T10992] page dumped because: kasan: bad access detected
[  240.423958][T10992] page_owner tracks the page as allocated
[  240.426033][T10992] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9712, tgid 9711 (syz.1.1443), ts 193447329924, free_ts 193368302116
[  240.432141][T10992]  post_alloc_hook+0x240/0x2a0
[  240.433627][T10992]  get_page_from_freelist+0x2365/0x2440
[  240.435315][T10992]  __alloc_frozen_pages_noprof+0x181/0x370
[  240.437130][T10992]  alloc_pages_mpol+0x232/0x4a0
[  240.438906][T10992]  allocate_slab+0x96/0x350
[  240.440706][T10992]  ___slab_alloc+0xf56/0x1990
[  240.442518][T10992]  __slab_alloc+0x65/0x100
[  240.444044][T10992]  __kmalloc_noprof+0x47d/0x800
[  240.445870][T10992]  read_all_xattrs+0x220/0x580
[  240.447525][T10992]  __f2fs_setxattr+0x1f5/0x1000
[  240.449344][T10992]  f2fs_setxattr+0x1f7/0x380
[  240.450924][T10992]  __f2fs_set_acl+0xbd1/0xe10
[  240.452410][T10992]  vfs_remove_acl+0x48c/0x700
[  240.453855][T10992]  ovl_workdir_create+0x644/0x8b0
[  240.455524][T10992]  ovl_get_indexdir+0x2b6/0x5f0
[  240.457027][T10992]  ovl_fill_super+0x31fb/0x3da0
[  240.458546][T10992] page last free pid 9725 tgid 9725 stack trace:
[  240.460550][T10992]  __free_frozen_pages+0xbc8/0xd30
[  240.462303][T10992]  __put_partials+0x146/0x170
[  240.463775][T10992]  put_cpu_partial+0x1f2/0x2e0
[  240.465293][T10992]  __slab_free+0x2b9/0x390
[  240.466663][T10992]  qlist_free_all+0x97/0x140
[  240.468060][T10992]  kasan_quarantine_reduce+0x148/0x160
[  240.469727][T10992]  __kasan_slab_alloc+0x22/0x80
[  240.471210][T10992]  kmem_cache_alloc_noprof+0x37d/0x700
[  240.472859][T10992]  getname_flags+0xb8/0x540
[  240.474394][T10992]  user_path_at+0x24/0x60
[  240.475832][T10992]  do_faccessat+0x5d8/0xd90
[  240.477433][T10992]  __x64_sys_access+0x61/0x70
[  240.478964][T10992]  do_syscall_64+0xfa/0xfa0
[  240.480431][T10992]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.482522][T10992] 
[  240.483492][T10992] Memory state around the buggy address:
[  240.485488][T10992]  ffff88812081ff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  240.488029][T10992]  ffff888120820000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  240.490881][T10992] >ffff888120820080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  240.493579][T10992]                                ^
[  240.495518][T10992]  ffff888120820100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  240.498636][T10992]  ffff888120820180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  240.501553][T10992] ==================================================================
[  240.505492][T10992] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  240.508306][T10992] CPU: 1 UID: 0 PID: 10992 Comm: khidpd_10cf0005 Not tainted syzkaller #0 PREEMPT(full) 
[  240.511771][T10992] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  240.515434][T10992] Call Trace:
[  240.516759][T10992]  <TASK>
[  240.517956][T10992]  dump_stack_lvl+0x99/0x250
[  240.519716][T10992]  ? __asan_memcpy+0x40/0x70
[  240.521437][T10992]  ? __pfx_dump_stack_lvl+0x10/0x10
[  240.523341][T10992]  ? __pfx__printk+0x10/0x10
[  240.525082][T10992]  vpanic+0x237/0x6d0
[  240.526492][T10992]  ? __pfx_vpanic+0x10/0x10
[  240.528106][T10992]  panic+0xb9/0xc0
[  240.529454][T10992]  ? __pfx_panic+0x10/0x10
[  240.531018][T10992]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  240.533020][T10992]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  240.535033][T10992]  ? __mutex_lock+0x801/0x1350
[  240.536927][T10992]  check_panic_on_warn+0x89/0xb0
[  240.538739][T10992]  ? __mutex_lock+0x801/0x1350
[  240.540336][T10992]  end_report+0x78/0x160
[  240.541796][T10992]  kasan_report+0x129/0x150
[  240.543342][T10992]  ? __mutex_lock+0x801/0x1350
[  240.544967][T10992]  __mutex_lock+0x801/0x1350
[  240.546532][T10992]  ? __mutex_lock+0x5bb/0x1350
[  240.548169][T10992]  ? l2cap_unregister_user+0x6a/0x1b0
[  240.549984][T10992]  ? __pfx___mutex_lock+0x10/0x10
[  240.551866][T10992]  ? __pfx___timer_delete_sync+0x10/0x10
[  240.553918][T10992]  l2cap_unregister_user+0x6a/0x1b0
[  240.555857][T10992]  hidp_session_thread+0x3c9/0x410
[  240.557742][T10992]  ? __pfx_hidp_session_thread+0x10/0x10
[  240.559783][T10992]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  240.561962][T10992]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  240.564437][T10992]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  240.566627][T10992]  ? __kthread_parkme+0x7b/0x200
[  240.568450][T10992]  ? __kthread_parkme+0x1a1/0x200
[  240.570186][T10992]  kthread+0x711/0x8a0
[  240.571669][T10992]  ? __pfx_hidp_session_thread+0x10/0x10
[  240.573699][T10992]  ? __pfx_kthread+0x10/0x10
[  240.575837][T10992]  ? _raw_spin_unlock_irq+0x23/0x50
[  240.578128][T10992]  ? lockdep_hardirqs_on+0x9c/0x150
[  240.580342][T10992]  ? __pfx_kthread+0x10/0x10
[  240.582103][T10992]  ret_from_fork+0x4bc/0x870
[  240.583801][T10992]  ? __pfx_ret_from_fork+0x10/0x10
[  240.585663][T10992]  ? __switch_to_asm+0x39/0x70
[  240.587383][T10992]  ? __switch_to_asm+0x33/0x70
[  240.589087][T10992]  ? __pfx_kthread+0x10/0x10
[  240.590807][T10992]  ret_from_fork_asm+0x1a/0x30
[  240.592471][T10992]  </TASK>
[  240.594498][T10992] Kernel Offset: disabled
[  240.596326][T10992] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:16:59  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffffff8df3d6a0 RCX=0000000000000002 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff888160acba00 RBP=ffffffff81739c45 RSP=ffffc90000007728
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc90000007978 R11=ffffffff81ac4200
R12=0000000000000002 R13=ffffffff8df3d6a0 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff819d6834 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818eb34000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f60de117d60 CR3=0000000173b18000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000561369e24870 0000561369e388c0
XMM06=0000561369e27aa0 0000561369e222c0 XMM07=0000561369e17780 0000561369e14220
XMM08=ffffffffffffff00 ffffffff00000000 XMM09=0000000000000061 0000000033327475
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff335e760 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99af4170 RSP=ffffc90003d5f2f0
R8 =ffff888105fa0237 R9 =1ffff11020bf4046 R10=dffffc0000000000 R11=ffffffff8515d320
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99af3ee0 R15=0000000000000000
RIP=ffffffff8515d397 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a9f34000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f956d717d60 CR3=0000000175238000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
