last executing test programs:

46.350592903s ago: executing program 1 (id=250):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x8, 0x6}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28)

46.279268591s ago: executing program 1 (id=251):
syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0016bf1f4ed7582c06c6fcb782cff7a2f78ebdc39b39ae16c775f06ea395d07e175b9cc30d42cc0df3760a23804936b4f0f28ebe71da79060000000000000085184193", @ANYRES32, @ANYRES8, @ANYRESOCT], 0x1, 0xa06, &(0x7f0000000b00)="$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")

46.117589775s ago: executing program 1 (id=252):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000010600), &(0x7f0000000100)='./file2\x00', 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="002afdae3565781009f76e97b48ab97bfb17214266c0e5b703257a3d77ba65f617bee62a9d1612402e69cc86c8fce5989be545ce26a9c4f5f2165f08000000b40d94de59edbb0507bf01e357e13bef384234e823d8137beac1c0afb4464b4d16006b7691ea638989f6f567a2817567b9c1606c0a15f5a0dbce62f673cd22ef303bcddff402dacf8c1372a5e8ff5bc596a5375037cf99b4ee7eb6f41587c2904d5cc071c32bc429a286bddc094a"], 0x1, 0x10600, &(0x7f0000020cc0)="$eJzs3D1vW1UYB/DHCX2llAr1hQHElRBSItVWnb4IFlSgFSDaqqIwMIFju5Zb2zeK3cR0YYEBiYmFL8EEn4EFdlZY2FhAYqso8r0niEAlIHHjQH4/6eZ/7vG5j8+xvBzf6AawZx3Lfvm5EkfjUETMR8SRiKJdSUfhYhlPRsQzqWsuHZXU/3vH/og4HBFHJ8XLmpX00lO/3vv+i2+uPP3xd59++8FnP92YzYqB3eC5iOivlO31fpl5p8xbqb+x1i2yf24tZflC/3Y6z8tcby8XFdYbG+MaRZ7tlOPzlTvDSd7sNZqT7HRvFv0rg/INh2udjTrFBbcaq8V5q71cZHeYF9m5W85rnPLucFTWaaV67xflYzTayLK/PW6X61m5XWRzMEr9Zd281R5Pci1lerto5r1WMY/lLX/Mu96V7uDOOFtrrw67+SA7X6s/X6tfqNZX81Z71D5XbfRbF85lC53eZFh11G70L3byvNNr15p5fzFb6DSb1Xo9W7jUXu42Blm9XjtbO1M9v5hap7NXr72d9VrZwiRf7g7ujLq9YXYzX83KKxazpdrZFxazZ+vZjavXs+tvXr589fpb715659pLV19/JQ36y7SyhaUzS0vV+pnqUn1xqys/fb+0V9dfGle2dz17nO8PwL+2lf3/nP0/sE32//b/saf3/9Yf9v9sl+8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCe9cO+L18rGsfK80dT/2Op64mIOBURJyPiRETcf4D52L+p5vGIqKT2g8bv+9McvqpEUWFyzYF0HI6Ii+m49/jD/hQAAADg/+vzrz/8KGJ+0iz+vDjrCbGT0o82B6dVr/jJ55FpVTteFBtPqdqJjZJTcTIi9h37cUrVTkXE3JH3plTtH5nfFAf/EJUy5nZyNgAAwM7YvBOY2u4NAACAXeeTWU+A2Sju16b/xU/3gg+UkW4IHto4e2MGswMAAACmoTLrCQAAAAAPXbH///vn/817/h8AAAD8h5XP/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA3du7mNnEgigP4A9YL+6VFKz5a4bTaIweK2BJyTAFJN7lRQyREHeSWEiKIsCdSHHGI5DFO0O8nmRlb8Nczt+exBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoE0PxXp5t725bZqzPzST524AAACAU3bFellOxtX5j3T9V7r0JyLmETGLiGlEnOrdB/G1ljmJiF6an/p+8aaG+4gy4fibYTq+R8S/dDz9bvtfAAAAgMu13SxWEYPjtPz423VBnFN6aDPKlVc+8vmSK21Shl1nSpu+RGYxi4hi/JgpbR4R/Z//M6W9y6A2jF4NvWron7MaAADgPOqdQLbuDQAAgA/nqusC6Ea5XpvexU9rwcNqSAuC32pnAAAAwCfU67oAAAAAoHVl/2//PwAAALhs1f5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtGlXrJfbzWLVNGd/aCbP3QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLM/LykYwkAQBvt/qncK3v9WSoNudeWuCgIfM4QQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCuv4+R9xqexJvl22vh1PJL8u2pMXTXmrhtLL4zb57bnfwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALCzPy8nAAIxGAbjW3ta7L8mL8oPevYmCDMgfCQEWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBvuvur/okhsVfVmGliyrhV1ZxVYskqseYgseWgvf3tOD94EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMUOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRX2590mYiCMwuj1AAInBFACucWjBhIiBCXwkJAsuQYKoCESIlKLRtgWdiXvON7MG+w5yf2CCeYHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OCsd744StKkzFlSHj4v/4+TnKR8jeP96ZTN9+pvONvm88/vY82LPF21Sdo0S5wDALC4bt4pzvP+0b9dJ9Pe1L2te1e3exn61/1+GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA27NzPSxRvHAfwZ1d3v1+7dekQBWVBQtT6A3EVL0WBBf0D3hbdRFpL1ENKEHaRLkGX7l261M1Tp/6DTl0iCuq+QUEEQRi7O2OPqbFedlZ6veCZ+TgMM88zB+E9n1EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOoL4ezqd1LoRwvPd33fD2y72Zvfb1+8dG0/Ho5PPF+JqNSxRCCDfna9XBDq6lm50Nw839h88PB+Jn+Od5y6trtyq1WnVJoVAotosMfmkBAHBoFZLRyPUfC5tTjWO5yRC2nu7M/+eiOrSZ/7eeDLyO7xXn/6GOrbC7pfl/+vrGxN/yf2llYbG0vLp2YX6hMledq94eGhsfGxwpjw6PlZrvU0reqgAAALC/YjLi/J+f3N3/PxLVoc38/+rlten4Xj3y/y5p/r/c3/+svf5/BpMEAAD4Rxw99e1rbo/juWIx3K2srCwNtbbbPw+3thlM9cD+S0ac/3sms54VAAAA0An19dyO/v9sVIc2+//vv185EV+zJ4TQl/T/L87cqc12bjldK+3/T1yq3Mj67/8zWD4AAAAd0peMuP9faH7/nz+dnpMPIQycadXJvwFsK///fDD+Jr5X/P3/SOeW2JXy5dbzSPP/xrsX8/vl/+a55RB6yxlNFgAAgEPv/2Q08v+nwubU0o/HV4u+/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/s2DFKM0EUB/BJNvm+RjEgiKWFNhaigmAVsBAkHsJCFASPEBAPoOBZLLyDSOqk9AApvIHMZEfCNirIrobfDyb/R9hk3840eQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE9Nj8JGrov40pvV7fK98dvwPOakkumzN2sHccW6VW/bf856mc+T06fx3B62DpvrCQAAgMVT5Pk+hPDafTyJ2e6n+X8rXxNn/uHyrM7zfHXuz5ln/7iWHoqzjxv1ZvfphhAur64vdmt7wt9tM+ynHLxs38/vYfW6lS98VyedT/qHpkjH1h7crk67addbd6PR8b9U/v/5pwAAvmsnZ1nk30cx95psDICF1SlXmJv/i36zPQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADU4T0AAP//F6aahA==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000340)={0x2, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)

45.305208194s ago: executing program 1 (id=254):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000000300)={[{@volume={'volume', 0x3d, 0x3e}}, {@gid}, {@dmode={'dmode', 0x3d, 0x4}}, {@rootdir={'rootdir', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@unhide}, {@noadinicb}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@longad}]}, 0x1, 0xc32, &(0x7f0000000e00)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQIm1GFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sXxr5445f4PAE+Uy/7/HwAAAAAAAAAAAAAA9rsURTwdKeYurqXJ6n1X/UJn8OatidGxrasdTFXNgap8+VM/eer0mS+9NHK2lxc6Mx9R/377bLwxfvl849XZG3Pz7YWF9lRjYqZzdXaqveMj7Lb+ZseqE9C48ebNqWvXFhqnXjy9Yfet4Q+HnjoyfG7k+ePP9cpOjI6Njd8pUu8vX7vnhnRtN8PjQBRxPFK88L2fplZEFLH7c1F/sGO/2cGqE8eqTkyMjlUdme60ZhbLnZd6J6KIaPRVavbO0dZjEbXBB9qH7TUjlsrmlw0+VnZvfK4137oy3W5cas0vdhY7szOXUre1ZX8aUcTZFLEcEatDdx9uMIqoRYrvHF5LVyJioHcevlhNDN6+HcUe9nEHynY2BiOWi0dgzPaxoSji9Ujxs/eOxtV8namuNV+IeL3MH0S8U+YrEan8YpyJ+GCL7xGPploU8efl+J9bS1PV9aB3XbnwtcZXZq7N9pXtXVd+yfvDXVeKh3R/OLgpH4x9fm2qRxGt6oq/lu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2Kp2Nmc3AN5YuCldCmlhzyX+ElWjyL+OM//+9bDbgwAAAAAAAAAAAAAAAAAAMATrYifRIqX3z+alqN/TfHOzPXG5daV6e6qsL21f3trpq+vr683UjebOSdzLuVczrmSczVnFLl+zmbOyZxLOZdzruRczRkDuX7OZs7JnEs5l3Ou5FzNGbVcP2cz52TOpZzLOVdyruaMfbJ2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaEZPRzZWhh906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0lIr4fqRo/EHz9rZaRKTq366j5S9nonmgzE9Gc6TMV6J5PmerylrzWw+h/ezOYCrix5FiqP7u7QHP4z/YfXf7axDvfPPOu8/WujnQ2zn84dBTRw6fGxn7tWe3e522asCxC52Zm7caE6NjY+N9m2v50z/Zt204f25xf7pORCy89fabrenp9vy9vyi/Aruo/gi9SLUnpadeVC+iti+a8XD6zhOgvP9/ECl++/1/793wu/f/evy/7rvbd/j4+Z/cuf+/vPlAO7z/1zbXy/f/8p6+1f3/6b5tL+ffjQzWIuqLN+YGj0TUF956+3jnRut6+3p75syJE18eGfny6RODByLq1zrT7b5X9+V0AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcquZrDZ8bef74cwMxUM232jBv+43xy+cbr87emJtvLyy0pxoTM52rs1PtnX5cvZruNTE6tied+VgH97j9B+uvzs69Nd+5/oeLW+4/VD9/ZWFxvnV1691xMIqIZv+WY1WDJ0bHqkZPd1ozVdVLW06m/+UNpiL+I1JcPdNIn8/b8vz/zTP8N8z/X9p8oD2a//+Jvm3lZ6ZUxM8jxW/9xbPx+aqdh+Kuc5bL/U2kOHb2c7lcHCjL9drQfa5Ad2ZgWfZ/IsU//GJj2d58yKfvlD254xP7iCjH/3Ck+P6ffTd+PW/b+PyHrcf/0OYD7dH4P9O37dCG5xXsuuvk8T8eKV55+t34jbzto57/0Xv2xtFc+PbzOfZo/D/Vt204f+5v3p+uAwAAAAAAAAAAPNIGUxF/Gyl+OFZLL+VtO/n7f1ObD7RHf//r033bpu7PekUf+2LXJxUAAAAA9onBVMRPIsX1xXdvz6HeOP+7b/7n79yZ/zmaNu2t/pzvV6rnBtzPP//rN5w/d3L33QYAAAAAAAAAAAAAAAAAAIB9JaUiXsrrqU9W8/mntl1PfSVSvPZfL+Ry6UhZrrcO/HD1a/3i7Mzx89PTs1dbi60r0+3G+Fzrarus+0ykWPvrz+W6RbW+em+9+e4a73fWYp+PFGN/1yvbXYu9tzb5M72yS+2TZdlPRIr//PuNZXvrWH/qznFPlWX/KlJ8/Z+2LnvkTtnTZdnvRooffb3RK3uoLNt7Puqn75R98epssQejAgAAAAAAAAAAAAAAAAAAwJNmMBXxp5Hiv28s357Ln9f/H+x7W3nnm33r/W9yq1rnf7ha/3+71/ey/n/1XIGl7T4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTymKeDtSzF1cSytD5fuu+oXOzM1bE6NjW1c7mKqaA1X58qd+8tTpM196aeRsLz+6/v32mXhj/PL5xquzN+bm2wsL7anGxEzn6uxUe8dH2G39zY5VJ6Bx482bU9euLTROvXh6w+5bwx8OPXVk+NzI88ef65WdGB0bG+8rUxu850+/S9pm+4Eo4i8jxQvf+2n64VBEEbs/Fx/z3dlrB6tOHKs6MTE6VnVkutOaWSx3XuqdiCKi0Vep2TtHD2AsdqUZsVQ2v2zwsbJ743Ot+daV6XbjUmt+sbPYmZ25lLqtLfvTiCLOpojliFgduvtwg1HEm5HiO4fX0j8PRQz0zsMXL45/9cSp7dtR7GEfd6BsZ2MwYrn4qDHbosNsMBRF/GOk+Nl7R+NfhiJq0f2JL0S8XuYPIt6J7nin8otxJuIDp/WxUYsi/rcc/3Nr6b2h8nrQu65c+FrjKzPXZvvK9q4rj/z94UHa5/eTehTxo+qKv5b+1X/XAAAAAAAAAAAAAAAAAPtIEb8aKV5+/2iq5gffnlPcmbneuNy6Mt2d1teb+9ebM72+vr7eSN1s5pzMuZRzOedKztWcUeT6OZtl1tfXJ/P7pZzLOVdyruaMgVw/ZzPnZM6lnMs5V3Ku5oxarp+zmXMy51LO5ZwrOVdzxj6ZuwcAAAAAAAAAAAAAAAAAADxeiuqfFN/+xlpaH6rWlx7o7VuxHuhj7/8CAAD//0pa+Ck=")
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x1a06496, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})

