last executing test programs:

4m19.588024364s ago: executing program 0 (id=106):
unshare(0x2c020400)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
r1 = getgid()
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r1], 0x0, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)

4m19.044572028s ago: executing program 0 (id=112):
r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x44)
r1 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0xc3b9, 0x80, 0xfffffffd, 0xf0, 0x0, r0}, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0})
io_uring_enter(r1, 0x847ba, 0x2000, 0xe, 0x0, 0x0)

4m18.419706223s ago: executing program 0 (id=120):
r0 = userfaultfd(0x80001)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}})

4m15.664434831s ago: executing program 0 (id=132):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0xc)

4m15.043375358s ago: executing program 0 (id=134):
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x14, 0x0, 0x0})

4m14.260111055s ago: executing program 0 (id=138):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00')
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x9e3a, 0x10100, 0x80000, 0x1bd}, 0x0, 0x0)
read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020)

4m13.392433216s ago: executing program 32 (id=138):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00')
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x9e3a, 0x10100, 0x80000, 0x1bd}, 0x0, 0x0)
read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020)

1m50.868384284s ago: executing program 1 (id=1114):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0xf00, 0x5e, 0x200000000000, 0x100000000000006})

1m50.596288958s ago: executing program 1 (id=1117):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
mmap(&(0x7f0000100000/0x3000)=nil, 0x3000, 0x1000006, 0x28011, r0, 0xffffc000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1m50.19555875s ago: executing program 1 (id=1119):
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r2=>0x0)
io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}])
io_destroy(r2)

1m49.596356107s ago: executing program 1 (id=1124):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00004, &(0x7f0000000200)={[{@adinicb}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@lastblock={'lastblock', 0x3d, 0x5}}, {@nostrict}, {}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@mode={'mode', 0x3d, 0x8}}, {@fileset={'fileset', 0x3d, 0xd9}}, {@adinicb}, {@gid_forget}, {@lastblock={'lastblock', 0x3d, 0xa}}, {@adinicb}, {@adinicb}]}, 0x1, 0xc4d, &(0x7f0000001bc0)="$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")

1m49.154608186s ago: executing program 1 (id=1128):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x7f, @loopback, 0x8}}, 0x4, 0xae}, 0x90)

1m48.644298114s ago: executing program 1 (id=1132):
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0)
read(r0, &(0x7f0000000000)=""/185, 0xb9)

1m47.970372166s ago: executing program 33 (id=1132):
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0)
read(r0, &(0x7f0000000000)=""/185, 0xb9)

6.355021248s ago: executing program 6 (id=1859):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2cb, &(0x7f0000000ac0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file7/file0\x00', 0x12090aa, 0x0, 0x3, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x2)

5.644393841s ago: executing program 7 (id=1864):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000800)

5.48865739s ago: executing program 6 (id=1865):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000300)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x4, 0x6, 0x0, @multicast2, @local}, {0x1, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xfe}}}}}}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

5.362208574s ago: executing program 7 (id=1866):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x448, 0x2, [@TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xd5, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x5, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x4, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0x2, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10001, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x6b2, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x5, 0x4, 0x7, 0x9, {0x7, 0x2, 0x3, 0x8000, 0x1, 0x4}, {0xc, 0x0, 0xfe00, 0x3, 0xc, 0x1}, 0x3, 0x0, 0x9}}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)

5.290396091s ago: executing program 5 (id=1867):
ptrace(0x10, 0x0)
mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)

4.809229962s ago: executing program 7 (id=1870):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_io_uring_setup(0x495, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x7, 0x288}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd=r0, 0x80000004, 0x0})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)

4.685992108s ago: executing program 6 (id=1872):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00'}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r0}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000010c0)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r2, 0x0, 0x180000}, 0x18)
close(r1)

4.601272732s ago: executing program 5 (id=1873):
syz_mount_image$nilfs2(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa6c, &(0x7f0000001380)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r1 = open(&(0x7f0000000180)='./file1\x00', 0x185102, 0x2b)
ftruncate(r1, 0x2007ffb)
sendfile(r0, r1, 0x0, 0x1000000201001)

4.084032018s ago: executing program 6 (id=1876):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1380, &(0x7f0000003700)=ANY=[])

3.693094838s ago: executing program 5 (id=1879):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@getqdisc={0x24, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7ff2, 0x4}, {0x8, 0x8}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x811}, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x19)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x0, 0x1, 0x9, 0xbb, 0x57e0, 0x0, 0x4662, r2}, 0x20)

3.5113273s ago: executing program 7 (id=1881):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
shutdown(r0, 0x1)
recvfrom$inet(r0, 0x0, 0x62, 0x40010033, 0x0, 0x0)

3.355093347s ago: executing program 5 (id=1884):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10)
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)

3.119100192s ago: executing program 7 (id=1885):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="ad")
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[], 0x0)

3.118095488s ago: executing program 4 (id=1886):
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0xfffffffffffffdec)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})

2.963452422s ago: executing program 5 (id=1887):
r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f0000000180)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}, {0x7, 0x0, 0x0, 0x0}, {0x1, 0x201, 0x0, 0x0}], 0x3})

2.886111155s ago: executing program 4 (id=1888):
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff)
write(r1, &(0x7f0000000100), 0xfffffe5d)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)

2.173509177s ago: executing program 3 (id=1892):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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")
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

1.942811216s ago: executing program 2 (id=1893):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@my=0x1, 0xffffffff}, @any, 0x0, 0x0, 0x8000000, 0x0, 0x200000000006})
close(r0)

1.902514554s ago: executing program 6 (id=1894):
syz_mount_image$xfs(&(0x7f00000002c0), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000180)={[{@pquota}, {@bsdgroups}, {@prjquota}, {@gquota}, {@pquota}, {@bsdgroups}, {@inode32}, {@quota}]}, 0xff, 0x9838, &(0x7f0000009780)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x1a, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}])

1.660011351s ago: executing program 2 (id=1895):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket(0xa, 0x3, 0x8)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}})

1.433681906s ago: executing program 3 (id=1896):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0)

1.371285194s ago: executing program 2 (id=1897):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff)

1.369600434s ago: executing program 4 (id=1898):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
io_setup(0xc, &(0x7f0000000180)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f00000006c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0xfff2, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1}, 0x0)

1.13387817s ago: executing program 2 (id=1899):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000b00)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x24}}, 0x20008840)

1.088638974s ago: executing program 3 (id=1900):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
close_range(r0, 0xffffffffffffffff, 0x0)

1.05595402s ago: executing program 4 (id=1901):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x40, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa02}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}, 0x1, 0x0, 0x0, 0xc804}, 0x0)

868.234713ms ago: executing program 2 (id=1902):
ptrace(0x10, 0x0)
mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)

868.056991ms ago: executing program 5 (id=1903):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e909040000010300000009210500000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000001c0)={&(0x7f00000000c0)=[{0x1, 0x4011, 0x0, 0x0}, {0x1, 0xda01, 0x0, 0x0}, {0x8, 0x801, 0x0, 0x0}], 0x3})

794.747472ms ago: executing program 3 (id=1904):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x2f)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@loopback, 0x4e20, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x802, 0x9141, 0x0, 0x0, 0xf42, 0x8}, {0x0, 0x0, 0x0, 0xfffefffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x4}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@multicast1, 0x3502, 0x0, 0x2, 0x4, 0x0, 0x0, 0xfffffffd}}, 0xe8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)

747.278148ms ago: executing program 4 (id=1905):
dup(0xffffffffffffffff)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e23, 0x0, 0x4e1d, 0x1003, 0x2, 0x20, 0x80, 0x11}, {0x80000000, 0x9, 0x8, 0x3, 0xc, 0x81, 0xff, 0x408}, {0xb, 0x4d, 0x3, 0x4}, 0x85, 0xfffffffc, 0x1, 0x0, 0x3, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x4d6, 0x3c}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x0, 0x0, 0x4, 0x8, 0x1000000}}, 0xe8)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000001280), 0x6)

589.411204ms ago: executing program 3 (id=1906):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x360})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000bc9000/0x3000)=nil, 0x3000}, 0x1})

507.64393ms ago: executing program 4 (id=1907):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x9, 0x6d, 0x5c, 0x40, 0x2304, 0x23e, 0xd769, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd9, 0x0, 0x0, 0x37, 0x10, 0xeb}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000000)={0x0, 0x0, 0x1, "ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/118, 0x76}], 0x1)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

355.576487ms ago: executing program 2 (id=1908):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
syz_mount_image$f2fs(&(0x7f0000010600), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x10625, &(0x7f0000020c80)="$eJzs3L1vG2UcB/CfE/pKWyrUFwYQJyGkRKqjOn0RLKhAK0C0VUVhYALHdi23ti+K3dR0YYEBiYmFf4IJ/gYW2FlhYWMBia2iyHePEaVFUMfULfl8pMv3uefufn4e65Ynl1wA29bB7NdfKnEg9kTEYkTsiyjalbQVzpTxVEQ8m7oW0lZJ/X907IyIvRFxYFy8rFlJh57+7dYPX357/plPvv/suw8///nyfGYMPAyej4jeetm+0Sszb5d5NfXXNztF9k5upiwP9K6l/bzMG621osKN+uS8epEn2uX5+fr1wTivdOuNcbY7V4r+9X75gYPN9qROccHV+kax32ytFdkZ5EW2b5bjGqW8ORiWdZqp3gdF+RgOJ1n2t0atcj7r14ps9Iepv6ybN1ujcW6mTB8XjbzbLMaxNvXX/NA73+lfH2WbrY1BJ+9np1ZqL6zUTldrG3mzNWydrNZ7zdMns6V2d3xaddiq986087zdba008t5yttRuNKq1WrZ0trXWqfezWm3lxMrx6qnl1DqWvXbxnazbzJbG+Uqnf33Y6Q6yK/lGVl6xnK2unHhxOXuull2+cCm79Na5cxcuvf3e2XcvvnzhjVfTSXcNK1taPb66Wq0dr67Wlqed+bHbpe06/9KosrXr2ebcPwD3bZr1/4L1P7BF1v/W/7Gt1//mH9b/bNVd98/u+YwDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH7scdX71eNA6W+4+n/v2p68mIOBoRRyLicETcvofF2HlHzUMRUUnte52/4y9j+LoSRYXxNbvStjcizqTt1hP/9bcAAAAAj4DKdJd98c1HH0csjpvFj5dmOyoebumXNrtnVa+4Cx+797H9913tUFFstOVRlQ5PSs7EkYjYcfCnGVU7GhEL+96fUbV/ZfGO2P2nqJSx8CBHAwAAPBh3rgT+ZvUGAADA/8Cn8x4A81E8r01/i5+eBe8qIz0Q3DPZe3MOowMAAABmYcr/GgAAAAAeIcX6/5/f/7c4t/f/TWp4/x8AAABMr3z/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDv7NxNaiJBFAfwp06POh+MDH5cxdUwSxceIkfIMgdIbpOdZwiI5zC7HCFosLsC6cRAoEtN5PeDtqqb9s9T3DyrKQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADum+WMxuV9c3TXM222bey+03LQwAAACIdbGYlZNBdf4zXf+dLv2NiElEjCNiFBH7evdOfK9lDiOileb77i9e1XAXUSbs3tNNx4+I+J+Oxz+H/hYAAADgfK2W03lEZzctX/69uaN1gqo4kvSnTS9XXvlj+ZYrbViGXWVKGz1HZjGOiGLwkCltEhHtXxeZ0j6kUxt6L4ZWNbSPWQ0AAHAc9U4gW/cGAADAp3N56gI4jXK9Nj2Ln9aCu9WQFgT7tTMAAADgC/JwPwAAAJy/sv+3/x8AAACct2r/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5pXSxmq+V03jRns20mz6cBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCJ/XlJwRAGgjDY/1O9U/D+t1IadKsrd1UQ+JghhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABXXsfJ+4xPY03y7bTx63gk+XfVmLpqzF03ll4Yt89tz/8IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAnf15OQEQiMEwGN/a02L/NXlRftCzN0GYAeEjIcgCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA33T3V/0TQ2KvqjHTxJRxq6o5q8SSVWLNQWLLQXv723F+8CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsD/vNhEDARRFnwcQOCGAEsgtfi2QECEogY+EZMk1UAANkRCRWjQCLexK3nG6mznZc5J3g9FoBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvrHaeOEjSpMxZUu4/zv8OkxylfI7j3fGUzdf/73Cyyafvn4eaZ3m8aJO0aZb4DgDA4rp5pzjN23v/eplMe1X3uu5N3e556F+2XXq7yNMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWLNz/65NvHEcwJ+kTb7furk4iIJWwYJo+oPStHRRFKrgP9AttLEUUy1tB1sEqUtxEVzcXVx06+Tkf+DkIqKgewUFEQSpJLnTp7aVuNyl+HrBk3x6HHfPc8PB+z7XAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIe21sPZtC6EEI72/qqbXn+6M7PX99bdI6PpeHD86WJ8zOYhSiGE6/ON+mCGa+lmp8Nw6/vdx/sD8TX8fb/l1bUbtUajvqRQKLqnaN7Ucp1GDjctAAAOrFIymrn+fWlzqrmtMBnC9uOd+f9MVIcO8//2o4GX8bni/D+U2Qq7W5r/p69uTPwp/1dWFhYry6tr5+YXanP1ufrNobHxscGR6ujwWKX1PKXiqQoAAAD7Kycjzv/Fyd39/0NRHTrM/y+eX5mOz9Uj/++S5v+L/f1POuv/5zBJAACAf8ThE18+F/bYXiiXw+3aysrSUPvz59/D7c8cpvrX/ktGnP97JvOeFQAAAJCFrfXCjv7/bFSHDvv/b79eOhYfsyeE0Jf0/8/P3GrMZrecrpX2/ycu1K7l/f//OSwfAACAjPQlI+7/l1rv/xdPpvsUQwgDp9p18jOAHeX/7/fGX8Xnit//H8luiV2pWG1fjzT/b7x5Nr9f/m/tWw2ht5rTZAEAADjw/k9GM/9/KG1OLX17eLns/X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB/s2DFKM0EUB/BJNvm+RjEgiKWFNhaigmAVsBAkHsJCFARPIAHxAAqexcI7iKROSg+QwhvIzO6EkEYFyWr4/WDyf4Qk+3a2yRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBPjY/CRq6L+NIp62b13vC9fx5zNJPpu7drB3HFujHftv+c9SpfRqfPw6k9bBzW1xMAAACLp8jzfQjhrf10ErPZTfP/Vv5MnPn7y2Wd5/nZuT9nnv3jWnosziYX6pTXaYcQLq+uL3bndoe/22bYT9l73X6Y7OFNeXYybeULv9VKzyed0BTpsTV7d6vjdtr1xv1gcPwvlf9//i4AgO/ayVkV+f9RzL06GwNgYbWqFabm/6Jbb08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8/ARAAD//0GWmLQ=")
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)

284.285754ms ago: executing program 7 (id=1909):
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xc, 0x10, 0x1, [{{0x9, 0x4, 0x0, 0xe, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x8c, 0x7f, 0x2}}}}}]}}]}}, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200)
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r0, 0x5501, 0x0)

152.022021ms ago: executing program 3 (id=1910):
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x40001)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000100)=""/208)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)

0s ago: executing program 6 (id=1911):
fchdir(0xffffffffffffffff)
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e9090400000103000000092105000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000000)="10db")

kernel console output (not intermixed with test programs):