44.730205468s ago: executing program 1 (id=256):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xa8201, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd)
r4 = socket$inet6(0xa, 0x3, 0x7)
syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x60401)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3, 0x0, 0xff, 0x0, 0xffc0, 0x3}, &(0x7f0000000180)=0x20)
add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4004000)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

42.865546497s ago: executing program 1 (id=273):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r4 = io_uring_setup(0x4577, &(0x7f0000000540)={0x0, 0x988d, 0x8000, 0x2, 0x2be})
io_uring_setup(0x7fd0, &(0x7f00000004c0)={0x0, 0x3edc, 0x2, 0x1, 0x2fa, 0x0, r4})

42.646978731s ago: executing program 32 (id=273):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r4 = io_uring_setup(0x4577, &(0x7f0000000540)={0x0, 0x988d, 0x8000, 0x2, 0x2be})
io_uring_setup(0x7fd0, &(0x7f00000004c0)={0x0, 0x3edc, 0x2, 0x1, 0x2fa, 0x0, r4})

2.786200525s ago: executing program 2 (id=638):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0x5411, 0x1000000000000)

2.690961084s ago: executing program 2 (id=641):
r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
mq_notify(r0, &(0x7f00000000c0)={0x0, 0xc, 0x1})
mq_notify(r0, &(0x7f0000000140)={0x0, 0x2b})

2.640962293s ago: executing program 2 (id=643):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "486aa195"}]}}, 0x0}, 0x0)

1.038365865s ago: executing program 2 (id=659):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x65}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

890.583147ms ago: executing program 2 (id=661):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x8, 0x0, 0xfffffdfc}, 0x0, 0x0)
r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='X', 0x1, 0xfffffffffffffffe)
r4 = add_key$user(&(0x7f0000000640), &(0x7f0000000540), &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r4, r4}, &(0x7f0000000180)=""/82, 0x52, &(0x7f00000000c0)={&(0x7f0000000100)={'md5-generic\x00'}})

594.114292ms ago: executing program 3 (id=662):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000140)={0x18, 0x1, 0x0, 0x204, 0x0, 0x1})

327.872036ms ago: executing program 0 (id=663):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0xadda, @empty, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x28}}], 0x1, 0x40894)

241.571761ms ago: executing program 0 (id=664):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x4, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b400000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

241.285874ms ago: executing program 3 (id=665):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)

241.122509ms ago: executing program 0 (id=666):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)={0x1c, 0x5e, 0xe25, 0x0, 0x3, "", [@nested={0xc, 0x8a, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x3}]}]}, 0x1c}], 0x1}, 0x0)

191.368467ms ago: executing program 3 (id=667):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0x200000000000000, 0xfffffff8}, {0xff03901000000000, 0x109003ff}, 0xc, 0x6})

191.026699ms ago: executing program 0 (id=668):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000000)={0x12f, &(0x7f0000000080)=[{}, {}, {}]})

141.648015ms ago: executing program 3 (id=669):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x28, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10)
sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840)

141.286623ms ago: executing program 0 (id=670):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
eventfd2(0x8, 0x80001)
epoll_create(0x10000)
socket$kcm(0xa, 0x2, 0x73)
socket$key(0xf, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x4000)

9.449503ms ago: executing program 0 (id=671):
pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="7b3ff5898274a62148cca768b50b721024a025355567c9788d2213a947477fdd25f9de31e54b79efeff19caeed01345d740f46dd9d12ea784082521d", 0x3c}], 0x1, 0x9, 0x4)
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0x40405515, &(0x7f0000000140))

9.218845ms ago: executing program 3 (id=672):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)='LLLLL', 0x5, 0x2})
ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x6, 0x1f})

7.207089ms ago: executing program 3 (id=673):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 2 (id=674):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[@ANYBLOB="80020000160001000000001000000000fe8000000000000000000000000000aaff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000a0000000000000000000000000000000000000008001f00010000000c0015005c0735"], 0x280}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="f8000000160001000000000000000000ff010000000000000000000000000001ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000000100000000000000003300000000000000000000000000ffffac14142900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000820000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xf8}}, 0x0)

kernel console output (not intermixed with test programs):

  ................
[   78.694800][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   78.697554][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   78.700330][ T3029] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x4 len 4 error 74
[   78.704232][ T3029] XFS (loop2): page discard on page ffffea000474dc00, inode 0x1806, pos 32768.
[   78.707440][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   78.710920][ T3029] XFS (loop2): Unmount and run xfs_repair
[   78.712791][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   78.715154][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   78.717895][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   78.720655][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   78.723651][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   78.726815][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   78.729632][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   78.732837][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   78.735654][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   78.738627][ T3029] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x4 len 4 error 74
[   78.742768][ T3029] XFS (loop2): page discard on page ffffea000474dc40, inode 0x1806, pos 36864.
[   78.746559][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   78.750755][ T3029] XFS (loop2): Unmount and run xfs_repair
[   78.753228][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   78.756100][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   78.759534][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   78.763199][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   78.766625][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   78.770038][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   78.773545][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   78.777058][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   78.780350][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   78.784801][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   78.788927][ T3029] XFS (loop2): Unmount and run xfs_repair
[   78.791113][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   78.793732][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   78.796861][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   78.800241][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   78.804414][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   78.807817][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   78.811552][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   78.814888][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   78.817841][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   78.821456][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   78.825959][ T3029] XFS (loop2): Unmount and run xfs_repair
[   78.828420][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   78.830992][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   78.842662][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   78.845734][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   78.848655][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   78.851588][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   78.858104][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   78.861634][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   78.865165][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   78.868805][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   78.872870][ T3029] XFS (loop2): Unmount and run xfs_repair
[   78.874925][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   78.877393][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   78.880411][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   78.886199][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   78.889223][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   78.903532][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   78.906609][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   78.909677][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   78.916004][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   78.919818][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   78.924988][ T3029] XFS (loop2): Unmount and run xfs_repair
[   78.927026][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   78.929979][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   78.933425][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   78.936705][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   78.939722][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   78.942508][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   78.945684][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   78.949191][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   78.951952][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   78.956432][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   78.959868][ T3029] XFS (loop2): Unmount and run xfs_repair
[   78.961674][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   78.965198][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   78.968270][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   78.971259][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   78.974484][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   78.978043][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   78.981024][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   78.985737][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   78.988716][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   78.992335][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   78.997062][ T3029] XFS (loop2): Unmount and run xfs_repair
[   78.999224][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   79.001759][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   79.005395][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   79.008872][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   79.012064][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   79.015668][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   79.019023][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.022075][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.026691][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.030664][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   79.034556][ T3029] XFS (loop2): Unmount and run xfs_repair
[   79.036700][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   79.039399][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   79.042508][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   79.046589][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   79.049844][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   79.053267][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   79.056826][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.060075][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.064040][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.067826][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   79.072167][ T3029] XFS (loop2): Unmount and run xfs_repair
[   79.074401][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   79.077092][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   79.080176][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   79.086644][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   79.090029][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   79.093332][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   79.096509][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.099963][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.105315][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.109494][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   79.114007][ T3029] XFS (loop2): Unmount and run xfs_repair
[   79.116237][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   79.119143][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   79.124255][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   79.127649][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   79.131122][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   79.135653][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   79.138869][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.142200][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.147222][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.151135][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   79.156634][ T3029] XFS (loop2): Unmount and run xfs_repair
[   79.158773][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   79.161914][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   79.166187][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   79.169223][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   79.172237][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   79.176608][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   79.179682][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.183363][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.190102][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.193705][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   79.197827][ T3029] XFS (loop2): Unmount and run xfs_repair
[   79.200043][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   79.204406][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   79.207683][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   79.210575][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   79.214112][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   79.217310][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   79.222977][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.226758][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.230469][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.237699][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   79.242197][ T3029] XFS (loop2): Unmount and run xfs_repair
[   79.246875][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   79.250037][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   79.260158][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   79.271506][ T6475] loop0: detected capacity change from 0 to 512
[   79.273062][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   79.278341][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   79.281989][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   79.287072][ T6475] EXT4-fs (loop0): external journal device major/minor numbers have changed
[   79.299839][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.308019][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.311638][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.324180][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   79.328736][ T3029] XFS (loop2): Unmount and run xfs_repair
[   79.331074][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   79.332112][ T6475] block device autoloading is deprecated and will be removed.
[   79.335297][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   79.349279][ T6475] syz.0.195: attempt to access beyond end of device
[   79.349279][ T6475] md185: rw=0, sector=2, nr_sectors = 2 limit=0
[   79.354443][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   79.356323][ T6475] EXT4-fs (loop0): couldn't read superblock of external journal
[   79.357795][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   79.366811][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   79.370755][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   79.402678][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.412693][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.424970][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.441291][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   79.457672][ T3029] XFS (loop2): Unmount and run xfs_repair
[   79.460086][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   79.469454][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   79.474921][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   79.478485][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   79.482054][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   79.489015][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   79.492794][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.496076][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.499219][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.505009][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   79.509726][ T3029] XFS (loop2): Unmount and run xfs_repair
[   79.512050][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   79.515449][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   79.519031][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   79.524591][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   79.528296][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   79.531975][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   79.537021][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.540746][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.548076][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.552806][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   79.557363][ T3029] XFS (loop2): Unmount and run xfs_repair
[   79.559735][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   79.565296][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   79.568952][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   79.572521][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   79.577328][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   79.580822][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   79.580864][ T2208] IPVS: starting estimator thread 0...
[   79.584007][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.584019][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.584027][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.584778][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   79.586834][ T6483] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   79.589975][ T3029] XFS (loop2): Unmount and run xfs_repair
[   79.607221][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   79.610192][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   79.614492][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   79.618707][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   79.622287][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   79.628743][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   79.632905][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.636446][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.639966][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.656120][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   79.661072][ T3029] XFS (loop2): Unmount and run xfs_repair
[   79.663473][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   79.666616][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   79.670156][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   79.678227][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   79.681805][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   79.685678][ T6485] IPVS: using max 58 ests per chain, 139200 per kthread
[   79.698485][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   79.702331][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.706617][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.710965][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.714756][  T791] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   79.720191][ T6489] warning: `syz.0.201' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   79.725640][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   79.729179][ T3029] XFS (loop2): Unmount and run xfs_repair
[   79.730949][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   79.734185][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   79.738138][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   79.741734][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   79.745645][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   79.751490][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   79.762672][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.766257][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.769781][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.776104][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   79.780755][ T3029] XFS (loop2): Unmount and run xfs_repair
[   79.786540][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   79.789595][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   79.793999][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   79.798273][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   79.802785][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   79.813107][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   79.816644][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.820174][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.825586][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.830011][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   79.834852][ T3029] XFS (loop2): Unmount and run xfs_repair
[   79.837143][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   79.840755][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   79.844947][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   79.854927][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   79.858510][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   79.862070][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   79.869703][  T791] usb 2-1: Using ep0 maxpacket: 32
[   79.873494][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.878795][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.883201][  T791] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[   79.886448][  T791] usb 2-1: config 0 has no interface number 0
[   79.889403][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.897791][  T791] usb 2-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[   79.909499][  T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.914061][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   79.918484][ T3029] XFS (loop2): Unmount and run xfs_repair
[   79.920726][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   79.923802][  T791] usb 2-1: Product: syz
[   79.925535][  T791] usb 2-1: Manufacturer: syz
[   79.927441][  T791] usb 2-1: SerialNumber: syz
[   79.931054][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   79.935784][  T791] usb 2-1: config 0 descriptor??
[   79.939047][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   79.941451][  T791] hub 2-1:0.89: bad descriptor, ignoring hub
[   79.945601][  T791] hub 2-1:0.89: probe with driver hub failed with error -5
[   79.948523][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   79.949899][  T791] option 2-1:0.89: GSM modem (1-port) converter detected
[   79.954017][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   79.959234][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   79.959640][  T791] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0
[   79.965110][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.971720][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.979459][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.986310][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   79.991022][ T3029] XFS (loop2): Unmount and run xfs_repair