y 0 port 6081 - 0
[  294.488093][ T5969] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  294.499453][ T9468] loop2: detected capacity change from 0 to 32768
[  294.524009][   T50] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  294.541881][ T5969] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  294.573842][ T9501] erofs (device loop6): mounted with root inode @ nid 36.
[  294.602218][ T5969] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  294.657611][ T5969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.660295][ T9501] erofs (device loop6): big pcluster head1/2 of compact indexes should be consistent for nid 36
[  294.706350][   T30] audit: type=1800 audit(1760137043.623:231): pid=9468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1205" name="file1" dev="loop2" ino=4 res=0 errno=0
[  294.721041][ T5969] usb 6-1: config 0 descriptor??
[  294.772852][ T9501] erofs (device loop6): big pcluster head1/2 of compact indexes should be consistent for nid 36
[  294.813231][ T5969] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  294.822960][ T9501] erofs (device loop6): readahead error at folio 7 @ nid 36
[  294.827184][ T9507] erofs (device loop6): big pcluster head1/2 of compact indexes should be consistent for nid 36
[  294.840822][ T5969] dvb-usb: bulk message failed: -22 (3/0)
[  294.898922][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.908737][ T9501] erofs (device loop6): big pcluster head1/2 of compact indexes should be consistent for nid 36
[  294.929020][ T5969] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  294.949679][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  294.962543][ T5969] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  294.973980][ T9501] erofs (device loop6): readahead error at folio 6 @ nid 36
[  294.988479][ T5969] usb 6-1: media controller created
[  295.001755][ T9507] erofs (device loop6): big pcluster head1/2 of compact indexes should be consistent for nid 36
[  295.026159][ T5969] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  295.056300][ T9501] erofs (device loop6): big pcluster head1/2 of compact indexes should be consistent for nid 36
[  295.080076][ T7516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.086906][ T9507] erofs (device loop6): read error -117 @ 72 of nid 36
[  295.116706][ T9501] erofs (device loop6): readahead error at folio 5 @ nid 36
[  295.129328][ T7516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  295.138147][ T5969] dvb-usb: bulk message failed: -22 (6/0)
[  295.146355][ T9501] erofs (device loop6): big pcluster head1/2 of compact indexes should be consistent for nid 36
[  295.165736][ T5969] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  295.206114][ T9501] erofs (device loop6): readahead error at folio 4 @ nid 36
[  295.214912][ T5969] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input23
[  295.256093][ T9501] erofs (device loop6): big pcluster head1/2 of compact indexes should be consistent for nid 36
[  295.278779][ T5969] dvb-usb: schedule remote query interval to 150 msecs.
[  295.312865][ T5969] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  295.396592][ T9501] erofs (device loop6): readahead error at folio 3 @ nid 36
[  295.404147][ T9501] erofs (device loop6): big pcluster head1/2 of compact indexes should be consistent for nid 36
[  295.464078][ T9501] erofs (device loop6): readahead error at folio 2 @ nid 36
[  295.474592][  T974] dvb-usb: bulk message failed: -22 (1/0)
[  295.481333][  T974] dvb-usb: error while querying for an remote control event.
[  295.521345][ T9501] erofs (device loop6): big pcluster head1/2 of compact indexes should be consistent for nid 36
[  295.576005][ T9501] erofs (device loop6): readahead error at folio 1 @ nid 36
[  295.589417][ T9501] erofs (device loop6): big pcluster head1/2 of compact indexes should be consistent for nid 36
[  295.648714][ T9501] erofs (device loop6): readahead error at folio 0 @ nid 36
[  295.666340][  T974] dvb-usb: bulk message failed: -22 (1/0)
[  295.672094][  T974] dvb-usb: error while querying for an remote control event.
[  295.716272][ T9501] erofs (device loop6): big pcluster head1/2 of compact indexes should be consistent for nid 36
[  295.767363][ T9501] erofs (device loop6): big pcluster head1/2 of compact indexes should be consistent for nid 36
[  295.800865][ T5909] usb 6-1: USB disconnect, device number 16
[  295.867602][ T9501] erofs (device loop6): read error -117 @ 0 of nid 36
[  295.919538][ T9501] erofs (device loop6): failed to readdir of logical block 0 of nid 36
[  295.958495][ T5909] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  296.491066][ T9503] loop4: detected capacity change from 0 to 32768
[  296.561011][ T9503] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  296.773752][ T9503] XFS (loop4): Ending clean mount
[  296.823411][ T9503] XFS (loop4): Quotacheck needed: Please wait.
[  296.841110][ T9511] loop7: detected capacity change from 0 to 131072
[  296.860199][ T9511] F2FS-fs (loop7): Wrong CP boundary, start(512) end(1536) blocks(0)
[  296.868389][ T9511] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  296.928420][ T9511] F2FS-fs (loop7): invalid crc value
[  296.987630][ T9503] XFS (loop4): Quotacheck: Done.
[  297.081447][ T9511] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  297.108924][ T9511] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  297.116010][ T9511] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  297.205953][   T30] audit: type=1800 audit(1760137046.113:232): pid=9503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1218" name="file1" dev="loop4" ino=9286 res=0 errno=0
[  297.342987][   T12] Bluetooth: hci6: Frame reassembly failed (-84)
[  297.425565][ T9534] Bluetooth: hci6: Frame reassembly failed (-84)
[  297.498305][  T974] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  297.656575][ T5841] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  297.696163][  T974] usb 7-1: Using ep0 maxpacket: 32
[  297.719942][  T974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  297.742314][  T974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  297.795936][  T974] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  297.848918][  T974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.877407][  T974] usb 7-1: config 0 descriptor??
[  298.339095][  T974] koneplus 0003:1E7D:2D51.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.6-1/input0
[  298.492540][ T9548] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0
[  298.775021][ T5909] usb 7-1: USB disconnect, device number 10
[  299.405992][ T5846] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  299.413834][ T5840] Bluetooth: hci6: command 0x1003 tx timeout
[  299.786408][ T9568] loop5: detected capacity change from 0 to 1024
[  299.856636][ T9568] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  299.879093][ T9568] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  300.430402][ T5828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.608245][ T9573] loop3: detected capacity change from 0 to 40427
[  301.636191][ T9573] F2FS-fs (loop3): build fault injection rate: 690
[  301.647675][ T9595] loop5: detected capacity change from 0 to 2048
[  301.661861][ T9573] F2FS-fs (loop3): invalid crc value
[  301.750443][ T9600] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  301.777370][ T9599] loop4: detected capacity change from 0 to 128
[  301.859169][   T30] audit: type=1800 audit(1760137050.773:233): pid=9595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1248" name="file1" dev="loop5" ino=15 res=0 errno=0
[  301.879662][    C0] vkms_vblank_simulate: vblank timer overrun
[  301.922243][ T9602] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1249'.
[  301.960018][ T9594] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  301.992874][ T9583] loop6: detected capacity change from 0 to 32768
[  302.039395][ T9594] Remounting filesystem read-only
[  302.045969][ T9594] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  302.072739][ T9583] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  302.088027][ T9594] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  302.149372][ T9594] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  302.168136][ T9573] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  302.193606][ T9583] XFS (loop6): Ending clean mount
[  302.206765][ T9594] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  302.235714][ T9573] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  302.256486][ T9583] XFS (loop6): Quotacheck needed: Please wait.
[  302.272322][ T9594] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  302.306018][ T9595] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  302.342125][ T9583] XFS (loop6): Quotacheck: Done.
[  302.590402][ T5828] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer
[  302.655239][ T6361] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  302.671354][ T5833] syz-executor: attempt to access beyond end of device
[  302.671354][ T5833] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  302.672471][ T9614] loop2: detected capacity change from 0 to 2048
[  302.722935][ T9616] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  302.756244][ T5833] CPU: 0 UID: 0 PID: 5833 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  302.756289][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  302.756311][ T5833] Call Trace:
[  302.756322][ T5833]  <TASK>
[  302.756335][ T5833]  dump_stack_lvl+0x16c/0x1f0
[  302.756383][ T5833]  f2fs_handle_critical_error+0x624/0x9f0
[  302.756422][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  302.756467][ T5833]  ? f2fs_build_fault_attr+0x53/0x1f0
[  302.756531][ T5833]  f2fs_write_end_io+0x958/0xcf0
[  302.756580][ T5833]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  302.756626][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  302.756679][ T5833]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  302.756718][ T5833]  bio_endio+0x713/0x860
[  302.756768][ T5833]  submit_bio_noacct+0x306/0x1f60
[  302.756840][ T5833]  __submit_merged_bio+0x33c/0x770
[  302.756885][ T5833]  __submit_merged_write_cond+0x319/0x3f0
[  302.756937][ T5833]  f2fs_write_cache_pages+0x2067/0x2570
[  302.757012][ T5833]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  302.757063][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  302.757107][ T5833]  ? __lock_acquire+0x62e/0x1ce0
[  302.757178][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  302.757222][ T5833]  ? __lock_acquire+0x62e/0x1ce0
[  302.757321][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  302.757365][ T5833]  ? find_held_lock+0x2b/0x80
[  302.757447][ T5833]  ? __lock_acquire+0x62e/0x1ce0
[  302.757513][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  302.757569][ T5833]  f2fs_write_data_pages+0x4ad/0xd90
[  302.757624][ T5833]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  302.757668][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  302.757722][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  302.757771][ T5833]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  302.757822][ T5833]  do_writepages+0x27a/0x600
[  302.757865][ T5833]  ? __pfx_do_writepages+0x10/0x10
[  302.757899][ T5833]  ? do_raw_spin_unlock+0x172/0x230
[  302.757940][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  302.757983][ T5833]  ? _raw_spin_unlock+0x28/0x50
[  302.758026][ T5833]  filemap_fdatawrite_wbc+0x104/0x160
[  302.758068][ T5833]  __filemap_fdatawrite_range+0xb9/0x100
[  302.758118][ T5833]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[  302.758224][ T5833]  ? find_held_lock+0x2b/0x80
[  302.758271][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  302.758314][ T5833]  ? do_raw_spin_unlock+0x172/0x230
[  302.758355][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  302.758404][ T5833]  f2fs_sync_dirty_inodes+0x2a2/0x980
[  302.758471][ T5833]  block_operations+0x2b0/0xfe0
[  302.758517][ T5833]  ? __pfx_stack_trace_save+0x10/0x10
[  302.758579][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  302.758628][ T5833]  ? __pfx_block_operations+0x10/0x10
[  302.758674][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  302.758770][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  302.758817][ T5833]  ? ktime_get+0x200/0x310
[  302.758868][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  302.758910][ T5833]  ? lockdep_hardirqs_on+0x7c/0x110
[  302.758954][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  302.758997][ T5833]  ? rcu_is_watching+0x12/0xc0
[  302.759050][ T5833]  f2fs_write_checkpoint+0x32b/0x5300
[  302.759101][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  302.759151][ T5833]  ? kfree+0x2b8/0x6d0
[  302.759190][ T5833]  ? f2fs_stop_gc_thread+0x79/0xd0
[  302.759245][ T5833]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  302.759299][ T5833]  kill_f2fs_super+0x3d6/0x490
[  302.759349][ T5833]  ? __pfx_kill_f2fs_super+0x10/0x10
[  302.759415][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  302.759474][ T5833]  deactivate_locked_super+0xc1/0x1a0
[  302.759527][ T5833]  deactivate_super+0xde/0x100
[  302.759583][ T5833]  cleanup_mnt+0x225/0x450
[  302.759638][ T5833]  task_work_run+0x150/0x240
[  302.759681][ T5833]  ? __pfx_task_work_run+0x10/0x10
[  302.759718][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  302.759765][ T5833]  ? __pfx___x64_sys_umount+0x10/0x10
[  302.759832][ T5833]  exit_to_user_mode_loop+0xec/0x130
[  302.759873][ T5833]  do_syscall_64+0x426/0xfa0
[  302.759921][ T5833]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.759957][ T5833] RIP: 0033:0x7f42777901f7
[  302.759985][ T5833] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  302.760022][ T5833] RSP: 002b:00007ffef3684048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  302.760056][ T5833] RAX: 0000000000000000 RBX: 00007f4277811d7d RCX: 00007f42777901f7
[  302.760080][ T5833] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef3684100
[  302.760102][ T5833] RBP: 00007ffef3684100 R08: 0000000000000000 R09: 0000000000000000
[  302.760125][ T5833] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffef3685190
[  302.760148][ T5833] R13: 00007f4277811d7d R14: 0000000000049d71 R15: 00007ffef36851d0
[  302.760199][ T5833]  </TASK>
[  302.760212][ T5833] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  303.212217][ T9614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  303.900014][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.426371][   T30] audit: type=1326 audit(1760137053.323:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9638 comm="syz.5.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbdbc12af79 code=0x7ffc0000
[  304.448585][    C0] vkms_vblank_simulate: vblank timer overrun
[  304.515612][   T30] audit: type=1326 audit(1760137053.323:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9638 comm="syz.5.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdbc18eec9 code=0x7ffc0000
[  304.546742][  T974] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  304.635522][   T30] audit: type=1326 audit(1760137053.323:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9638 comm="syz.5.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbdbc12af79 code=0x7ffc0000
[  304.705115][ T9647] loop6: detected capacity change from 0 to 8
[  304.717595][   T30] audit: type=1326 audit(1760137053.323:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9638 comm="syz.5.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbdbc12af79 code=0x7ffc0000
[  304.770046][ T9647] SQUASHFS error: lzo decompression failed, data probably corrupt
[  304.784681][  T974] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  304.795538][   T30] audit: type=1326 audit(1760137053.323:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9638 comm="syz.5.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdbc18eec9 code=0x7ffc0000
[  304.817996][ T9647] SQUASHFS error: Failed to read block 0x82: -5
[  304.818050][ T9647] SQUASHFS error: Unable to read metadata cache entry [80]
[  304.818072][ T9647] SQUASHFS error: Unable to read inode 0x11f
[  304.831364][ T9651] loop2: detected capacity change from 0 to 1024
[  304.835382][  T974] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  304.857447][ T9651] EXT4-fs: Ignoring removed bh option
[  304.873947][   T30] audit: type=1326 audit(1760137053.333:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9638 comm="syz.5.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbdbc12af79 code=0x7ffc0000
[  304.896163][    C0] vkms_vblank_simulate: vblank timer overrun
[  304.906325][ T9651] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  304.941324][  T974] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  304.950776][  T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.977892][ T9651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  305.006764][  T974] usb 5-1: Product: syz
[  305.014161][   T30] audit: type=1326 audit(1760137053.333:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9638 comm="syz.5.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdbc18eec9 code=0x7ffc0000
[  305.021169][  T974] usb 5-1: Manufacturer: syz
[  305.054670][ T9655] input: syz1 as /devices/virtual/input/input24
[  305.102082][ T9655] input: failed to attach handler leds to device input24, error: -6
[  305.106322][  T974] usb 5-1: SerialNumber: syz
[  305.152174][   T30] audit: type=1326 audit(1760137053.333:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9638 comm="syz.5.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdbc18eec9 code=0x7ffc0000
[  305.163249][ T9642] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  305.199199][ T9659] EXT4-fs error (device loop2): ext4_check_all_de:658: inode #12: block 7: comm syz.2.1273: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0
[  305.261347][   T30] audit: type=1326 audit(1760137053.333:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9638 comm="syz.5.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbdbc12af79 code=0x7ffc0000
[  305.368392][ T9659] EXT4-fs (loop2): Remounting filesystem read-only
[  305.468392][ T9651] overlayfs: failed to set uuid (/file0, err=-30); falling back to uuid=null.
[  305.500655][ T9663] syzkaller1: entered promiscuous mode
[  305.523008][ T9663] syzkaller1: entered allmulticast mode
[  305.535862][ T9651] overlayfs: failed to verify upper root origin
[  305.692086][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.906676][ T9672] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1274'.
[  306.041721][ T9650] loop3: detected capacity change from 0 to 32768
[  306.092562][ T9650] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  306.146853][ T9686] syzkaller1: entered promiscuous mode
[  306.152484][ T9686] syzkaller1: entered allmulticast mode
[  306.194671][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1275'.
[  306.229633][ T9650] XFS (loop3): Ending clean mount
[  306.242458][ T9650] XFS (loop3): Quotacheck needed: Please wait.
[  306.373386][  T974] cdc_ncm 5-1:1.0: SET_NTB_FORMAT failed
[  306.383042][ T9650] XFS (loop3): Quotacheck: Done.
[  306.406886][  T974] cdc_ncm 5-1:1.0: bind() failure
[  306.480612][  T974] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  306.513068][  T974] cdc_ncm 5-1:1.1: bind() failure
[  306.561262][  T974] usb 5-1: USB disconnect, device number 13
[  306.779651][ T5833] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  307.370957][ T9708] loop5: detected capacity change from 0 to 512
[  307.405710][ T5916] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  307.439544][ T9691] loop7: detected capacity change from 0 to 32768
[  307.463419][ T9708] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  307.510129][ T9708] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  307.557631][ T5916] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  307.557844][ T9691] JBD2: Ignoring recovery information on journal
[  307.570764][ T5916] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  307.586929][ T5916] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  307.641784][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  307.658191][   T30] kauditd_printk_skb: 12 callbacks suppressed
[  307.658216][   T30] audit: type=1800 audit(1760137056.564:255): pid=9708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1287" name="file2" dev="loop5" ino=16 res=0 errno=0
[  307.697536][ T5916] usb 7-1: SerialNumber: syz
[  307.746800][ T9691] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  307.880830][ T5828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.932971][ T5916] usb 7-1: 0:2 : does not exist
[  308.013782][ T5916] usb 7-1: USB disconnect, device number 11
[  308.080170][ T9691] (syz.7.1278,9691,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[  308.090741][ T9720] OCFS2: ERROR (device loop7): ocfs2_validate_gd_parent: Group descriptor #17056 has bad parent pointer (312, expected 74)
[  308.146789][ T9720] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  308.182047][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  308.219672][ T9720] OCFS2: File system is now read-only.
[  308.245487][ T9720] (syz.7.1278,9720,0):ocfs2_test_suballoc_bit:2884 ERROR: read group 17056 failed -30
[  308.282416][ T9718] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  308.291767][ T9720] (syz.7.1278,9720,1):ocfs2_test_suballoc_bit:2896 ERROR: status = -30
[  308.318391][ T9720] (syz.7.1278,9720,1):ocfs2_test_inode_bit:2958 ERROR: test suballoc bit failed -30
[  308.392501][ T9720] (syz.7.1278,9720,1):ocfs2_test_inode_bit:2967 ERROR: status = -30
[  308.405300][ T9720] (syz.7.1278,9720,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -30
[  308.522102][ T9309] ocfs2: Unmounting device (7,7) on (node local)
[  308.781994][ T9734] syzkaller1: entered promiscuous mode
[  308.805349][ T9734] syzkaller1: entered allmulticast mode
[  308.965973][   T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  309.084209][ T9744] bridge_slave_0: left allmulticast mode
[  309.130449][ T9744] bridge_slave_0: left promiscuous mode
[  309.136378][   T24] usb 3-1: Using ep0 maxpacket: 16
[  309.147592][   T24] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  309.181390][   T24] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  309.186042][ T9744] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.228172][   T24] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  309.251613][   T24] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  309.261708][ T9749] loop7: detected capacity change from 0 to 512
[  309.282417][   T24] usb 3-1: config 7 interface 0 has no altsetting 0
[  309.318349][ T9744] bridge_slave_1: left allmulticast mode
[  309.320711][   T24] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  309.358310][ T9744] bridge_slave_1: left promiscuous mode
[  309.365864][ T9744] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.376739][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.406904][ T9749] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  309.457010][ T9744] team0: Port device team_slave_0 removed
[  309.462900][ T9749] System zones: 0-2, 18-18, 34-34
[  309.490268][ T9744] team0: Port device team_slave_1 removed
[  309.520875][ T9744] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  309.569988][ T9744] batman_adv: batadv0: Removing interface: batadv_slave_0
[  309.589813][ T9749] EXT4-fs error (device loop7): ext4_validate_block_bitmap:440: comm syz.7.1294: bg 0: block 248: padding at end of block bitmap is not set
[  309.612363][ T9744] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  309.621008][ T9744] batman_adv: batadv0: Removing interface: batadv_slave_1