[   79.994105][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   79.997875][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   80.001159][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   80.005131][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   80.008875][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   80.013067][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   80.016241][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.019244][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.022273][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.026441][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   80.030197][ T3029] XFS (loop2): Unmount and run xfs_repair
[   80.032164][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   80.035416][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   80.038318][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   80.041801][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   80.045341][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   80.048225][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   80.050974][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.054820][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.058627][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.062113][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   80.065727][ T3029] XFS (loop2): Unmount and run xfs_repair
[   80.067701][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   80.070126][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   80.073272][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   80.076414][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   80.079486][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   80.083954][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   80.087932][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.091640][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.096187][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.100626][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   80.105804][ T3029] XFS (loop2): Unmount and run xfs_repair
[   80.108138][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   80.111043][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   80.114953][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   80.118574][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   80.122147][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   80.125839][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   80.129357][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.133682][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.137230][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.143550][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   80.148239][ T3029] XFS (loop2): Unmount and run xfs_repair
[   80.150486][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   80.153709][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   80.157121][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   80.163150][ T2208] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   80.166213][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   80.169687][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   80.173972][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   80.177552][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.181062][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.184754][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.189126][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   80.193880][ T3029] XFS (loop2): Unmount and run xfs_repair
[   80.196217][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   80.199198][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   80.203692][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   80.207399][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   80.210930][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   80.214383][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   80.217411][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.220867][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.224122][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.227903][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   80.231969][ T3029] XFS (loop2): Unmount and run xfs_repair
[   80.234468][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   80.237426][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   80.240930][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   80.245014][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   80.248602][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   80.252208][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   80.255937][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.259543][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.263908][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.268316][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   80.273302][  T791] usb 2-1: USB disconnect, device number 5
[   80.277317][ T3029] XFS (loop2): Unmount and run xfs_repair
[   80.279732][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   80.281760][  T791] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[   80.286814][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   80.290445][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   80.292079][  T791] option 2-1:0.89: device disconnected
[   80.294215][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   80.294228][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   80.294237][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   80.294246][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.294254][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.294263][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.295591][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   80.324795][ T3029] XFS (loop2): Unmount and run xfs_repair
[   80.327173][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   80.330173][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   80.334033][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   80.337707][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   80.341391][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   80.345397][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   80.349499][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.353789][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.358157][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.362201][ T2208] usb 1-1: config 0 has an invalid interface number: 197 but max is 0
[   80.365883][ T2208] usb 1-1: config 0 has no interface number 0
[   80.368503][ T2208] usb 1-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8
[   80.372885][ T2208] usb 1-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[   80.374644][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   80.382175][ T3029] XFS (loop2): Unmount and run xfs_repair
[   80.385500][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   80.388818][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   80.389063][ T2208] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42
[   80.392511][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   80.399665][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   80.403860][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   80.404999][ T2208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.407484][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   80.410914][ T2208] usb 1-1: Product: syz
[   80.415308][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.419638][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.423009][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.426265][ T2208] usb 1-1: Manufacturer: syz
[   80.427067][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   80.428208][ T2208] usb 1-1: SerialNumber: syz
[   80.432211][ T3029] XFS (loop2): Unmount and run xfs_repair
[   80.437294][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   80.440661][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   80.441536][ T2208] usb 1-1: config 0 descriptor??
[   80.446911][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   80.451762][ T6497] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   80.455056][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   80.459077][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   80.465702][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   80.471403][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.477175][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.480944][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.486084][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   80.490833][ T3029] XFS (loop2): Unmount and run xfs_repair
[   80.493502][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   80.496246][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   80.499001][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   80.502229][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   80.506652][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   80.510181][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   80.514348][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.517965][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.521099][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.525060][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   80.529682][ T3029] XFS (loop2): Unmount and run xfs_repair
[   80.531742][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   80.534533][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   80.537790][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   80.540941][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   80.543977][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   80.547110][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   80.550041][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.553908][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.558219][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.562822][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   80.569442][ T3029] XFS (loop2): Unmount and run xfs_repair
[   80.571894][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   80.575011][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   80.578752][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   80.582400][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   80.587556][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   80.591246][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   80.595397][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.599304][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.603167][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.607777][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   80.612384][ T3029] XFS (loop2): Unmount and run xfs_repair
[   80.615213][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   80.618428][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   80.622128][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   80.626453][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   80.630144][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   80.634227][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   80.637899][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.641660][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.645689][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.650403][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   80.656359][ T3029] XFS (loop2): Unmount and run xfs_repair
[   80.658736][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   80.661801][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   80.665626][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   80.667655][ T2208] usb 1-1: USB disconnect, device number 6
[   80.669561][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   80.682661][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   80.686470][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   80.690181][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.695466][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.699161][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.704867][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   80.710022][ T3029] XFS (loop2): Unmount and run xfs_repair
[   80.712425][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   80.715672][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   80.719420][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   80.723952][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   80.727661][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   80.731300][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   80.735154][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.739104][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.742946][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.748042][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   80.753600][ T3029] XFS (loop2): Unmount and run xfs_repair
[   80.756039][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   80.759131][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   80.762993][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   80.766920][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   80.770691][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   80.776157][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   80.779796][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.783567][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.787299][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.791823][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   80.796462][ T3029] XFS (loop2): Unmount and run xfs_repair
[   80.798776][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   80.801806][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   80.806870][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   80.810698][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   80.814487][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   80.818302][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   80.822020][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.825730][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.829396][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.833939][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   80.838428][ T3029] XFS (loop2): Unmount and run xfs_repair
[   80.840863][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   80.844211][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   80.847906][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   80.851569][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   80.855219][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   80.858827][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   80.862481][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.866686][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.870554][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.877450][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   80.880967][ T3029] XFS (loop2): Unmount and run xfs_repair
[   80.882941][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   80.885569][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   80.888780][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   80.892035][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   80.896699][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   80.900090][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   80.903443][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.907023][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.910469][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.918862][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   80.923491][ T3029] XFS (loop2): Unmount and run xfs_repair
[   80.925824][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   80.928924][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   80.934621][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   80.938253][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   80.942143][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   80.948333][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   80.959291][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.963205][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.966909][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   80.971284][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   80.977942][ T3029] XFS (loop2): Unmount and run xfs_repair
[   80.980218][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   80.983649][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   80.987408][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   80.991013][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   80.998287][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   81.001931][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   81.005832][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   81.009607][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   81.015002][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   81.019486][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   81.024999][ T3029] XFS (loop2): Unmount and run xfs_repair
[   81.027349][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   81.030420][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   81.035711][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   81.039387][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   81.043229][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   81.046852][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   81.050469][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   81.055941][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   81.059640][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   81.064313][ T3029] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   81.068852][ T3029] XFS (loop2): Unmount and run xfs_repair
[   81.071217][ T3029] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   81.076082][ T3029] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   81.081711][ T3029] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   81.085619][ T3029] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   81.089222][ T3029] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   81.094731][ T3029] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   81.098452][ T3029] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   81.102051][ T3029] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   81.105929][ T3029] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   81.115470][ T5850] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[   81.120275][ T5850] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair.
[   81.237719][   T10] cfg80211: failed to load regulatory.db
[   81.843073][   T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   81.994605][   T10] usb 1-1: config 0 has an invalid interface number: 156 but max is 0
[   81.997602][   T10] usb 1-1: config 0 has no interface number 0
[   81.999938][   T10] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[   82.011597][   T10] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   82.018326][   T10] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[   82.022435][   T10] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[   82.027172][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.035108][   T10] usb 1-1: config 0 descriptor??
[   82.048379][   T10] gspca_main: spca561-2.14.0 probing abcd:cdee
[   82.327019][   T10] spca561 1-1:0.156: probe with driver spca561 failed with error -22
[   82.330389][   T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[   82.333744][   T10] usb 1-1: MIDIStreaming interface descriptor not found
[   82.380067][   T10] usb 1-1: USB disconnect, device number 7
[   82.540609][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   83.274389][   T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   83.474324][   T24] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[   83.477376][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.488390][   T24] usb 1-1: config 0 descriptor??
[   83.493254][   T24] gspca_main: cpia1-2.14.0 probing 0813:0001
[   83.509782][ T5847] libceph: connect (1)[c::]:6789 error -22
[   83.512369][ T5847] libceph: mon0 (1)[c::]:6789 connect error
[   83.516410][ T6558] syz.2.229 uses obsolete (PF_INET,SOCK_PACKET)
[   83.525874][ T5847] libceph: connect (1)[c::]:6789 error -22
[   83.528287][ T5847] libceph: mon0 (1)[c::]:6789 connect error
[   83.561958][ T5847] libceph: connect (1)[c::]:6789 error -22
[   83.566195][ T5847] libceph: mon0 (1)[c::]:6789 connect error
[   83.784503][   T10] libceph: connect (1)[c::]:6789 error -22
[   83.787109][   T10] libceph: mon0 (1)[c::]:6789 connect error
[   83.824438][   T10] libceph: connect (1)[c::]:6789 error -22
[   83.829941][   T10] libceph: mon0 (1)[c::]:6789 connect error
[   84.099842][ T6581] loop2: detected capacity change from 0 to 40427
[   84.104089][ T6581] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   84.107369][ T6581] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   84.112757][ T6581] F2FS-fs (loop2): invalid crc value
[   84.116014][   T24] gspca_cpia1: usb_control_msg 03, error -32
[   84.119298][   T24] gspca_cpia1: usb_control_msg 03, error -71
[   84.169203][ T6581] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   84.173202][   T24] gspca_cpia1: usb_control_msg 01, error -71
[   84.177131][ T6581] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   84.179531][ T6581] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   84.184295][   T24] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0)
[   84.189316][   T24] usb 1-1: USB disconnect, device number 8
[   84.293068][   T10] libceph: connect (1)[c::]:6789 error -22
[   84.295744][   T10] libceph: mon0 (1)[c::]:6789 connect error
[   84.317607][ T6556] ceph: No mds server is up or the cluster is laggy
[   84.321784][ T6561] ceph: No mds server is up or the cluster is laggy
[   84.332979][   T10] libceph: connect (1)[c::]:6789 error -22
[   84.335591][   T10] libceph: mon0 (1)[c::]:6789 connect error
[   84.802763][   T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   84.830621][ T6599] loop1: detected capacity change from 0 to 16
[   84.847785][ T6599] erofs (device loop1): EXPERIMENTAL 48-bit layout support in use. Use at your own risk!
[   84.852082][ T6599] erofs (device loop1): EXPERIMENTAL metadata compression support in use. Use at your own risk!
[   84.858552][ T6599] erofs (device loop1): bogus i_mode (0) @ nid 916717819658240
[   84.931770][ T6601] netlink: 76 bytes leftover after parsing attributes in process `syz.1.247'.
[   84.962718][   T24] usb 1-1: Using ep0 maxpacket: 8
[   84.981501][   T24] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[   84.986636][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.993087][   T24] usb 1-1: Product: syz
[   84.995732][   T24] usb 1-1: Manufacturer: syz
[   85.000256][   T24] usb 1-1: SerialNumber: syz
[   85.008842][   T24] usb 1-1: config 0 descriptor??
[   85.116568][ T6597] loop2: detected capacity change from 0 to 32768
[   85.137053][ T6597] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   85.159512][ T6614] loop1: detected capacity change from 0 to 2048
[   85.170419][ T6614] NILFS (loop1): invalid segment: Sequence number mismatch
[   85.186077][ T6597] XFS (loop2): Ending clean mount
[   85.189155][ T6614] NILFS (loop1): trying rollback from an earlier position
[   85.207978][ T6614] NILFS (loop1): recovery complete
[   85.224540][   T24] gspca_main: sunplus-2.14.0 probing 04a5:3003
[   85.228566][ T6618] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   85.540151][ T5850] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   85.961278][ T6620] loop1: detected capacity change from 0 to 131072
[   85.968978][ T6620] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[   85.972255][ T6620] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   85.977449][ T6620] F2FS-fs (loop1): invalid crc value
[   86.042361][ T6620] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   86.047840][ T6620] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   86.050326][ T6620] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   86.090711][ T6620] F2FS-fs (loop1): Stopped filesystem due to reason: 0
[   86.197409][ T5849] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[   86.201792][ T5849] Bluetooth: hci0: Injecting HCI hardware error event
[   86.206765][ T5238] Bluetooth: hci0: hardware error 0x00
[   86.452745][ T5847] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   86.567386][ T6631] loop1: detected capacity change from 0 to 2048
[   86.579629][ T6631] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   86.598255][ T6631] overlayfs: upper fs needs to support d_type.
[   86.602375][ T6631] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   86.605556][ T5847] usb 3-1: Using ep0 maxpacket: 16
[   86.608400][ T6631] overlayfs: failed to set xattr on upper
[   86.613479][ T6631] overlayfs: ...falling back to redirect_dir=nofollow.
[   86.617393][ T5847] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   86.621251][ T5847] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   86.624735][ T6631] overlayfs: ...falling back to metacopy=off.
[   86.627246][ T6631] overlayfs: ...falling back to index=off.
[   86.629509][ T6631] overlayfs: ...falling back to uuid=null.
[   86.635278][ T5847] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   86.638700][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.645086][ T5847] usb 3-1: Product: syz
[   86.646739][ T5847] usb 3-1: Manufacturer: syz
[   86.648528][ T5847] usb 3-1: SerialNumber: syz
[   86.666020][ T5845] UDF-fs: error (device loop1): udf_read_inode: (ino 1440) failed !bh
[   86.672272][ T5845] UDF-fs: error (device loop1): udf_read_inode: (ino 1440) failed !bh
[   86.809615][   T24] gspca_sunplus: reg_r err -71
[   86.811722][   T24] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[   86.824128][   T24] usb 1-1: USB disconnect, device number 9
[   86.875384][ T5847] usb 3-1: 0:2 : does not exist
[   86.884465][ T5847] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[   86.897745][ T5847] usb 3-1: USB disconnect, device number 5
[   86.921434][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   87.555439][ T6647] loop0: detected capacity change from 0 to 4096
[   87.559425][ T6647] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[   87.597411][ T6647] ntfs3(loop0): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[   87.698032][ T6653] loop2: detected capacity change from 0 to 256
[   88.274170][ T5238] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   88.318928][ T6663] loop2: detected capacity change from 0 to 32768
[   88.322155][ T6663] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.271 (6663)
[   88.332986][ T6663] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   88.336663][ T6663] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[   88.340838][ T6663] BTRFS info (device loop2): using free-space-tree
[   88.358440][ T6663] BTRFS info (device loop2): rebuilding free space tree
[   88.390054][ T5850] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   88.727958][ T5724] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.813285][ T6684] loop2: detected capacity change from 0 to 512
[   88.825402][ T5724] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.849253][ T6684] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   88.865376][ T6686] netlink: 'syz.0.275': attribute type 10 has an invalid length.
[   88.869811][ T6684] EXT4-fs (loop2): invalid journal inode
[   88.872953][ T6686] syz_tun: entered promiscuous mode
[   88.877511][ T6684] EXT4-fs (loop2): can't get journal size
[   88.888591][ T6684] EXT4-fs (loop2): orphan cleanup on readonly fs
[   88.900016][ T6686] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   88.904861][ T6684] EXT4-fs (loop2): 1 truncate cleaned up
[   88.908680][ T6684] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   88.918528][ T6688] netlink: 'syz.0.275': attribute type 10 has an invalid length.
[   88.948296][ T6688] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.953771][ T6688] team0: Port device bond0 added
[   88.956910][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   88.961552][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   88.968599][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   88.982169][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.986362][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   89.004197][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   89.058206][ T5724] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.175909][ T5724] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.301653][ T6695] loop0: detected capacity change from 0 to 32768
[   89.388033][ T5724] bridge_slave_1: left allmulticast mode
[   89.392784][ T5724] bridge_slave_1: left promiscuous mode
[   89.396730][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.400296][ T6712] loop2: detected capacity change from 0 to 1024
[   89.409433][ T6712] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   89.417530][ T5724] bridge_slave_0: left allmulticast mode
[   89.419146][ T6712] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5
[   89.419949][ T5724] bridge_slave_0: left promiscuous mode
[   89.426609][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.434926][ T6712] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[   89.438444][ T6712] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.282: Failed to acquire dquot type 0
[   89.445194][ T6712] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[   89.450832][ T6695] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[   89.450854][ T6695]   allowing incompatible features above 0.0: (unknown version)
[   89.450862][ T6695]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   89.451838][ T6712] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.282: corrupted inode contents
[   89.461799][ T6695] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[   89.464852][ T6712] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.282: mark_inode_dirty error
[   89.480752][ T6695] bcachefs (loop0): initializing new filesystem
[   89.484149][ T6712] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.282: corrupted inode contents
[   89.488424][ T6712] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.282: mark_inode_dirty error
[   89.492357][ T6712] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.282: corrupted inode contents
[   89.499212][ T6712] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[   89.502128][ T6712] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.282: corrupted inode contents
[   89.506404][ T6712] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.282: mark_inode_dirty error
[   89.507583][ T6695] bcachefs (loop0): going read-write
[   89.510061][ T6712] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[   89.517383][ T6712] EXT4-fs (loop2): 1 truncate cleaned up
[   89.519928][ T6712] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.537502][ T6695] bcachefs (loop0): marking superblocks
[   89.567266][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.567814][ T6695] bcachefs (loop0): initializing freespace
[   89.598106][ T6695] bcachefs (loop0): done initializing freespace
[   89.610018][ T6695] bcachefs (loop0): reading snapshots table
[   89.612037][ T6695] bcachefs (loop0): reading snapshots done
[   89.642422][ T6695] bcachefs (loop0): done starting filesystem
[   89.696702][ T6695] bcachefs (loop0): going read-only
[   89.698869][ T6695] bcachefs (loop0): finished waiting for writes to stop
[   89.707276][ T6695] bcachefs (loop0): flushing journal and stopping allocators, journal seq 5
[   89.748302][ T6695] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 7
[   89.751918][ T6695] bcachefs (loop0): clean shutdown complete, journal seq 8
[   89.764284][ T6695] bcachefs (loop0): marking filesystem clean
[   89.814006][ T6695] syz.0.279 (6695) used greatest stack depth: 16360 bytes left
[   89.827213][ T5856] bcachefs (loop0): shutting down
[   89.862127][ T5856] bcachefs (loop0): shutdown complete
[   89.937011][ T6725] loop2: detected capacity change from 0 to 32768
[   89.951570][ T6725] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   89.990078][ T6725] XFS (loop2): Ending clean mount
[   90.059367][ T5724] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   90.070003][ T5724] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   90.075376][ T5724] bond0 (unregistering): Released all slaves
[   90.077347][ T5850] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   90.108573][ T6689] chnl_net:caif_netlink_parms(): no params data found
[   90.374814][ T6689] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.377297][ T6689] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.380172][ T6689] bridge_slave_0: entered allmulticast mode
[   90.394741][ T6689] bridge_slave_0: entered promiscuous mode
[   90.409987][ T6689] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.415240][ T6689] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.417885][ T6689] bridge_slave_1: entered allmulticast mode
[   90.421240][ T6689] bridge_slave_1: entered promiscuous mode
[   90.489923][ T6689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.519332][ T6689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.753661][ T6689] team0: Port device team_slave_0 added
[   90.790773][ T6689] team0: Port device team_slave_1 added
[   90.887661][ T5724] hsr_slave_0: left promiscuous mode
[   90.891322][ T5724] hsr_slave_1: left promiscuous mode
[   90.901502][ T5724] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.904782][ T5724] batman_adv: batadv0: Removing interface: batadv_slave_0
[   90.912356][ T5724] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.933049][ T5724] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.966121][ T5724] veth1_macvtap: left promiscuous mode
[   90.968488][ T5724] veth0_macvtap: left promiscuous mode
[   90.970995][ T5724] veth1_vlan: left promiscuous mode
[   90.973876][ T5724] veth0_vlan: left promiscuous mode
[   91.085524][ T5238] Bluetooth: hci0: command tx timeout
[   91.892107][ T6751] syz.0.288: attempt to access beyond end of device
[   91.892107][ T6751] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=0
[   91.905406][ T6751] gfs2: error -5 reading superblock
[   92.199375][ T5724] team0 (unregistering): Port device team_slave_1 removed
[   92.261595][ T5724] team0 (unregistering): Port device team_slave_0 removed
[   93.164444][ T5238] Bluetooth: hci0: command tx timeout
[   93.492323][ T6689] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.500780][ T6689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.522932][ T6689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.572861][ T6689] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.605218][ T6689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.633214][ T6689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.826030][ T6689] hsr_slave_0: entered promiscuous mode
[   93.828899][ T6689] hsr_slave_1: entered promiscuous mode
[   93.884747][   T52] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   94.043482][   T52] usb 3-1: Using ep0 maxpacket: 32
[   94.049085][ T6689] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   94.054100][ T6689] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   94.056830][   T52] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a
[   94.060319][   T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.065599][   T52] usb 3-1: Product: syz
[   94.067412][   T52] usb 3-1: Manufacturer: syz
[   94.069317][   T52] usb 3-1: SerialNumber: syz
[   94.071921][ T6689] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   94.079196][   T52] usb 3-1: config 0 descriptor??
[   94.079595][ T6689] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   94.097129][   T52] xr_serial 3-1:0.0: skipping garbage
[   94.191449][ T6689] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.210101][ T6689] 8021q: adding VLAN 0 to HW filter on device team0
[   94.218968][  T711] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.221831][  T711] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.236159][   T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   94.244803][  T711] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.247328][  T711] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.300373][   T52] usb 3-1: USB disconnect, device number 6
[   94.383816][   T24] usb 1-1: Using ep0 maxpacket: 16
[   94.387861][   T24] usb 1-1: config 75 has an invalid interface number: 136 but max is 0
[   94.399337][ T6689] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.401943][   T24] usb 1-1: config 75 has no interface number 0
[   94.407932][   T24] usb 1-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=bc.ca
[   94.411685][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.420821][   T24] usb 1-1: Product: syz
[   94.422169][   T24] usb 1-1: Manufacturer: syz
[   94.428142][   T24] usb 1-1: SerialNumber: syz
[   94.455813][ T6689] veth0_vlan: entered promiscuous mode
[   94.467160][ T6689] veth1_vlan: entered promiscuous mode
[   94.506672][ T6689] veth0_macvtap: entered promiscuous mode
[   94.511875][ T6689] veth1_macvtap: entered promiscuous mode
[   94.522980][ T6689] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.529682][ T6689] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.540442][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.545042][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.548816][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.555268][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.608490][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.614140][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.627821][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.631046][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.658926][   T24] ftdi_sio 1-1:75.136: FTDI USB Serial Device converter detected
[   94.667651][   T24] ftdi_sio ttyUSB0: unknown device type: 0xbcca
[   94.677332][   T24] usb 1-1: USB disconnect, device number 10
[   94.684884][   T24] ftdi_sio 1-1:75.136: device disconnected
[   94.750015][ T6805] loop3: detected capacity change from 0 to 1024
[   94.924186][ T6811] trusted_key: encrypted_key: key user:syz not found
[   95.233176][ T5238] Bluetooth: hci0: command tx timeout
[   95.427161][ T6818] loop0: detected capacity change from 0 to 512
[   95.453109][ T6818] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[   95.543227][ T6818] UDF-fs: error (device loop0): udf_read_inode: (ino 19) failed ident=264
[   95.549451][ T6818] binfmt_misc: register: failed to install interpreter file ./file0
[   95.769673][ T6822] binder: 6821:6822 ioctl c0306201 2000000003c0 returned -14
[   95.979610][ T6813] loop3: detected capacity change from 0 to 32768
[   96.029444][ T6813] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.297 (6813)
[   96.148301][ T6813] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   96.165480][ T6813] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[   96.177123][ T6813] BTRFS info (device loop3): disk space caching is enabled
[   96.194171][ T6813] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   96.402086][ T6813] BTRFS info (device loop3): rebuilding free space tree
[   96.475067][ T5847] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   96.485301][ T6813] BTRFS info (device loop3): disabling free space tree