[  309.622338][ T9749] Quota error (device loop7): write_blk: dquota write failed
[  309.661306][ T9744] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  309.683498][ T9749] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  309.715302][ T9749] EXT4-fs error (device loop7): ext4_acquire_dquot:6943: comm syz.7.1294: Failed to acquire dquot type 1
[  309.772770][ T9749] EXT4-fs (loop7): 1 truncate cleaned up
[  309.792504][ T9749] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  309.805744][ T5916] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  309.826668][ T9749] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  309.932486][ T9749] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  309.932878][   T24] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.0/0003:0458:5010.0017/input/input25
[  309.985317][ T5916] usb 6-1: Using ep0 maxpacket: 32
[  309.996038][ T5916] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  310.030026][ T5916] usb 6-1: config 0 has no interface number 0
[  310.040861][ T5916] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  310.065201][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.091139][ T5916] usb 6-1: Product: syz
[  310.097612][ T5916] usb 6-1: Manufacturer: syz
[  310.102246][ T5916] usb 6-1: SerialNumber: syz
[  310.148311][   T24] kye 0003:0458:5010.0017: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0
[  310.166805][ T9309] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.191283][ T5916] usb 6-1: config 0 descriptor??
[  310.229995][ T5916] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  310.466065][ T5916] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  310.508134][ T5916] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  310.558471][   T24] usb 3-1: USB disconnect, device number 13
[  310.802315][   T36] Bluetooth: hci6: Frame reassembly failed (-84)
[  310.859693][ T9775] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  310.946709][    C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  310.972740][ T5909] usb 6-1: USB disconnect, device number 17
[  311.035486][ T5909] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  311.094075][ T5909] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  311.144463][ T5909] quatech2 6-1:0.51: device disconnected
[  311.254707][ T9783] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  311.515419][ T9789] netlink: 40227 bytes leftover after parsing attributes in process `syz.4.1314'.
[  311.723944][ T9791] loop2: detected capacity change from 0 to 4096
[  311.791902][ T9796] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  311.857462][   T30] audit: type=1800 audit(1760137060.774:256): pid=9791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1315" name="file1" dev="loop2" ino=15 res=0 errno=0
[  312.032088][ T9781] loop7: detected capacity change from 0 to 32768
[  312.059410][ T9781] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1310 (9781)
[  312.093690][ T9781] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  312.125252][ T9781] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm
[  312.311328][ T9781] BTRFS info (device loop7): enabling ssd optimizations
[  312.333686][ T9781] BTRFS info (device loop7): enabling free space tree
[  312.363700][ T9781] BTRFS info (device loop7): use zstd compression, level 3
[  312.498282][   T30] audit: type=1800 audit(1760137061.414:257): pid=9781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1310" name="bus" dev="loop7" ino=263 res=0 errno=0
[  312.579411][ T9817] loop4: detected capacity change from 0 to 2048
[  312.641845][ T9817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  312.665138][ T9817] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  312.774946][ T9817] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only
[  312.804490][ T9817] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[  312.837946][ T9309] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  312.848903][ T5840] Bluetooth: hci6: command 0xfc11 tx timeout
[  312.862336][ T5846] Bluetooth: hci6: Entering manufacturer mode failed (-110)
[  313.425159][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.716102][ T5916] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  313.898007][ T5916] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  313.918380][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.989285][ T5916] usb 7-1: config 0 descriptor??
[  313.998530][ T5916] gspca_main: cpia1-2.14.0 probing 0813:0001
[  314.162017][ T9852] usb usb8: usbfs: process 9852 (syz.2.1336) did not claim interface 0 before use
[  314.436194][ T5916] cpia1 7-1:0.0: unexpected state after lo power cmd: 00
[  314.455139][  T974] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  314.635009][  T974] usb 6-1: Using ep0 maxpacket: 16
[  314.666207][  T974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  314.695276][  T974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1152, setting to 1024
[  314.737243][  T974] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  314.770595][  T974] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  314.794899][  T974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.838230][ T5916] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0)
[  314.884939][  T974] usb 6-1: config 0 descriptor??
[  314.895813][ T9854] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  314.938831][  T974] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input26
[  315.091948][ T5916] usb 7-1: USB disconnect, device number 12
[  315.256364][ T5909] usb 6-1: USB disconnect, device number 18
[  315.508701][ T9861] loop2: detected capacity change from 0 to 32768
[  315.531665][ T9862] loop3: detected capacity change from 0 to 32768
[  315.541758][ T9861] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1341 (9861)
[  315.573816][ T9861] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  315.597022][ T9861] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  315.633949][ T9858] loop4: detected capacity change from 0 to 40427
[  315.660288][ T9858] F2FS-fs: heap/no_heap options were deprecated
[  315.666903][ T9862] JBD2: Ignoring recovery information on journal
[  315.694717][ T9858] F2FS-fs: heap/no_heap options were deprecated
[  315.733233][ T9858] F2FS-fs (loop4): Image doesn't support compression
[  315.757726][ T9858] F2FS-fs (loop4): invalid crc value
[  315.765570][ T9862] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  315.820985][ T9861] BTRFS info (device loop2): enabling ssd optimizations
[  315.885072][ T9861] BTRFS info (device loop2): enabling free space tree
[  316.065797][ T9862] (syz.3.1340,9862,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[  316.152161][ T9862] OCFS2: ERROR (device loop3): ocfs2_validate_gd_parent: Group descriptor #17056 has bad parent pointer (312, expected 74)
[  316.195808][ T9894] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1347'.
[  316.215632][ T5830] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  316.254815][ T9862] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  316.264658][ T9862] OCFS2: File system is now read-only.
[  316.310594][ T9858] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  316.355655][ T9862] (syz.3.1340,9862,1):ocfs2_test_suballoc_bit:2884 ERROR: read group 17056 failed -30
[  316.366212][ T9862] (syz.3.1340,9862,1):ocfs2_test_suballoc_bit:2896 ERROR: status = -30
[  316.394532][ T9858] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  316.400942][ T9862] (syz.3.1340,9862,1):ocfs2_test_inode_bit:2958 ERROR: test suballoc bit failed -30
[  316.455478][ T9862] (syz.3.1340,9862,1):ocfs2_test_inode_bit:2967 ERROR: status = -30
[  316.473742][ T9862] (syz.3.1340,9862,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -30
[  316.621840][   T30] audit: type=1800 audit(1760137065.544:258): pid=9858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1338" name="file1" dev="loop4" ino=10 res=0 errno=0
[  316.661559][ T9858] syz.4.1338: attempt to access beyond end of device
[  316.661559][ T9858] loop4: rw=34817, sector=77824, nr_sectors = 8 limit=40427
[  316.721035][ T9904] loop6: detected capacity change from 0 to 512
[  316.794874][ T5833] ocfs2: Unmounting device (7,3) on (node local)
[  316.835704][ T9904] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  316.924138][ T9904] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.1352: bad orphan inode 15
[  316.935863][ T9904] ext4_test_bit(bit=14, block=5) = 0
[  316.968750][ T9904] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  317.006394][ T5841] syz-executor: attempt to access beyond end of device
[  317.006394][ T5841] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  317.110722][ T5841] CPU: 1 UID: 0 PID: 5841 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  317.110771][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  317.110791][ T5841] Call Trace:
[  317.110803][ T5841]  <TASK>
[  317.110816][ T5841]  dump_stack_lvl+0x16c/0x1f0
[  317.110863][ T5841]  f2fs_handle_critical_error+0x624/0x9f0
[  317.110900][ T5841]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.110943][ T5841]  ? f2fs_build_fault_attr+0x53/0x1f0
[  317.111005][ T5841]  f2fs_write_end_io+0x958/0xcf0
[  317.111051][ T5841]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  317.111096][ T5841]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.111150][ T5841]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  317.111189][ T5841]  bio_endio+0x713/0x860
[  317.111239][ T5841]  submit_bio_noacct+0x306/0x1f60
[  317.111315][ T5841]  __submit_merged_bio+0x33c/0x770
[  317.111358][ T5841]  __submit_merged_write_cond+0x319/0x3f0
[  317.111409][ T5841]  f2fs_write_cache_pages+0x2067/0x2570
[  317.111483][ T5841]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  317.111549][ T5841]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.111591][ T5841]  ? __lock_acquire+0x62e/0x1ce0
[  317.111693][ T5841]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.111735][ T5841]  ? find_held_lock+0x2b/0x80
[  317.111817][ T5841]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.111860][ T5841]  ? mod_memcg_lruvec_state+0x389/0x5f0
[  317.111915][ T5841]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.111966][ T5841]  f2fs_write_data_pages+0x4ad/0xd90
[  317.112022][ T5841]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  317.112065][ T5841]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.112120][ T5841]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.112169][ T5841]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  317.112218][ T5841]  do_writepages+0x27a/0x600
[  317.112265][ T5841]  ? __pfx_do_writepages+0x10/0x10
[  317.112298][ T5841]  ? do_raw_spin_unlock+0x172/0x230
[  317.112339][ T5841]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.112382][ T5841]  ? _raw_spin_unlock+0x28/0x50
[  317.112425][ T5841]  filemap_fdatawrite_wbc+0x104/0x160
[  317.112466][ T5841]  __filemap_fdatawrite_range+0xb9/0x100
[  317.112516][ T5841]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[  317.112624][ T5841]  ? find_held_lock+0x2b/0x80
[  317.112671][ T5841]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.112714][ T5841]  ? do_raw_spin_unlock+0x172/0x230
[  317.112756][ T5841]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.112806][ T5841]  f2fs_sync_dirty_inodes+0x2a2/0x980
[  317.112875][ T5841]  block_operations+0x2b0/0xfe0
[  317.112921][ T5841]  ? __pfx_stack_trace_save+0x10/0x10
[  317.112977][ T5841]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.113026][ T5841]  ? __pfx_block_operations+0x10/0x10
[  317.113072][ T5841]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.113172][ T5841]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.113218][ T5841]  ? ktime_get+0x200/0x310