[   96.489343][ T6813] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   96.506849][ T6813] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   96.543805][ T6851] syz.2.303: attempt to access beyond end of device
[   96.543805][ T6851] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[   96.550065][ T6851] hpfs: hpfs_map_sector(): read error
[   96.662895][ T5847] usb 1-1: Using ep0 maxpacket: 16
[   96.676540][ T5847] usb 1-1: config 0 has an invalid interface number: 157 but max is 0
[   96.684682][ T5847] usb 1-1: config 0 has no interface number 0
[   96.695755][ T5847] usb 1-1: config 0 interface 157 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[   96.700317][ T5847] usb 1-1: config 0 interface 157 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[   96.709638][ T5847] usb 1-1: New USB device found, idVendor=058f, idProduct=9720, bcdDevice=fb.74
[   96.715226][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.723638][ T5847] usb 1-1: Product: syz
[   96.725111][ T5847] usb 1-1: Manufacturer: syz
[   96.732067][ T6854] loop2: detected capacity change from 0 to 4096
[   96.732581][ T5847] usb 1-1: SerialNumber: syz
[   96.743652][ T6689] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   96.749188][ T5847] usb 1-1: config 0 descriptor??
[   96.758113][ T6831] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   96.764694][ T6831] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   96.775362][ T6854] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[   96.775565][ T5847] pl2303 1-1:0.157: required interrupt-in endpoint missing
[   97.033588][   T24] usb 1-1: USB disconnect, device number 11
[   97.313044][ T5238] Bluetooth: hci0: command tx timeout
[   97.346324][ T6883] loop3: detected capacity change from 0 to 512
[   97.350803][ T6883] EXT4-fs: Ignoring removed oldalloc option
[   97.359976][ T6883] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   97.375000][ T6883] EXT4-fs (loop3): 1 truncate cleaned up
[   97.378043][ T6883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.386242][   T33] audit: type=1800 audit(1755503108.317:9): pid=6883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.311" name="file2" dev="loop3" ino=16 res=0 errno=0
[   97.545752][   T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   97.714188][   T10] usb 3-1: Using ep0 maxpacket: 8
[   97.725099][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   97.731610][   T10] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[   97.746882][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.756246][   T10] usb 3-1: Product: syz
[   97.758918][   T10] usb 3-1: Manufacturer: syz
[   97.761021][   T10] usb 3-1: SerialNumber: syz
[   97.774646][   T10] usb 3-1: config 0 descriptor??
[   97.985687][   T24] usb 3-1: USB disconnect, device number 7
[   99.626750][ T6929] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   99.910013][ T6935] loop0: detected capacity change from 0 to 1024
[   99.950664][ T6935] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   99.956359][ T6935] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.982004][ T6935] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 3: comm syz.0.328: lblock 3 mapped to illegal pblock 3 (length 3)
[  100.006757][ T6935] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  100.022731][ T6935] EXT4-fs (loop0): This should not happen!! Data will be lost
[  100.022731][ T6935] 
[  100.031685][ T6943] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.328: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  100.054500][ T6943] EXT4-fs error (device loop0) in ext4_setattr:6071: Corrupt filesystem
[  100.099733][   T26] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  100.108578][   T26] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 16 with error 28
[  100.124054][   T26] EXT4-fs (loop0): This should not happen!! Data will be lost
[  100.124054][   T26] 
[  100.129235][   T26] EXT4-fs (loop0): Total free blocks count 0
[  100.131774][   T26] EXT4-fs (loop0): Free/Dirty block details
[  100.134982][   T26] EXT4-fs (loop0): free_blocks=4293918720
[  100.137350][   T26] EXT4-fs (loop0): dirty_blocks=16
[  100.139486][   T26] EXT4-fs (loop0): Block reservation details
[  100.630525][ T6883] Set syz1 is full, maxelem 65536 reached
[  100.694512][ T6689] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.857866][ T6947] loop2: detected capacity change from 0 to 131072
[  100.896391][ T6947] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  100.900035][ T6947] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  100.964905][ T6965] use of bytesused == 0 is deprecated and will be removed in the future,
[  100.968119][ T6965] use the actual size instead.
[  101.807865][ T6985] loop0: detected capacity change from 0 to 40427
[  101.818818][ T6985] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  101.822164][ T6985] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  101.829366][ T6985] F2FS-fs (loop0): invalid crc value
[  101.888108][ T6985] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  101.905671][ T6985] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  101.908661][ T6985] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  102.998513][   T33] audit: type=1800 audit(1755503113.127:10): pid=6996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.347" name="file1" dev="loop0" ino=10 res=0 errno=0
[  104.793584][ T7011] loop2: detected capacity change from 0 to 32768
[  104.819619][ T7011] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  104.830466][ T7011] XFS (loop2): Ending clean mount
[  104.838040][ T7011] XFS (loop2): Quotacheck needed: Please wait.
[  104.857852][ T7011] XFS (loop2): Quotacheck: Done.
[  104.880929][ T5850] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  104.924278][    T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  105.083832][    T9] usb 4-1: Using ep0 maxpacket: 8
[  105.088435][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D
[  105.093825][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  105.097592][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0
[  105.104295][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  105.114938][    T9] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f
[  105.118455][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.121587][    T9] usb 4-1: Product: syz
[  105.131451][    T9] usb 4-1: Manufacturer: syz
[  105.135060][    T9] usb 4-1: SerialNumber: syz
[  105.139761][    T9] usb 4-1: config 0 descriptor??
[  105.146784][    T9] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[  105.181992][   T36] kworker/u10:1: attempt to access beyond end of device
[  105.181992][   T36] loop0: rw=1048577, sector=77824, nr_sectors = 2048 limit=40427
[  105.204990][   T36] kworker/u10:1: attempt to access beyond end of device
[  105.204990][   T36] loop0: rw=1048577, sector=79872, nr_sectors = 2048 limit=40427
[  105.221328][   T36] kworker/u10:1: attempt to access beyond end of device
[  105.221328][   T36] loop0: rw=1048577, sector=49152, nr_sectors = 2048 limit=40427
[  105.254201][   T36] kworker/u10:1: attempt to access beyond end of device
[  105.254201][   T36] loop0: rw=1048577, sector=51200, nr_sectors = 2048 limit=40427
[  105.279789][   T36] kworker/u10:1: attempt to access beyond end of device
[  105.279789][   T36] loop0: rw=1048577, sector=57344, nr_sectors = 2096 limit=40427
[  105.300903][   T33] audit: type=1326 audit(1755503116.227:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.2.361" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ea98ebe9 code=0x7ffc0000
[  105.306876][   T36] kworker/u10:1: attempt to access beyond end of device
[  105.306876][   T36] loop0: rw=1048577, sector=59440, nr_sectors = 2544 limit=40427
[  105.313773][   T33] audit: type=1326 audit(1755503116.227:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.2.361" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ea98ebe9 code=0x7ffc0000
[  105.329980][   T33] audit: type=1326 audit(1755503116.247:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.2.361" exe="/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f22ea98ebe9 code=0x7ffc0000
[  105.339890][   T33] audit: type=1326 audit(1755503116.247:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.2.361" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ea98ebe9 code=0x7ffc0000
[  105.359068][   T36] kworker/u10:1: attempt to access beyond end of device
[  105.359068][   T36] loop0: rw=1048577, sector=61984, nr_sectors = 5520 limit=40427
[  105.361945][   T33] audit: type=1326 audit(1755503116.247:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.2.361" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ea98ebe9 code=0x7ffc0000
[  105.378138][   T24] usb 4-1: USB disconnect, device number 2
[  105.416200][ T7033] loop2: detected capacity change from 0 to 764
[  105.490481][ T7034] Symlink component flag not implemented
[  105.495963][ T7034] Symlink component flag not implemented
[  105.499296][ T7034] Symlink component flag not implemented (128)
[  105.502059][ T7034] Symlink component flag not implemented (122)
[  105.588612][   T36] kworker/u10:1: attempt to access beyond end of device
[  105.588612][   T36] loop0: rw=1048577, sector=67504, nr_sectors = 9200 limit=40427
[  105.665333][   T36] kworker/u10:1: attempt to access beyond end of device
[  105.665333][   T36] loop0: rw=1048577, sector=76704, nr_sectors = 1120 limit=40427
[  105.742826][   T36] kworker/u10:1: attempt to access beyond end of device
[  105.742826][   T36] loop0: rw=1048577, sector=81920, nr_sectors = 3952 limit=40427
[  105.776909][ T5856] CPU: 0 UID: 0 PID: 5856 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  105.776949][ T5856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  105.776957][ T5856] Call Trace:
[  105.776963][ T5856]  <TASK>
[  105.776969][ T5856]  dump_stack_lvl+0x189/0x250
[  105.776990][ T5856]  ? __pfx_dump_stack_lvl+0x10/0x10
[  105.777005][ T5856]  ? __pfx_queue_work_on+0x10/0x10
[  105.777018][ T5856]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  105.777034][ T5856]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  105.777058][ T5856]  f2fs_handle_critical_error+0x37c/0x540
[  105.777080][ T5856]  f2fs_write_end_io+0x886/0xb60
[  105.777105][ T5856]  __submit_merged_bio+0x27a/0x6a0
[  105.777120][ T5856]  ? up_write+0x1c4/0x420
[  105.777138][ T5856]  __submit_merged_write_cond+0x44c/0x530
[  105.777160][ T5856]  f2fs_sync_node_pages+0x1479/0x15e0
[  105.777190][ T5856]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  105.777252][ T5856]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  105.777270][ T5856]  ? up_write+0x1c4/0x420
[  105.777287][ T5856]  f2fs_write_checkpoint+0xe6f/0x1df0
[  105.777317][ T5856]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  105.777365][ T5856]  ? kill_f2fs_super+0x298/0x6c0
[  105.777382][ T5856]  kill_f2fs_super+0x2c3/0x6c0
[  105.777399][ T5856]  ? __pfx_kill_f2fs_super+0x10/0x10
[  105.777409][ T5856]  ? radix_tree_delete_item+0x2b6/0x400
[  105.777431][ T5856]  ? shrinker_free+0x2ce/0x3e0
[  105.777446][ T5856]  deactivate_locked_super+0xbc/0x130
[  105.777468][ T5856]  cleanup_mnt+0x425/0x4c0
[  105.777481][ T5856]  ? lockdep_hardirqs_on+0x9c/0x150
[  105.777499][ T5856]  task_work_run+0x1d4/0x260
[  105.777517][ T5856]  ? __pfx_task_work_run+0x10/0x10
[  105.777531][ T5856]  ? __x64_sys_umount+0x122/0x160
[  105.777550][ T5856]  ? exit_to_user_mode_loop+0x40/0x110
[  105.777569][ T5856]  exit_to_user_mode_loop+0xec/0x110
[  105.777586][ T5856]  do_syscall_64+0x2bd/0x3b0
[  105.777601][ T5856]  ? lockdep_hardirqs_on+0x9c/0x150
[  105.777616][ T5856]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.777627][ T5856]  ? exc_page_fault+0x9f/0xf0
[  105.777644][ T5856]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.777655][ T5856] RIP: 0033:0x7f050c78ff17
[  105.777667][ T5856] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  105.777677][ T5856] RSP: 002b:00007fff9c4911f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  105.777691][ T5856] RAX: 0000000000000000 RBX: 00007f050c811c05 RCX: 00007f050c78ff17
[  105.777698][ T5856] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff9c4912b0
[  105.777705][ T5856] RBP: 00007fff9c4912b0 R08: 0000000000000000 R09: 0000000000000000
[  105.777711][ T5856] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff9c492340
[  105.777719][ T5856] R13: 00007f050c811c05 R14: 000000000001965f R15: 00007fff9c492380
[  105.777741][ T5856]  </TASK>
[  105.777805][ T5856] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  107.102290][ T7042] loop3: detected capacity change from 0 to 32768
[  107.114558][ T7042] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.366 (7042)
[  107.135274][ T7042] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  107.139721][ T7042] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  107.148232][ T7042] BTRFS info (device loop3): using free-space-tree
[  107.160002][ T7051] loop2: detected capacity change from 0 to 512
[  107.202307][ T7051] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  107.208470][ T7051] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  107.216749][ T7051] EXT4-fs (loop2): 1 truncate cleaned up
[  107.223865][ T7051] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.249950][ T7051] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 4: comm syz.2.368: lblock 0 mapped to illegal pblock 4 (length 1)
[  107.261046][   T33] audit: type=1800 audit(1755503118.187:16): pid=7042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.366" name="file1" dev="loop3" ino=260 res=0 errno=0
[  107.274323][ T7051] EXT4-fs (loop2): Remounting filesystem read-only
[  107.278894][ T6689] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  107.317328][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.442428][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'.
[  107.637748][ T7070] loop3: detected capacity change from 0 to 32768
[  107.641343][ T7070] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section clean: entry type (unknown jset_entry_type 255) overruns end of section
[  107.641343][ T7070] clean (size 2912):
[  107.641343][ T7070] flags:          0
[  107.641343][ T7070] journal_seq:    10
[  107.641343][ T7070] usage: type=inodes v=8
[  107.641343][ T7070] usage: type=key_version v=0
[  107.641343][ T7070] usage: type=reserved v=0
[  107.641343][ T7070] usage: type=reserved v=0
[  107.641343][ T7070] usage: type=reserved v=0
[  107.641343][ T7070] usage: type=reserved v=0
[  107.641343][ T7070] data_usage: btree: 1/1 [0]=2816
[  107.641343][ T7070] data_usage: journal: 1/1 [0]=0
[  107.641343][ T7070] data_usage: user: 1/1 [0]=16
[  107.641343][ T7070] dev_usage: dev=0  
[  107.641343][ T7070]   free: buckets=83 sectors=34359738368 fragmented=0
[  107.641343][ T7070]   sb: buckets=25 sectors=6152 fragmented=248
[  107.641343][ T7070]   journal: buckets=8 sectors=2048 fragmented=0
[  107.641343][ T7070]   btree: buckets=11 sectors=2816 fragmented=150994944
[  107.641343][ T7070]   user: buckets=1 sectors=16 fragmented=240
[  107.641343][ T7070]   cached: buckets=0 sectors=0 fragmented=0
[  107.641343][ T7070]   parity: buckets=0 sectors=0 fragmented=0
[  107.641343][ T7070]   stripe: buckets=0 sectors=0 fragmented=0
[  107.641343][ T7070]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  107.641343][ T7070]   need_discard: buckets=0 sectors=0 fragmented=0
[  107.641343][ T7070] clock: read=0
[  107.641343][ T7070] btree_keys: btree=extents level=0 u64s 1 type deleted 0:1179915:1 len
[  107.641423][ T7070] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  108.266375][ T7123] loop2: detected capacity change from 0 to 256
[  108.646510][ T7132] batadv_slave_1: entered promiscuous mode
[  108.656139][ T7131] batadv_slave_1: left promiscuous mode
[  108.869011][ T7144] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[  108.962417][ T7136] loop2: detected capacity change from 0 to 32768
[  109.121717][ T7156] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  109.912683][ T2208] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  109.942668][    T9] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  110.062726][ T2208] usb 4-1: Using ep0 maxpacket: 8
[  110.069875][ T2208] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  110.074010][ T2208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.077544][ T2208] usb 4-1: Product: syz
[  110.079497][ T2208] usb 4-1: Manufacturer: syz
[  110.083837][ T2208] usb 4-1: SerialNumber: syz
[  110.088752][ T2208] usb 4-1: config 0 descriptor??
[  110.097243][    T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  110.100972][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.106231][    T9] usb 3-1: Product: syz
[  110.108067][    T9] usb 3-1: Manufacturer: syz
[  110.110068][    T9] usb 3-1: SerialNumber: syz
[  110.116861][    T9] usb 3-1: config 0 descriptor??
[  110.298958][ T2208] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  110.329861][    T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  110.374833][   T33] audit: type=1326 audit(1755503121.307:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7186 comm="syz.0.418" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f050c78ebe9 code=0x0
[  111.114794][ T2208] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  111.121341][ T2208] usb 4-1: USB disconnect, device number 3
[  111.266810][ T7194] loop0: detected capacity change from 0 to 16
[  111.273096][ T7194] erofs (device loop0): mounted with root inode @ nid 36.
[  111.336933][    T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  111.342127][    T9] usb 3-1: USB disconnect, device number 8
[  111.409157][ T7198] loop0: detected capacity change from 0 to 4096
[  111.461897][ T7200] loop0: detected capacity change from 0 to 8
[  111.480925][ T7200] SQUASHFS error: Unable to read directory block [629:46]
[  111.915864][ T7219] loop2: detected capacity change from 0 to 1024
[  111.946901][ T7219] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.018616][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.462978][   T24] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  112.635958][   T24] usb 4-1: unable to get BOS descriptor or descriptor too short
[  112.639697][   T24] usb 4-1: not running at top speed; connect to a high speed hub
[  112.653817][   T24] usb 4-1: config 4 has an invalid interface number: 147 but max is 0
[  112.657262][   T24] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  112.665271][   T24] usb 4-1: config 4 has no interface number 0
[  112.675040][   T24] usb 4-1: Dual-Role OTG device on HNP port
[  112.677937][   T24] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  112.681799][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38
[  112.690801][   T24] usb 4-1: Product: syz
[  112.692236][   T24] usb 4-1: Manufacturer: syz
[  112.694368][   T24] usb 4-1: SerialNumber: syz
[  112.718402][ T7249] loop0: detected capacity change from 0 to 32768
[  112.731737][ T7249] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  112.744582][   T33] audit: type=1800 audit(1755503123.677:18): pid=7249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.446" name="file1" dev="loop0" ino=17058 res=0 errno=0
[  112.781773][ T5856] ocfs2: Unmounting device (7,0) on (node local)
[  112.918711][   T24] usb 4-1: Found UVC 0.02 device syz (04f2:b746)
[  112.921583][   T24] usb 4-1: No valid video chain found.
[  112.927926][   T24] usb 4-1: USB disconnect, device number 4
[  113.039411][ T7271] loop0: detected capacity change from 0 to 512
[  113.044522][ T7271] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  113.058871][ T7271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.065833][ T7271] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.085275][ T7271] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  113.094533][ T7271] Quota error (device loop0): write_blk: dquota write failed
[  113.097748][ T7271] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  113.101720][ T7271] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.454: Failed to acquire dquot type 0
[  113.133206][ T5856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.566523][ T7290] netlink: 204 bytes leftover after parsing attributes in process `syz.2.462'.
[  113.607060][ T7294] loop2: detected capacity change from 0 to 1024
[  113.610018][ T7296] capability: warning: `syz.3.465' uses deprecated v2 capabilities in a way that may be insecure
[  113.649392][ T7294] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  113.653222][ T7294] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  113.667977][  T711] hfsplus: b-tree write err: -5, ino 4
[  113.671147][ T7298] loop3: detected capacity change from 0 to 2048
[  113.698718][ T7298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.704855][ T7298] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.717930][ T7298] EXT4-fs error (device loop3): __ext4_new_inode:1073: comm syz.3.466: reserved inode found cleared - inode=1
[  113.730849][ T7298] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  113.735071][ T7298] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  113.744660][ T7298] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  113.757213][ T7298] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[  113.790152][ T6689] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.817011][ T7309] netlink: 'syz.3.470': attribute type 1 has an invalid length.
[  113.820477][ T7309] netlink: 40 bytes leftover after parsing attributes in process `syz.3.470'.
[  113.969450][ T7323] loop2: detected capacity change from 0 to 2048
[  113.978042][ T7323] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  113.988713][   T33] audit: type=1800 audit(1755503124.917:19): pid=7323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.477" name="file1" dev="loop2" ino=1346 res=0 errno=0
[  114.029808][ T7325] loop3: detected capacity change from 0 to 4096
[  114.051902][ T7325] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  114.097498][ T7325] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  114.101705][ T7325] ntfs3(loop3): ino=5, mi_enum_attr
[  114.250264][ T7334] netlink: 16 bytes leftover after parsing attributes in process `syz.3.482'.
[  114.256274][ T7334] netlink: 16 bytes leftover after parsing attributes in process `syz.3.482'.
[  114.511498][ T7340] netlink: 256 bytes leftover after parsing attributes in process `syz.0.485'.
[  114.583303][ T7343] netlink: 248 bytes leftover after parsing attributes in process `syz.3.486'.
[  114.931963][ T7349] netlink: 'syz.3.489': attribute type 1 has an invalid length.
[  114.935730][ T7349] netlink: 224 bytes leftover after parsing attributes in process `syz.3.489'.
[  114.982689][ T2208] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  115.132698][ T2208] usb 1-1: Using ep0 maxpacket: 32
[  115.137068][ T2208] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[  115.140054][ T2208] usb 1-1: config 0 has no interface number 0
[  115.145863][ T2208] usb 1-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  115.150690][ T2208] usb 1-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  115.157367][ T2208] usb 1-1: config 0 interface 12 has no altsetting 0
[  115.162830][ T2208] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  115.166046][ T2208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.169233][ T2208] usb 1-1: Product: syz
[  115.170969][ T2208] usb 1-1: Manufacturer: syz
[  115.173285][ T2208] usb 1-1: SerialNumber: syz
[  115.177962][ T2208] usb 1-1: config 0 descriptor??
[  115.185097][ T2208] f81534 1-1:0.12: unsupported endpoint max packet size
[  115.392147][ T2208] usb 1-1: USB disconnect, device number 12
[  115.661525][ T7353] loop3: detected capacity change from 0 to 32768
[  115.670312][ T7353] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.491 (7353)
[  115.695874][ T7353] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  115.700328][ T7353] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  115.704694][ T7353] BTRFS info (device loop3): using free-space-tree
[  115.833259][ T5724] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[  115.995881][ T6689] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  116.050811][ T7377] vim2m vim2m.0: Fourcc format (0x31384142) invalid.
[  116.459549][ T7380] usb usb9: usbfs: process 7380 (syz.0.497) did not claim interface 0 before use
[  116.632310][ T7390] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  116.794746][    T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  116.925987][ T7396] loop2: detected capacity change from 0 to 128
[  116.930979][ T7396] ext4: Unknown parameter 'fsname'
[  116.933534][ T5847] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  116.945620][ T7396] Invalid option length (1047378) for dns_resolver key
[  116.953015][    T9] usb 4-1: Using ep0 maxpacket: 8
[  116.959963][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  116.966724][    T9] usb 4-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd
[  116.970477][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.975585][    T9] usb 4-1: Product: syz
[  116.977373][    T9] usb 4-1: Manufacturer: syz
[  116.979496][    T9] usb 4-1: SerialNumber: syz
[  117.842431][ T7406] loop3: detected capacity change from 0 to 764
[  117.953702][    T9] kalmia 4-1:1.0: probe with driver kalmia failed with error -22
[  117.961086][    T9] usb 4-1: USB disconnect, device number 5
[  118.322058][ T7398] loop2: detected capacity change from 0 to 262144
[  118.325267][ T7398] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.505 (7398)
[  118.332073][ T7398] BTRFS info (device loop2): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  118.336363][ T7398] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  118.339836][ T7398] BTRFS info (device loop2): using free-space-tree
[  118.363843][ T5847] usb 1-1: Using ep0 maxpacket: 16
[  118.367718][ T5847] usb 1-1: unable to get BOS descriptor or descriptor too short
[  118.375035][ T5847] usb 1-1: config 2 has an invalid interface number: 22 but max is 0
[  118.378579][ T5847] usb 1-1: config 2 has no interface number 0
[  118.380673][ T5847] usb 1-1: config 2 interface 22 has no altsetting 0
[  118.387445][ T5847] usb 1-1: language id specifier not provided by device, defaulting to English
[  118.393348][ T5847] usb 1-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00
[  118.397123][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.400556][ T5847] usb 1-1: Product: syz
[  118.404086][ T5847] usb 1-1: Manufacturer: syz
[  118.406112][ T5847] usb 1-1: SerialNumber: syz
[  118.410333][   T26] BTRFS warning (device loop2): checksum verify failed on logical 22036480 mirror 1 wanted 0x23e101be1e001a29 found 0x09049c5cc74d15fb level 0
[  118.420217][ T7398] BTRFS info (device loop2): read error corrected: ino 0 off 22036480 (dev /dev/loop2 sector 43040)
[  118.424599][ T7398] BTRFS info (device loop2): read error corrected: ino 0 off 22040576 (dev /dev/loop2 sector 43048)
[  118.428845][ T7398] BTRFS info (device loop2): read error corrected: ino 0 off 22044672 (dev /dev/loop2 sector 43056)
[  118.433733][ T7398] BTRFS info (device loop2): read error corrected: ino 0 off 22048768 (dev /dev/loop2 sector 43064)
[  118.637450][ T5847] usb-storage 1-1:2.22: USB Mass Storage device detected
[  118.674862][ T5847] usb-storage 1-1:2.22: Quirks match for vid 0451 pid 5416: 2
[  118.725483][ T5850] BTRFS info (device loop2): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  118.744686][ T5847] usb 1-1: USB disconnect, device number 13
[  119.333163][ T7513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.521'.
[  119.336276][ T7513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.521'.
[  119.429841][ T7519] netlink: 14 bytes leftover after parsing attributes in process `syz.0.524'.
[  119.501255][ T7523] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.525'.
[  119.823632][    T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  119.842649][ T5847] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  119.972687][    T9] usb 3-1: Using ep0 maxpacket: 32
[  119.978702][    T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[  119.982697][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.985597][    T9] usb 3-1: Product: syz
[  119.986912][    T9] usb 3-1: Manufacturer: syz
[  119.988422][    T9] usb 3-1: SerialNumber: syz
[  119.992269][    T9] usb 3-1: config 0 descriptor??
[  119.997321][ T5847] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  120.000481][ T5847] usb 4-1: config 0 interface 0 has no altsetting 0
[  120.002792][ T5847] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00
[  120.006055][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.010526][ T5847] usb 4-1: config 0 descriptor??
[  120.201996][    T9] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device:
[  120.207708][    T9] eb 9a 47 80 9b f8 7a f0 
[  120.209586][    T9] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -5
[  120.407570][   T24] usb 3-1: USB disconnect, device number 9
[  120.428441][ T5847] magicmouse 0003:05AC:0269.0006: hidraw0: USB HID v10.00 Device [HID 05ac:0269] on usb-dummy_hcd.3-1/input0
[  120.527087][   T33] audit: type=1326 audit(1755503131.457:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7539 comm="syz.0.532" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f050c78ebe9 code=0x0
[  120.632066][ T5847] usb 4-1: USB disconnect, device number 6
[  121.157929][ T7560] loop2: detected capacity change from 0 to 32768
[  121.161997][ T7560] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.541 (7560)
[  121.193278][ T7560] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  121.196594][ T7560] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  121.202075][ T7560] BTRFS info (device loop2): using free-space-tree
[  121.329260][ T7597] loop3: detected capacity change from 0 to 164
[  121.358409][ T5850] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  121.373393][ T7597] iso9660: Corrupted directory entry in block 4 of inode 1792
[  121.705830][ T7603] loop2: detected capacity change from 0 to 32768
[  121.711051][ T7603] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  121.728281][ T7603] XFS (loop2): Ending clean mount
[  121.765233][ T5850] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  121.966413][ T7631] loop3: detected capacity change from 0 to 256
[  121.969205][ T7629] netlink: 28 bytes leftover after parsing attributes in process `syz.2.559'.
[  121.971648][ T7631] exfat: Deprecated parameter 'utf8'
[  121.977200][ T7631] exfat: Deprecated parameter 'utf8'
[  121.986977][ T7631] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  122.014620][ T7631] cifs: Unknown parameter 'IT&:"1:ӭ'4,Zz-#F<]%gC
[  122.014620][ T7631] SȘȞZ6'
[  122.063262][ T7637] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[  122.088208][ T7639] netlink: 16 bytes leftover after parsing attributes in process `syz.3.563'.
[  122.198503][ T7645] loop3: detected capacity change from 0 to 2048
[  122.235820][ T7645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.571514][ T7635] loop2: detected capacity change from 0 to 40427
[  122.698822][ T7635] F2FS-fs (loop2): invalid crc value
[  122.776035][ T7635] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  122.781510][ T7635] F2FS-fs (loop2): Start checkpoint disabled!
[  122.790777][ T7635] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  122.854547][   T36] bio_check_eod: 1 callbacks suppressed
[  122.854563][   T36] kworker/u10:1: attempt to access beyond end of device
[  122.854563][   T36] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  122.866615][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u10:1 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  122.866635][   T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  122.866643][   T36] Workqueue: writeback wb_workfn (flush-7:2)
[  122.866666][   T36] Call Trace:
[  122.866673][   T36]  <TASK>
[  122.866679][   T36]  dump_stack_lvl+0x189/0x250
[  122.866700][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[  122.866715][   T36]  ? __pfx_queue_work_on+0x10/0x10
[  122.866727][   T36]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  122.866750][   T36]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  122.866773][   T36]  f2fs_handle_critical_error+0x37c/0x540
[  122.866797][   T36]  f2fs_write_end_io+0x886/0xb60
[  122.866824][   T36]  __submit_merged_bio+0x27a/0x6a0
[  122.866846][   T36]  __submit_merged_write_cond+0x255/0x530
[  122.866868][   T36]  f2fs_write_data_pages+0x261d/0x3000
[  122.866913][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  122.866942][   T36]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  122.866986][   T36]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  122.867014][   T36]  ? trace_f2fs_writepages+0x7f/0x200
[  122.867031][   T36]  ? f2fs_write_node_pages+0x478/0x6e0
[  122.867051][   T36]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  122.867078][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  122.867097][   T36]  do_writepages+0x32e/0x550
[  122.867147][   T36]  ? reacquire_held_locks+0x127/0x1d0
[  122.867160][   T36]  ? writeback_sb_inodes+0x384/0x1010
[  122.867182][   T36]  __writeback_single_inode+0x145/0xff0
[  122.867198][   T36]  ? do_raw_spin_unlock+0x4d/0x240
[  122.867217][   T36]  writeback_sb_inodes+0x6c7/0x1010
[  122.867254][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  122.867305][   T36]  ? rcu_is_watching+0x15/0xb0
[  122.867327][   T36]  wb_writeback+0x43b/0xaf0
[  122.867349][   T36]  ? queue_io+0x3c1/0x590
[  122.867367][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  122.867389][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  122.867408][   T36]  wb_workfn+0x409/0xef0
[  122.867435][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  122.867451][   T36]  ? __lock_acquire+0xab9/0xd20
[  122.867478][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  122.867494][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  122.867507][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  122.867518][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  122.867531][   T36]  process_scheduled_works+0xae1/0x17b0
[  122.867569][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  122.867596][   T36]  worker_thread+0x8a0/0xda0
[  122.867633][   T36]  kthread+0x711/0x8a0
[  122.867652][   T36]  ? __pfx_worker_thread+0x10/0x10
[  122.867664][   T36]  ? __pfx_kthread+0x10/0x10
[  122.867681][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  122.867695][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  122.867710][   T36]  ? __pfx_kthread+0x10/0x10
[  122.867726][   T36]  ret_from_fork+0x3fc/0x770
[  122.867750][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  122.867767][   T36]  ? __switch_to_asm+0x39/0x70
[  122.867782][   T36]  ? __switch_to_asm+0x33/0x70
[  122.867795][   T36]  ? __pfx_kthread+0x10/0x10
[  122.867810][   T36]  ret_from_fork_asm+0x1a/0x30
[  122.867835][   T36]  </TASK>
[  122.869795][   T36] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  123.091707][ T6689] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.868238][ T7666] loop2: detected capacity change from 0 to 32768
[  123.871605][ T7666] jfs: Unknown parameter ''
[  124.552297][ T7677] loop2: detected capacity change from 0 to 32768
[  124.568447][ T7677] jfs_strtoUCS: char2uni returned -22.
[  124.571977][ T7677] charset = euc-jp, char = 0xd4
[  124.719685][ T7701] 9pnet: p9_errstr2errno: server reported unknown error @0xffffffffffffffff
[  124.852791][   T33] audit: type=1326 audit(1755503135.777:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7712 comm="syz.0.593" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050c78ebe9 code=0x7ffc0000
[  124.873835][   T33] audit: type=1326 audit(1755503135.777:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7712 comm="syz.0.593" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050c78ebe9 code=0x7ffc0000
[  124.886728][   T33] audit: type=1326 audit(1755503135.807:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7712 comm="syz.0.593" exe="/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f050c78ebe9 code=0x7ffc0000
[  124.897547][   T33] audit: type=1326 audit(1755503135.807:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7712 comm="syz.0.593" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050c78ebe9 code=0x7ffc0000
[  124.910362][   T33] audit: type=1326 audit(1755503135.807:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7712 comm="syz.0.593" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050c78ebe9 code=0x7ffc0000
[  124.930070][   T33] audit: type=1326 audit(1755503135.817:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7712 comm="syz.0.593" exe="/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f050c78ebe9 code=0x7ffc0000
[  124.939942][   T33] audit: type=1326 audit(1755503135.817:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7712 comm="syz.0.593" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050c78ebe9 code=0x7ffc0000
[  124.954943][   T33] audit: type=1326 audit(1755503135.817:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7712 comm="syz.0.593" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050c78ebe9 code=0x7ffc0000
[  124.962269][ T7717] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type
[  124.964870][   T33] audit: type=1326 audit(1755503135.827:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7712 comm="syz.0.593" exe="/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f050c78ebe9 code=0x7ffc0000
[  124.967210][ T7719] netlink: 24 bytes leftover after parsing attributes in process `syz.2.595'.
[  124.983693][ T7719] netlink: 24 bytes leftover after parsing attributes in process `syz.2.595'.
[  125.231262][ T7732] vivid-000: disconnect
[  125.236238][ T7731] vivid-000: reconnect
[  127.626400][ T7772] loop3: detected capacity change from 0 to 32768
[  127.650796][ T7772] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  127.690106][ T7772] XFS (loop3): Ending clean mount
[  127.696321][ T7772] XFS (loop3): Quotacheck needed: Please wait.
[  127.719561][ T7772] XFS (loop3): Quotacheck: Done.
[  127.757728][ T6689] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  127.917935][ T7792] loop2: detected capacity change from 0 to 4096
[  127.954975][ T7792] ntfs3(loop2): ino=19, mi_enum_attr
[  127.956851][ T7792] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  127.970516][ T7796] loop3: detected capacity change from 0 to 2048
[  127.989745][ T7796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.026431][ T7801] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  128.044459][ T7807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.630'.
[  128.051119][ T6689] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.101208][ T7810] loop2: detected capacity change from 0 to 512
[  128.107681][ T7810] EXT4-fs: journaled quota format not specified
[  128.141055][ T7813] loop3: detected capacity change from 0 to 256
[  128.149513][ T7813] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  128.159863][ T7813] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  128.263810][ T5847] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  128.397880][ T7819] loop3: detected capacity change from 0 to 512
[  128.408531][ T7819] __quota_error: 2 callbacks suppressed
[  128.408543][ T7819] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  128.412894][ T7815] loop2: detected capacity change from 0 to 32768
[  128.418137][ T7819] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  128.420186][ T7815] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  128.422238][ T7819] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.636: Failed to acquire dquot type 1