[  317.113273][ T5841]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.113315][ T5841]  ? lockdep_hardirqs_on+0x7c/0x110
[  317.113359][ T5841]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.113401][ T5841]  ? rcu_is_watching+0x12/0xc0
[  317.113455][ T5841]  f2fs_write_checkpoint+0x32b/0x5300
[  317.113506][ T5841]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.113556][ T5841]  ? kfree+0x2b8/0x6d0
[  317.113594][ T5841]  ? f2fs_stop_gc_thread+0x79/0xd0
[  317.113649][ T5841]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  317.113702][ T5841]  kill_f2fs_super+0x3d6/0x490
[  317.113752][ T5841]  ? __pfx_kill_f2fs_super+0x10/0x10
[  317.113818][ T5841]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.113878][ T5841]  deactivate_locked_super+0xc1/0x1a0
[  317.113930][ T5841]  deactivate_super+0xde/0x100
[  317.113982][ T5841]  cleanup_mnt+0x225/0x450
[  317.114037][ T5841]  task_work_run+0x150/0x240
[  317.114079][ T5841]  ? __pfx_task_work_run+0x10/0x10
[  317.114115][ T5841]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.114161][ T5841]  ? __pfx___x64_sys_umount+0x10/0x10
[  317.114228][ T5841]  exit_to_user_mode_loop+0xec/0x130
[  317.114272][ T5841]  do_syscall_64+0x426/0xfa0
[  317.114320][ T5841]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.114356][ T5841] RIP: 0033:0x7fc6eb5901f7
[  317.114385][ T5841] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  317.114420][ T5841] RSP: 002b:00007ffd473d0578 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  317.114454][ T5841] RAX: 0000000000000000 RBX: 00007fc6eb611d7d RCX: 00007fc6eb5901f7
[  317.114478][ T5841] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd473d0630
[  317.114500][ T5841] RBP: 00007ffd473d0630 R08: 0000000000000000 R09: 0000000000000000
[  317.114522][ T5841] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd473d16c0
[  317.114546][ T5841] R13: 00007fc6eb611d7d R14: 000000000004d517 R15: 00007ffd473d1700
[  317.114598][ T5841]  </TASK>
[  317.114611][ T5841] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  317.397565][ T9904] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1286: group 0, 
[  317.550882][ T9914] loop5: detected capacity change from 0 to 512
[  317.557847][ T9904] block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters
[  317.635288][ T9904] EXT4-fs error (device loop6): ext4_free_inode:354: comm syz.6.1352: bit already cleared for inode 13
[  317.694829][ T9914] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  317.755356][ T9919] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  317.837852][ T9914] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:482: comm syz.5.1355: Invalid block bitmap block 0 in block_group 0
[  317.865395][ T9919] CIFS mount error: No usable UNC path provided in device string!
[  317.865395][ T9919] 
[  317.943183][ T9914] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  317.952326][ T9919] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  317.962554][ T6361] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.023940][ T9914] EXT4-fs error (device loop5): ext4_clear_blocks:874: inode #11: comm syz.5.1355: attempt to clear invalid blocks 983261 len 1
[  318.105612][ T9914] EXT4-fs error (device loop5): __ext4_get_inode_loc:4831: comm syz.5.1355: Invalid inode table block 0 in block_group 0
[  318.199178][ T9914] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6305: Corrupt filesystem
[  318.242368][ T9914] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem
[  318.286448][ T9914] EXT4-fs error (device loop5): __ext4_get_inode_loc:4831: comm syz.5.1355: Invalid inode table block 0 in block_group 0
[  318.311183][ T9922] loop3: detected capacity change from 0 to 32768
[  318.335538][ T9922] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  318.343746][ T9922] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  318.391541][ T9922] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  318.403649][  T974] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  318.410527][  T974] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  318.452516][ T9914] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6305: Corrupt filesystem
[  318.524806][ T9914] EXT4-fs error (device loop5): ext4_truncate:4637: inode #11: comm syz.5.1355: mark_inode_dirty error
[  318.554503][ T9914] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem
[  318.555902][ T9914] EXT4-fs error (device loop5): __ext4_get_inode_loc:4831: comm syz.5.1355: Invalid inode table block 0 in block_group 0
[  318.556376][ T9914] EXT4-fs (loop5): 1 truncate cleaned up
[  318.558499][ T9914] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  318.560188][ T9928] loop7: detected capacity change from 0 to 1024
[  318.624297][ T9928] EXT4-fs (loop7): corrupt root inode, run e2fsck
[  318.624394][ T9928] EXT4-fs (loop7): mount failed
[  318.668841][  T974] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 258ms
[  318.669120][  T974] gfs2: fsid=syz:syz.0: jid=0: Done
[  318.669167][ T9922] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  318.679518][ T9922] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block)
[  318.679595][ T9922] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590
[  318.679648][ T9922] gfs2: fsid=syz:syz.0: G:  s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1
[  318.679705][ T9922] gfs2: fsid=syz:syz.0:  H: s:SH f:H e:0 p:9922 [syz.3.1353] __gfs2_lookup+0xa0/0x290
[  318.679867][ T9922] gfs2: fsid=syz:syz.0:  I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0
[  318.679910][ T9922] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  318.679950][ T9922] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  318.679972][ T9922] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  318.680894][ T9922] gfs2: fsid=syz:syz.0: File system withdrawn
[  318.680921][ T9922] CPU: 1 UID: 0 PID: 9922 Comm: syz.3.1353 Not tainted syzkaller #0 PREEMPT(full) 
[  318.680965][ T9922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  318.680986][ T9922] Call Trace:
[  318.680998][ T9922]  <TASK>
[  318.681011][ T9922]  dump_stack_lvl+0x16c/0x1f0
[  318.681058][ T9922]  gfs2_withdraw+0xa8b/0x1130
[  318.681116][ T9922]  ? __pfx_gfs2_withdraw+0x10/0x10
[  318.681161][ T9922]  ? __pfx_gfs2_meta_read+0x10/0x10
[  318.681232][ T9922]  ? srso_alias_return_thunk+0x5/0xfbef5
[  318.681284][ T9922]  gfs2_dirent_scan+0x352/0x420
[  318.681332][ T9922]  ? __pfx_gfs2_dirent_find+0x10/0x10
[  318.681388][ T9922]  gfs2_dirent_search+0x44b/0x5b0
[  318.681434][ T9922]  ? __pfx_gfs2_dirent_find+0x10/0x10
[  318.681484][ T9922]  ? __pfx_gfs2_dirent_search+0x10/0x10
[  318.681536][ T9922]  ? gfs2_permission+0x333/0x500
[  318.681583][ T9922]  ? srso_alias_return_thunk+0x5/0xfbef5
[  318.681641][ T9922]  gfs2_dir_search+0x97/0x2e0
[  318.681690][ T9922]  ? __pfx_gfs2_dir_search+0x10/0x10
[  318.681754][ T9922]  gfs2_lookupi+0x4b7/0x6e0
[  318.681813][ T9922]  ? __pfx_gfs2_lookupi+0x10/0x10
[  318.681861][ T9922]  ? srso_alias_return_thunk+0x5/0xfbef5
[  318.681911][ T9922]  ? __gfs2_lookup+0xa0/0x290
[  318.681967][ T9922]  ? srso_alias_return_thunk+0x5/0xfbef5
[  318.682020][ T9922]  __gfs2_lookup+0xa0/0x290
[  318.682072][ T9922]  ? __pfx___gfs2_lookup+0x10/0x10
[  318.682139][ T9922]  ? srso_alias_return_thunk+0x5/0xfbef5
[  318.682190][ T9922]  gfs2_atomic_open+0xea/0x210
[  318.682240][ T9922]  ? srso_alias_return_thunk+0x5/0xfbef5
[  318.682284][ T9922]  ? __pfx_gfs2_atomic_open+0x10/0x10
[  318.682340][ T9922]  lookup_open.isra.0+0x83d/0x1580
[  318.682402][ T9922]  ? __pfx_lookup_open.isra.0+0x10/0x10
[  318.682462][ T9922]  ? find_held_lock+0x2b/0x80
[  318.682526][ T9922]  ? __pfx_down_write+0x10/0x10
[  318.682581][ T9922]  ? srso_alias_return_thunk+0x5/0xfbef5
[  318.682633][ T9922]  path_openat+0x893/0x2cb0
[  318.682706][ T9922]  ? __pfx_path_openat+0x10/0x10
[  318.682763][ T9922]  ? srso_alias_return_thunk+0x5/0xfbef5
[  318.682818][ T9922]  do_filp_open+0x20b/0x470
[  318.682876][ T9922]  ? __pfx_do_filp_open+0x10/0x10
[  318.682970][ T9922]  ? srso_alias_return_thunk+0x5/0xfbef5
[  318.683014][ T9922]  ? alloc_fd+0x471/0x7d0
[  318.683084][ T9922]  do_sys_openat2+0x11b/0x1d0
[  318.683125][ T9922]  ? __pfx_do_sys_openat2+0x10/0x10
[  318.683186][ T9922]  __x64_sys_openat+0x174/0x210
[  318.683228][ T9922]  ? __pfx___x64_sys_openat+0x10/0x10
[  318.683277][ T9922]  ? srso_alias_return_thunk+0x5/0xfbef5
[  318.683333][ T9922]  do_syscall_64+0xcd/0xfa0
[  318.683381][ T9922]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.683417][ T9922] RIP: 0033:0x7f427778eec9
[  318.683445][ T9922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  318.683481][ T9922] RSP: 002b:00007f427861f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  318.683519][ T9922] RAX: ffffffffffffffda RBX: 00007f42779e5fa0 RCX: 00007f427778eec9
[  318.683544][ T9922] RDX: 00000000000026e1 RSI: 0000200000000180 RDI: ffffffffffffff9c
[  318.683567][ T9922] RBP: 00007f4277811f91 R08: 0000000000000000 R09: 0000000000000000
[  318.683590][ T9922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  318.683611][ T9922] R13: 00007f42779e6038 R14: 00007f42779e5fa0 R15: 00007ffef3684db8
[  318.683664][ T9922]  </TASK>
[  318.757375][ T9914] EXT4-fs error (device loop5): __ext4_get_inode_loc:4831: comm syz.5.1355: Invalid inode table block 0 in block_group 0
[  319.273092][ T9914] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6305: Corrupt filesystem
[  319.298263][ T9914] EXT4-fs error (device loop5): ext4_dirty_inode:6509: inode #2: comm syz.5.1355: mark_inode_dirty error
[  319.452429][ T7516] EXT4-fs error (device loop5): __ext4_get_inode_loc:4831: comm kworker/u8:8: Invalid inode table block 0 in block_group 0
[  319.550126][ T5828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.584731][ T5909] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  319.915048][ T5909] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  319.927171][ T5909] usb 8-1: config 0 interface 0 has no altsetting 0
[  319.948889][ T5909] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  319.958962][   T24] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  319.979157][ T5909] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  320.007997][ T5909] usb 8-1: Product: syz
[  320.012188][ T5909] usb 8-1: Manufacturer: syz
[  320.034740][ T5909] usb 8-1: SerialNumber: syz
[  320.056186][ T5909] usb 8-1: config 0 descriptor??
[  320.070221][ T5909] usb 8-1: selecting invalid altsetting 0
[  320.083511][ T9946] syzkaller1: entered promiscuous mode
[  320.099752][ T9946] syzkaller1: entered allmulticast mode
[  320.144645][   T24] usb 7-1: Using ep0 maxpacket: 8
[  320.187052][   T24] usb 7-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  320.212652][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.234755][   T24] usb 7-1: Product: syz
[  320.238943][   T24] usb 7-1: Manufacturer: syz
[  320.257102][   T24] usb 7-1: SerialNumber: syz
[  320.291351][   T24] usb 7-1: config 0 descriptor??
[  320.362577][   T24] gspca_main: sq905-2.14.0 probing 2770:9120
[  320.410992][ T5916] usb 8-1: USB disconnect, device number 2
[  320.754229][ T9955] Bluetooth: MGMT ver 1.23
[  320.833941][ T9955] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes
[  321.491169][   T24] gspca_sq905: sq905_read_data: usb_control_msg failed (-71)
[  321.498884][   T24] sq905 7-1:0.0: probe with driver sq905 failed with error -71
[  321.536303][   T24] usb 7-1: USB disconnect, device number 13
[  321.753584][ T5909] kernel read not supported for file /dsp (pid: 5909 comm: kworker/1:3)
[  322.015122][ T9964] random: crng reseeded on system resumption
[  322.123956][ T9958] loop3: detected capacity change from 0 to 131072
[  322.144040][ T9958] F2FS-fs (loop3): Test dummy encryption mode enabled
[  322.172195][ T9958] F2FS-fs (loop3): invalid crc value
[  322.299527][ T9958] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  322.314977][ T9958] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  322.344636][ T9956] loop5: detected capacity change from 0 to 32768
[  322.436300][ T9956] XFS (loop5): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  322.462078][   T30] audit: type=1800 audit(1760137071.385:259): pid=9958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1371" name="file1" dev="loop3" ino=10 res=0 errno=0
[  322.551514][ T9956] XFS (loop5): Ending clean mount
[  322.556832][   T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  322.596829][ T9956] XFS (loop5): Quotacheck needed: Please wait.
[  322.727885][ T9956] XFS (loop5): Quotacheck: Done.
[  322.729498][   T24] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  322.742337][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.754256][   T24] usb 5-1: config 0 descriptor??
[  322.899250][   T30] audit: type=1800 audit(1760137071.825:260): pid=9956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1370" name="bus" dev="loop5" ino=6154 res=0 errno=0
[  323.015668][   T24] kaweth 5-1:0.0: Firmware present in device.
[  323.119997][ T5828] XFS (loop5): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  323.192595][   T24] kaweth 5-1:0.0: Statistics collection: 0
[  323.224762][   T24] kaweth 5-1:0.0: Multicast filter limit: 0
[  323.236001][   T24] kaweth 5-1:0.0: MTU: 0
[  323.247950][   T24] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00
[  323.810537][   T24] kaweth 5-1:0.0: Error setting receive filter
[  323.828356][   T24] kaweth 5-1:0.0: probe with driver kaweth failed with error -5
[  323.844072][ T9966] loop2: detected capacity change from 0 to 40427
[  323.856857][   T24] usb 5-1: USB disconnect, device number 14
[  323.909868][ T9966] F2FS-fs (loop2): build fault injection rate: 691
[  323.972054][ T9966] F2FS-fs (loop2): invalid crc value
[  324.139492][ T9966] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  324.169462][ T9966] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  324.458181][T10008] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  324.484132][   T24] IPVS: starting estimator thread 0...
[  324.584541][T10010] IPVS: using max 22 ests per chain, 52800 per kthread
[  324.824417][ T5902] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  324.971674][T10002] loop5: detected capacity change from 0 to 32768
[  325.014970][ T5902] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  325.053039][ T5902] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  325.075619][ T5902] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  325.088079][ T5902] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  325.105560][ T5902] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  325.115456][ T5902] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  325.123547][ T5902] usb 8-1: Manufacturer: syz
[  325.135720][ T5902] usb 8-1: config 0 descriptor??
[  325.201679][T10002] JBD2: Ignoring recovery information on journal
[  325.432727][T10002] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  325.628725][ T5902] hid_parser_main: 1 callbacks suppressed
[  325.628753][ T5902] appleir 0003:05AC:8243.0018: unknown main item tag 0x0
[  325.680756][ T5902] appleir 0003:05AC:8243.0018: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0
[  325.741277][T10002] (syz.5.1383,10002,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[  325.773551][T10002] OCFS2: ERROR (device loop5): ocfs2_validate_gd_parent: Group descriptor #17056 has bad parent pointer (312, expected 74)
[  325.804668][T10002] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  325.834439][T10002] OCFS2: File system is now read-only.
[  325.840034][T10002] (syz.5.1383,10002,0):ocfs2_test_suballoc_bit:2884 ERROR: read group 17056 failed -30
[  325.888564][T10002] (syz.5.1383,10002,0):ocfs2_test_suballoc_bit:2896 ERROR: status = -30
[  325.924362][T10002] (syz.5.1383,10002,0):ocfs2_test_inode_bit:2958 ERROR: test suballoc bit failed -30
[  325.956845][T10002] (syz.5.1383,10002,0):ocfs2_test_inode_bit:2967 ERROR: status = -30
[  325.987836][    T9] usb 8-1: USB disconnect, device number 3
[  326.044722][T10002] (syz.5.1383,10002,0):ocfs2_get_dentry:78 ERROR: test inode bit failed -30
[  326.101131][T10027] fido_id[10027]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory
[  326.194997][T10014] loop4: detected capacity change from 0 to 32768
[  326.254169][T10014] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  326.274045][ T5828] ocfs2: Unmounting device (7,5) on (node local)
[  326.553999][T10014] XFS (loop4): Ending clean mount
[  326.783560][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  326.790150][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  326.888812][ T5841] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  327.047372][T10056] random: crng reseeded on system resumption
[  327.484611][T10058] loop7: detected capacity change from 0 to 4096
[  327.514397][T10058] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  328.743819][T10091] netlink: 'syz.4.1413': attribute type 1 has an invalid length.
[  328.781064][T10091] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1413'.
[  328.788051][T10090] syzkaller1: entered promiscuous mode
[  328.821512][T10090] syzkaller1: entered allmulticast mode
[  328.979652][T10093] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22)
[  329.735608][    T9] kernel read not supported for file /rfkill (pid: 9 comm: kworker/0:0)
[  329.924143][ T5969] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[  330.097013][ T5969] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  330.112891][ T5969] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2
[  330.138684][ T5969] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  330.150176][ T5846] Bluetooth: hci2: unexpected event for opcode 0x1004
[  330.157302][ T5969] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.172581][ T5969] usb 8-1: config 0 descriptor??
[  330.206635][ T5969] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  330.214603][ T5969] dvb-usb: bulk message failed: -22 (3/0)
[  330.229162][T10125] loop2: detected capacity change from 0 to 1024
[  330.233291][ T5969] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  330.251316][ T5969] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  330.260479][ T5969] usb 8-1: media controller created
[  330.296266][ T5969] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  330.309941][ T5969] dvb-usb: bulk message failed: -22 (6/0)
[  330.317053][ T5969] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  330.356904][T10127] loop3: detected capacity change from 0 to 512
[  330.368398][ T5969] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input27
[  330.428858][ T5969] dvb-usb: schedule remote query interval to 150 msecs.
[  330.438216][T10127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  330.461240][ T5969] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  330.484206][T10127] ext4 filesystem being mounted at /255/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  330.614331][  T974] dvb-usb: bulk message failed: -22 (1/0)
[  330.630334][  T974] dvb-usb: error while querying for an remote control event.
[  330.799103][T10135] Bluetooth: hci0: expected 2 bytes, got 7 bytes
[  330.824064][ T5969] dvb-usb: bulk message failed: -22 (1/0)
[  330.851018][ T5969] dvb-usb: error while querying for an remote control event.
[  331.054142][ T5909] dvb-usb: bulk message failed: -22 (1/0)
[  331.066412][ T5909] dvb-usb: error while querying for an remote control event.
[  331.074033][ T5902] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  331.224545][T10142] Bluetooth: MGMT ver 1.23
[  331.244339][ T5902] usb 7-1: Using ep0 maxpacket: 32
[  331.256144][ T5902] usb 7-1: config 0 interface 0 has no altsetting 0
[  331.264046][ T5909] dvb-usb: bulk message failed: -22 (1/0)
[  331.269805][ T5909] dvb-usb: error while querying for an remote control event.
[  331.314408][T10144] loop5: detected capacity change from 0 to 512
[  331.333546][ T5902] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  331.353199][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.363901][ T5902] usb 7-1: Product: syz
[  331.371499][    T9] usb 8-1: USB disconnect, device number 4
[  331.382509][ T5902] usb 7-1: Manufacturer: syz
[  331.395561][ T5902] usb 7-1: SerialNumber: syz
[  331.445289][ T5902] usb 7-1: config 0 descriptor??
[  331.445330][T10144] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  331.488781][T10144] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  331.506039][T10148] loop4: detected capacity change from 0 to 128
[  331.561033][    T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  331.607725][T10148] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  331.626291][T10148] ext4 filesystem being mounted at /270/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  331.664583][T10144] EXT4-fs (loop5): shut down requested (1)
[  331.713606][T10153] loop2: detected capacity change from 0 to 512
[  331.754907][T10148] fscrypt (loop4, inode 12): Unsupported encryption modes (contents 0, filenames 0)
[  331.801970][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.876822][T10153] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (56714!=33349)
[  331.907495][ T5841] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  331.935414][ T5902] gs_usb 7-1:0.0: Configuring for 1 interfaces
[  331.974395][T10153] EXT4-fs (loop2): group descriptors corrupted!
[  332.071188][T10156] loop3: detected capacity change from 0 to 128
[  332.140886][   T30] audit: type=1800 audit(1760137081.065:261): pid=10156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1437" name="file1" dev="loop3" ino=1048667 res=0 errno=0
[  332.166496][T10158] (syz.4.1438,10158,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory.
[  332.184470][T10156] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8)
[  332.220073][T10156] FAT-fs (loop3): Filesystem has been set read-only
[  332.227763][T10156] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522)
[  332.321183][ T5828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.643342][ T5902] gs_usb 7-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO)
[  332.682368][ T5902] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -71
[  332.774244][ T5902] usb 7-1: USB disconnect, device number 14
[  333.214063][ T5969] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  333.404272][ T5969] usb 6-1: Using ep0 maxpacket: 16
[  333.414388][ T5969] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  333.433544][ T5969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.487778][ T5969] usb 6-1: config 0 descriptor??
[  333.581590][T10167] loop7: detected capacity change from 0 to 32768
[  333.685948][T10167] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  333.966512][ T5969] usbhid 6-1:0.0: can't add hid device: -71
[  333.972619][ T5969] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  333.995627][T10167] XFS (loop7): Ending clean mount
[  334.006986][ T5969] usb 6-1: USB disconnect, device number 19
[  334.208109][ T5846] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  334.216769][ T5846] Bluetooth: hci2: Injecting HCI hardware error event
[  334.227168][ T5840] Bluetooth: hci2: hardware error 0x00
[  334.307096][ T9309] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  334.453863][ T5916] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  334.633931][ T5916] usb 3-1: Using ep0 maxpacket: 32
[  334.663078][ T5916] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  334.693482][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.737399][ T5916] usb 3-1: Product: syz
[  334.741622][ T5916] usb 3-1: Manufacturer: syz
[  334.783807][ T5916] usb 3-1: SerialNumber: syz
[  334.819479][ T5916] usb 3-1: config 0 descriptor??