[  128.429749][ T5847] usb 1-1: Using ep0 maxpacket: 32
[  128.440103][ T7819] EXT4-fs (loop3): 1 truncate cleaned up
[  128.441598][ T5847] usb 1-1: config 0 has an invalid interface number: 86 but max is 0
[  128.444369][ T7819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.446028][ T5847] usb 1-1: config 0 has no interface number 0
[  128.450934][ T7819] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.452916][ T5847] usb 1-1: config 0 interface 86 altsetting 2 endpoint 0x9 has an invalid bInterval 0, changing to 7
[  128.460803][ T5847] usb 1-1: config 0 interface 86 altsetting 2 endpoint 0x9 has invalid wMaxPacketSize 0
[  128.468912][ T7815] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  128.470911][ T5847] usb 1-1: config 0 interface 86 has no altsetting 0
[  128.477638][ T7815] XFS (loop2): Tail block (0x29) overwrite detected. Updated to 0x30
[  128.501724][ T5847] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=33.7a
[  128.504863][ T6689] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.505685][ T7815] XFS (loop2): Ending clean mount
[  128.511288][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.519131][ T5847] usb 1-1: Product: syz
[  128.520591][ T5847] usb 1-1: Manufacturer: syz
[  128.522444][ T5847] usb 1-1: SerialNumber: syz
[  128.526506][ T5847] usb 1-1: config 0 descriptor??
[  128.608160][ T5850] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  128.755873][ T2208] usb 1-1: USB disconnect, device number 14
[  128.860915][ T7848] loop3: detected capacity change from 0 to 4096
[  128.865890][ T7848] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  129.003436][   T52] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  129.074634][ T7853] block nbd3: NBD_DISCONNECT
[  129.077125][ T7853] block nbd3: Disconnected due to user request.
[  129.079732][ T7853] block nbd3: shutting down sockets
[  129.154140][   T52] usb 3-1: Using ep0 maxpacket: 32
[  129.163377][   T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  129.167844][   T52] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[  129.171109][   T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.178804][   T52] usb 3-1: config 0 descriptor??
[  129.595009][ T7867] loop3: detected capacity change from 0 to 2048
[  129.604677][ T7867] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  129.641673][   T52] belkin 0003:1020:0006.0007: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.2-1/input0
[  129.729900][ T7870] loop3: detected capacity change from 0 to 128
[  129.741135][ T7870] ufs: You didn't specify the type of your ufs filesystem
[  129.741135][ T7870] 
[  129.741135][ T7870] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  129.741135][ T7870] 
[  129.741135][ T7870] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  129.757482][ T7870] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  129.853158][   T52] usb 3-1: USB disconnect, device number 10
[  130.083596][ T7874] netlink: 32 bytes leftover after parsing attributes in process `syz.3.656'.
[  130.457134][ T7881] loop3: detected capacity change from 0 to 512
[  130.460783][ T7881] EXT4-fs: Ignoring removed orlov option
[  130.469058][ T7881] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  130.489985][ T7881] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  130.508553][ T7881] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.660: corrupted in-inode xattr: e_value size too large
[  130.630103][ T7881] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.660: couldn't read orphan inode 15 (err -117)
[  130.666683][ T7881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.997988][ T6689] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.296640][ T7906] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  131.457991][ T7914] netlink: 372 bytes leftover after parsing attributes in process `syz.2.674'.
[  131.464109][ T7914] ==================================================================
[  131.467517][ T7914] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  131.470382][ T7914] Read of size 4 at addr ffff88810f9980c4 by task syz.2.674/7914
[  131.474489][ T7914] 
[  131.475396][ T7914] CPU: 0 UID: 0 PID: 7914 Comm: syz.2.674 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  131.475408][ T7914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  131.475414][ T7914] Call Trace:
[  131.475419][ T7914]  <TASK>
[  131.475424][ T7914]  dump_stack_lvl+0x189/0x250
[  131.475438][ T7914]  ? __kasan_check_byte+0x12/0x40
[  131.475450][ T7914]  ? __pfx_dump_stack_lvl+0x10/0x10
[  131.475459][ T7914]  ? lock_release+0x4b/0x3e0
[  131.475471][ T7914]  ? __virt_addr_valid+0x4a5/0x5c0
[  131.475483][ T7914]  print_report+0xca/0x240
[  131.475490][ T7914]  ? xfrm_alloc_spi+0x570/0xf30
[  131.475499][ T7914]  kasan_report+0x118/0x150
[  131.475508][ T7914]  ? xfrm_alloc_spi+0x570/0xf30
[  131.475516][ T7914]  xfrm_alloc_spi+0x570/0xf30
[  131.475523][ T7914]  ? xfrm_alloc_spi+0x2a0/0xf30
[  131.475533][ T7914]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  131.475540][ T7914]  ? xfrm_find_acq+0x87/0xa0
[  131.475550][ T7914]  xfrm_alloc_userspi+0x70b/0xc90
[  131.475561][ T7914]  ? apparmor_capable+0x137/0x1b0
[  131.475570][ T7914]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  131.475578][ T7914]  ? __nla_parse+0x40/0x60
[  131.475589][ T7914]  xfrm_user_rcv_msg+0x7a3/0xab0
[  131.475598][ T7914]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  131.475610][ T7914]  ? __pfx___mutex_trylock_common+0x10/0x10
[  131.475618][ T7914]  ? rcu_is_watching+0x15/0xb0
[  131.475626][ T7914]  ? trace_contention_end+0x39/0x120
[  131.475634][ T7914]  ? __mutex_lock+0x335/0x1360
[  131.475645][ T7914]  netlink_rcv_skb+0x208/0x470
[  131.475655][ T7914]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  131.475663][ T7914]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  131.475680][ T7914]  ? netlink_deliver_tap+0x2e/0x1b0
[  131.475689][ T7914]  ? netlink_deliver_tap+0x2e/0x1b0
[  131.475698][ T7914]  xfrm_netlink_rcv+0x79/0x90
[  131.475706][ T7914]  netlink_unicast+0x82f/0x9e0
[  131.475715][ T7914]  ? __pfx_netlink_unicast+0x10/0x10
[  131.475723][ T7914]  ? netlink_sendmsg+0x642/0xb30
[  131.475731][ T7914]  ? skb_put+0x11b/0x210
[  131.475739][ T7914]  netlink_sendmsg+0x805/0xb30
[  131.475751][ T7914]  ? __pfx_netlink_sendmsg+0x10/0x10
[  131.475762][ T7914]  ? aa_sock_msg_perm+0xf1/0x1d0
[  131.475773][ T7914]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  131.475783][ T7914]  ? __pfx_netlink_sendmsg+0x10/0x10
[  131.475792][ T7914]  __sock_sendmsg+0x21c/0x270
[  131.475802][ T7914]  ____sys_sendmsg+0x505/0x830
[  131.475809][ T7914]  ? __pfx_____sys_sendmsg+0x10/0x10
[  131.475817][ T7914]  ? import_iovec+0x74/0xa0
[  131.475825][ T7914]  ___sys_sendmsg+0x21f/0x2a0
[  131.475831][ T7914]  ? __pfx____sys_sendmsg+0x10/0x10
[  131.475842][ T7914]  ? __fget_files+0x2a/0x420
[  131.475849][ T7914]  ? __fget_files+0x3a0/0x420
[  131.475856][ T7914]  __x64_sys_sendmsg+0x19b/0x260
[  131.475863][ T7914]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  131.475870][ T7914]  ? rcu_is_watching+0x15/0xb0
[  131.475877][ T7914]  ? do_syscall_64+0xbe/0x3b0
[  131.475887][ T7914]  do_syscall_64+0xfa/0x3b0
[  131.475896][ T7914]  ? lockdep_hardirqs_on+0x9c/0x150
[  131.475907][ T7914]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.475914][ T7914]  ? exc_page_fault+0x9f/0xf0
[  131.475923][ T7914]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.475929][ T7914] RIP: 0033:0x7f22ea98ebe9
[  131.475937][ T7914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  131.475944][ T7914] RSP: 002b:00007f22eb841038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  131.475952][ T7914] RAX: ffffffffffffffda RBX: 00007f22eabb5fa0 RCX: 00007f22ea98ebe9
[  131.475957][ T7914] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003
[  131.475961][ T7914] RBP: 00007f22eaa11e19 R08: 0000000000000000 R09: 0000000000000000
[  131.475965][ T7914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  131.475969][ T7914] R13: 00007f22eabb6038 R14: 00007f22eabb5fa0 R15: 00007ffde1c9fb38
[  131.475976][ T7914]  </TASK>
[  131.475979][ T7914] 
[  131.624357][ T7914] Allocated by task 6547:
[  131.626173][ T7914]  kasan_save_track+0x3e/0x80
[  131.627944][ T7914]  __kasan_slab_alloc+0x6c/0x80
[  131.629710][ T7914]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  131.631407][ T7914]  xfrm_state_alloc+0x24/0x2f0
[  131.632897][ T7914]  __find_acq_core+0x8a7/0x1c00
[  131.634566][ T7914]  xfrm_find_acq+0x78/0xa0
[  131.636448][ T7914]  xfrm_alloc_userspi+0x6b3/0xc90
[  131.638539][ T7914]  xfrm_user_rcv_msg+0x7a3/0xab0
[  131.640582][ T7914]  netlink_rcv_skb+0x208/0x470
[  131.642468][ T7914]  xfrm_netlink_rcv+0x79/0x90
[  131.644229][ T7914]  netlink_unicast+0x82f/0x9e0
[  131.645753][ T7914]  netlink_sendmsg+0x805/0xb30
[  131.647280][ T7914]  __sock_sendmsg+0x21c/0x270
[  131.648876][ T7914]  ____sys_sendmsg+0x505/0x830
[  131.650719][ T7914]  ___sys_sendmsg+0x21f/0x2a0
[  131.652480][ T7914]  __x64_sys_sendmsg+0x19b/0x260
[  131.654502][ T7914]  do_syscall_64+0xfa/0x3b0
[  131.656382][ T7914]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.658355][ T7914] 
[  131.659279][ T7914] Freed by task 2208:
[  131.660922][ T7914]  kasan_save_track+0x3e/0x80
[  131.662866][ T7914]  kasan_save_free_info+0x46/0x50
[  131.664947][ T7914]  __kasan_slab_free+0x5b/0x80
[  131.666915][ T7914]  kmem_cache_free+0x18f/0x400
[  131.668517][ T7914]  xfrm_state_gc_task+0x52d/0x6b0
[  131.670356][ T7914]  process_scheduled_works+0xae1/0x17b0
[  131.672647][ T7914]  worker_thread+0x8a0/0xda0
[  131.674255][ T7914]  kthread+0x711/0x8a0
[  131.675653][ T7914]  ret_from_fork+0x3fc/0x770
[  131.677323][ T7914]  ret_from_fork_asm+0x1a/0x30
[  131.679132][ T7914] 
[  131.679899][ T7914] The buggy address belongs to the object at ffff88810f998000
[  131.679899][ T7914]  which belongs to the cache xfrm_state of size 928
[  131.685280][ T7914] The buggy address is located 196 bytes inside of
[  131.685280][ T7914]  freed 928-byte region [ffff88810f998000, ffff88810f9983a0)
[  131.689650][ T7914] 
[  131.690400][ T7914] The buggy address belongs to the physical page:
[  131.692635][ T7914] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88810f998480 pfn:0x10f998
[  131.695967][ T7914] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  131.699093][ T7914] anon flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  131.702084][ T7914] page_type: f5(slab)
[  131.703541][ T7914] raw: 057ff00000000040 ffff8881050b6c80 0000000000000000 0000000000000001
[  131.706734][ T7914] raw: ffff88810f998480 00000000000e000c 00000000f5000000 0000000000000000
[  131.710089][ T7914] head: 057ff00000000040 ffff8881050b6c80 0000000000000000 0000000000000001
[  131.713534][ T7914] head: ffff88810f998480 00000000000e000c 00000000f5000000 0000000000000000
[  131.716752][ T7914] head: 057ff00000000002 ffffea00043e6601 00000000ffffffff 00000000ffffffff
[  131.719749][ T7914] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  131.722730][ T7914] page dumped because: kasan: bad access detected
[  131.725049][ T7914] page_owner tracks the page as allocated
[  131.727083][ T7914] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6547, tgid 6545 (syz.2.224), ts 82994965176, free_ts 82756385083
[  131.733697][ T7914]  post_alloc_hook+0x240/0x2a0
[  131.735268][ T7914]  get_page_from_freelist+0x21e4/0x22c0
[  131.737028][ T7914]  __alloc_frozen_pages_noprof+0x181/0x370
[  131.738940][ T7914]  alloc_pages_mpol+0x232/0x4a0
[  131.740480][ T7914]  allocate_slab+0x8a/0x370
[  131.741895][ T7914]  ___slab_alloc+0xbeb/0x1410
[  131.743704][ T7914]  kmem_cache_alloc_noprof+0x283/0x3c0
[  131.745705][ T7914]  xfrm_state_alloc+0x24/0x2f0
[  131.747582][ T7914]  __find_acq_core+0x8a7/0x1c00
[  131.749445][ T7914]  xfrm_find_acq+0x78/0xa0
[  131.751206][ T7914]  xfrm_alloc_userspi+0x6b3/0xc90
[  131.752902][ T7914]  xfrm_user_rcv_msg+0x7a3/0xab0
[  131.754818][ T7914]  netlink_rcv_skb+0x208/0x470
[  131.756587][ T7914]  xfrm_netlink_rcv+0x79/0x90
[  131.758347][ T7914]  netlink_unicast+0x82f/0x9e0
[  131.760138][ T7914]  netlink_sendmsg+0x805/0xb30
[  131.761833][ T7914] page last free pid 5854 tgid 5854 stack trace:
[  131.764037][ T7914]  __free_frozen_pages+0xbc4/0xd30
[  131.765758][ T7914]  __put_partials+0x156/0x1a0
[  131.767508][ T7914]  put_cpu_partial+0x17c/0x250
[  131.769106][ T7914]  __slab_free+0x2d5/0x3c0
[  131.770626][ T7914]  qlist_free_all+0x97/0x140
[  131.772456][ T7914]  kasan_quarantine_reduce+0x148/0x160
[  131.774293][ T7914]  __kasan_slab_alloc+0x22/0x80
[  131.775771][ T7914]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  131.777860][ T7914]  getname_flags+0xb8/0x540
[  131.779563][ T7914]  user_path_at+0x24/0x60
[  131.781055][ T7914]  do_utimes+0x131/0x2a0
[  131.782665][ T7914]  __x64_sys_utimensat+0x14f/0x230
[  131.784500][ T7914]  do_syscall_64+0xfa/0x3b0
[  131.786143][ T7914]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.788326][ T7914] 
[  131.789427][ T7914] Memory state around the buggy address:
[  131.791247][ T7914]  ffff88810f997f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  131.793706][ T7914]  ffff88810f998000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  131.796211][ T7914] >ffff88810f998080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  131.799000][ T7914]                                            ^
[  131.801084][ T7914]  ffff88810f998100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  131.803674][ T7914]  ffff88810f998180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  131.806319][ T7914] ==================================================================
[  131.809658][ T7914] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  131.812472][ T7914] CPU: 0 UID: 0 PID: 7914 Comm: syz.2.674 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  131.816468][ T7914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  131.819680][ T7914] Call Trace:
[  131.820816][ T7914]  <TASK>
[  131.821976][ T7914]  dump_stack_lvl+0x99/0x250
[  131.824643][ T7914]  ? __asan_memcpy+0x40/0x70
[  131.826051][ T7914]  ? __pfx_dump_stack_lvl+0x10/0x10
[  131.828026][ T7914]  ? __pfx__printk+0x10/0x10
[  131.829616][ T7914]  vpanic+0x281/0x750
[  131.831112][ T7914]  ? __pfx_vpanic+0x10/0x10
[  131.832695][ T7914]  ? irqentry_exit+0x74/0x90
[  131.834412][ T7914]  panic+0xb9/0xc0
[  131.835900][ T7914]  ? __pfx_panic+0x10/0x10
[  131.837609][ T7914]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  131.839930][ T7914]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  131.842078][ T7914]  ? xfrm_alloc_spi+0x570/0xf30
[  131.844023][ T7914]  check_panic_on_warn+0x89/0xb0
[  131.846086][ T7914]  ? xfrm_alloc_spi+0x570/0xf30
[  131.847985][ T7914]  end_report+0x78/0x160
[  131.849484][ T7914]  kasan_report+0x129/0x150
[  131.851397][ T7914]  ? xfrm_alloc_spi+0x570/0xf30
[  131.853303][ T7914]  xfrm_alloc_spi+0x570/0xf30
[  131.854865][ T7914]  ? xfrm_alloc_spi+0x2a0/0xf30
[  131.856721][ T7914]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  131.858669][ T7914]  ? xfrm_find_acq+0x87/0xa0
[  131.860439][ T7914]  xfrm_alloc_userspi+0x70b/0xc90
[  131.862239][ T7914]  ? apparmor_capable+0x137/0x1b0
[  131.864187][ T7914]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  131.866413][ T7914]  ? __nla_parse+0x40/0x60
[  131.868253][ T7914]  xfrm_user_rcv_msg+0x7a3/0xab0
[  131.870333][ T7914]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  131.872553][ T7914]  ? __pfx___mutex_trylock_common+0x10/0x10
[  131.875021][ T7914]  ? rcu_is_watching+0x15/0xb0
[  131.877025][ T7914]  ? trace_contention_end+0x39/0x120
[  131.879305][ T7914]  ? __mutex_lock+0x335/0x1360
[  131.880970][ T7914]  netlink_rcv_skb+0x208/0x470
[  131.882962][ T7914]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  131.885167][ T7914]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  131.887197][ T7914]  ? netlink_deliver_tap+0x2e/0x1b0
[  131.889233][ T7914]  ? netlink_deliver_tap+0x2e/0x1b0
[  131.891163][ T7914]  xfrm_netlink_rcv+0x79/0x90
[  131.892881][ T7914]  netlink_unicast+0x82f/0x9e0
[  131.894684][ T7914]  ? __pfx_netlink_unicast+0x10/0x10
[  131.896623][ T7914]  ? netlink_sendmsg+0x642/0xb30
[  131.898402][ T7914]  ? skb_put+0x11b/0x210
[  131.899875][ T7914]  netlink_sendmsg+0x805/0xb30
[  131.901421][ T7914]  ? __pfx_netlink_sendmsg+0x10/0x10
[  131.903175][ T7914]  ? aa_sock_msg_perm+0xf1/0x1d0
[  131.904801][ T7914]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  131.906525][ T7914]  ? __pfx_netlink_sendmsg+0x10/0x10
[  131.908500][ T7914]  __sock_sendmsg+0x21c/0x270
[  131.910209][ T7914]  ____sys_sendmsg+0x505/0x830
[  131.911845][ T7914]  ? __pfx_____sys_sendmsg+0x10/0x10
[  131.913687][ T7914]  ? import_iovec+0x74/0xa0
[  131.915585][ T7914]  ___sys_sendmsg+0x21f/0x2a0
[  131.917548][ T7914]  ? __pfx____sys_sendmsg+0x10/0x10
[  131.919419][ T7914]  ? __fget_files+0x2a/0x420
[  131.920892][ T7914]  ? __fget_files+0x3a0/0x420
[  131.922378][ T7914]  __x64_sys_sendmsg+0x19b/0x260
[  131.923952][ T7914]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  131.925682][ T7914]  ? rcu_is_watching+0x15/0xb0
[  131.927252][ T7914]  ? do_syscall_64+0xbe/0x3b0
[  131.928735][ T7914]  do_syscall_64+0xfa/0x3b0
[  131.930240][ T7914]  ? lockdep_hardirqs_on+0x9c/0x150
[  131.931850][ T7914]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.933794][ T7914]  ? exc_page_fault+0x9f/0xf0
[  131.935338][ T7914]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.937662][ T7914] RIP: 0033:0x7f22ea98ebe9
[  131.939306][ T7914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  131.946014][ T7914] RSP: 002b:00007f22eb841038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  131.948914][ T7914] RAX: ffffffffffffffda RBX: 00007f22eabb5fa0 RCX: 00007f22ea98ebe9
[  131.951641][ T7914] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003
[  131.954642][ T7914] RBP: 00007f22eaa11e19 R08: 0000000000000000 R09: 0000000000000000
[  131.957856][ T7914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  131.960816][ T7914] R13: 00007f22eabb6038 R14: 00007f22eabb5fa0 R15: 00007ffde1c9fb38
[  131.963667][ T7914]  </TASK>
[  131.965471][ T7914] Kernel Offset: disabled
[  131.966992][ T7914] Rebooting in 86400 seconds..

VM DIAGNOSIS:
07:45:42  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000034 RBX=0000000000000034 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000015d6 RDI=00000000000015d7 RBP=00000000000003f8 RSP=ffffc90002c5e9f0
R8 =ffff888020900237 R9 =1ffff11004120046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af98fe R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f22eb8416c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f050d6d9fc8 CR3=0000000032112000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0004000000000008
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=35075c0015000c00 000001001f000800
XMM06=0000000000000000 0000000000000000 XMM07=00000a0000000000 000000fffffffc00
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007f22eaa12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=1ffff11009608341 RCX=ffff888106fe8000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90002dff4c0 RSP=ffffc90002dff340
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b44d3c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2ec1cff8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8133c57e ffffffff8133c57e
XMM02=00007f26a6987498 ffffffff8133c57e XMM03=00007f26a69874a8 00007f26a69874a0
XMM04=00007f26a74ed100 00007f26a6987460 XMM05=00007f26a6987478 00007f26a69874c0
XMM06=00007f26a69874b8 00007f26a69874b0 XMM07=00007f26a69874a8 00007f26a69874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f26a6812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