[  335.461978][ T5916] peak_usb 3-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels)
[  335.507007][ T5916] peak_usb 3-1:0.0 can0: sending command failure: -22
[  335.536524][ T5916] peak_usb 3-1:0.0 can0: sending command failure: -22
[  335.788285][ T5916] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22
[  335.864025][ T5916] usb 3-1: USB disconnect, device number 14
[  335.884821][ T5909] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  335.966498][ T5846] Bluetooth: hci0: command tx timeout
[  336.068929][ T5909] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  336.090736][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  336.133973][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  336.165170][ T5909] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  336.192183][ T5909] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  336.243968][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.275425][ T5909] usb 5-1: config 0 descriptor??
[  336.284235][ T5840] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  336.469928][T10244] loop5: detected capacity change from 0 to 2048
[  336.542304][T10244] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  336.629248][T10226] loop6: detected capacity change from 0 to 32768
[  336.656913][T10226] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1465 (10226)
[  336.746898][T10226] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  336.801625][T10226] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  336.837282][ T5909] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  337.072251][T10226] BTRFS info (device loop6): enabling ssd optimizations
[  337.103726][T10226] BTRFS info (device loop6): enabling free space tree
[  337.127650][  T974] usb 5-1: USB disconnect, device number 15
[  337.167285][T10241] loop7: detected capacity change from 0 to 32768
[  337.178542][T10252] fido_id[10252]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  337.217511][T10241] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1472 (10241)
[  337.388421][T10241] BTRFS info (device loop7): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  337.412756][ T6361] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  337.433872][T10241] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm
[  337.694159][T10241] BTRFS info (device loop7): enabling ssd optimizations
[  337.701180][T10241] BTRFS info (device loop7): enabling free space tree
[  338.667861][ T9309] BTRFS info (device loop7): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  339.996463][T10341] vivid-004: disconnect
[  340.026248][T10338] vivid-004: reconnect
[  340.036991][T10291] loop2: detected capacity change from 0 to 40427
[  340.061609][T10291] F2FS-fs (loop2): invalid crc value
[  340.438925][T10291] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  340.470427][T10350] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  340.536680][T10291] F2FS-fs (loop2): Start checkpoint disabled!
[  340.613242][T10291] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[  340.638330][T10291] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  340.767871][T10358] loop3: detected capacity change from 0 to 128
[  340.839945][T10358] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  340.980295][T10358] ext4 filesystem being mounted at /271/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  341.443483][  T974] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  341.529851][ T5833] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  341.635291][  T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  341.675374][  T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  341.714748][  T974] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  341.759120][  T974] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  341.793434][  T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.857924][  T974] usb 5-1: config 0 descriptor??
[  342.414372][T10389] block nbd3: shutting down sockets
[  342.425081][  T974] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  342.693394][  T974] usb 5-1: USB disconnect, device number 16
[  342.745470][T10391] fido_id[10391]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  343.070246][T10395] loop3: detected capacity change from 0 to 2048
[  343.130144][T10395] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  343.185877][T10395] UDF-fs: Scanning with blocksize 512 failed
[  343.232229][T10395] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  343.610911][T10405] loop4: detected capacity change from 0 to 1024
[  343.693719][T10406] loop5: detected capacity change from 0 to 2048
[  343.696902][T10405] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  344.081797][T10405] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: comm syz.4.1527: inode #248: comm syz.4.1527: iget: illegal inode #
[  344.111350][T10406] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  344.204975][T10405] EXT4-fs error (device loop4): ext4_xattr_inode_iget:444: comm syz.4.1527: error while reading EA inode 248 err=-117
[  344.272087][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.366492][ T5909] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  344.431659][T10406] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  344.547303][ T5828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.579992][ T5909] usb 4-1: Using ep0 maxpacket: 32
[  344.614728][ T5909] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  344.646685][ T5909] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  344.672242][ T5909] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  344.729829][ T5909] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  344.779286][T10431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1538'.
[  344.794401][ T5909] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  344.823770][T10431] chnl_net:caif_netlink_parms(): no params data found
[  344.830486][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.862456][ T5909] usb 4-1: Product: syz
[  344.876693][ T5909] usb 4-1: Manufacturer: syz
[  344.885597][ T5909] usb 4-1: SerialNumber: syz
[  344.918157][    C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  344.934122][ T5909] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input30
[  345.155755][ T5909] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  345.194875][ T5909]  (id 0x00)
[  345.431613][T10441] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1540'.
[  345.447724][T10441] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1540'.
[  345.464202][ T5909] rc_core: IR keymap rc-imon-pad not found
[  345.476691][ T5909] Registered IR keymap rc-empty
[  345.491816][ T5909] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  345.512635][ T5909] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  345.567360][ T5909] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0
[  345.613252][ T5969] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  345.625852][ T5909] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input31
[  345.678852][ T5909] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:10> initialized
[  345.770682][T10429] loop7: detected capacity change from 0 to 32768
[  345.809328][ T5969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  345.827634][T10429] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1535 (10429)
[  345.845615][ T5969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  345.888941][ T5909] usb 4-1: USB disconnect, device number 10
[  345.899141][ T5969] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  345.934541][ T5902] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  345.973825][ T5969] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  345.984530][T10429] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  346.000428][ T5969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.032873][T10429] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  346.041357][ T5969] usb 6-1: config 0 descriptor??
[  346.131746][ T5902] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  346.165114][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.183420][ T5902] usb 7-1: Product: syz
[  346.193610][ T5902] usb 7-1: Manufacturer: syz
[  346.203612][ T5902] usb 7-1: SerialNumber: syz
[  346.234378][ T5902] usb 7-1: config 0 descriptor??
[  346.257433][ T5902] ch341 7-1:0.0: ch341-uart converter detected
[  346.288243][T10429] BTRFS info (device loop7): enabling ssd optimizations
[  346.332327][T10429] BTRFS info (device loop7): enabling free space tree
[  346.554828][ T5969] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  346.601876][ T9309] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  346.826618][ T5969] usb 6-1: USB disconnect, device number 20
[  346.889954][T10473] fido_id[10473]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[  347.323535][ T5902] usb 7-1: failed to send control message: -71
[  347.329814][ T5902] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  347.377098][ T5902] usb 7-1: USB disconnect, device number 15
[  347.383718][T10482] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  347.437894][ T5902] ch341 7-1:0.0: device disconnected
[  347.664655][T10490] loop5: detected capacity change from 0 to 2048
[  347.695561][T10490] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  347.733619][T10490] UDF-fs: Scanning with blocksize 512 failed
[  347.774804][T10490] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  348.311359][T10497] input: syz1 as /devices/virtual/input/input33
[  349.139362][T10495] loop7: detected capacity change from 0 to 131072
[  349.145926][ T5969] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  349.165448][T10495] F2FS-fs (loop7): Wrong CP boundary, start(512) end(1536) blocks(0)
[  349.173632][T10495] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  349.198042][T10495] F2FS-fs (loop7): invalid crc value
[  349.304018][T10495] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  349.306109][ T5969] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  349.352193][T10495] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  349.359932][T10495] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  349.373366][ T5969] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  349.424815][ T5969] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  349.442458][   T30] audit: type=1800 audit(1760137098.356:262): pid=10495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1557" name="file2" dev="loop7" ino=8 res=0 errno=0
[  349.470475][ T5969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.484827][ T5969] usb 6-1: Product: syz
[  349.489070][ T5969] usb 6-1: Manufacturer: syz
[  349.493976][ T5969] usb 6-1: SerialNumber: syz
[  349.510006][ T5969] usb 6-1: config 0 descriptor??
[  349.519361][T10507] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  349.539202][T10507] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  349.813446][T10507] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  349.821203][T10507] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  350.002027][T10511] loop4: detected capacity change from 0 to 32768
[  350.130427][T10511] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  350.226665][T10530] netlink: 'syz.6.1571': attribute type 11 has an invalid length.
[  350.268113][ T5841] ocfs2: Unmounting device (7,4) on (node local)
[  350.288861][ T5969] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  350.706911][ T5969] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  350.760001][ T5969] usb 6-1: USB disconnect, device number 21
[  351.493683][T10550] nbd4: detected capacity change from 0 to 63
[  351.552929][T10553] block nbd4: NBD_DISCONNECT
[  351.595223][T10553] block nbd4: Disconnected due to user request.
[  351.634425][ T5852] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  351.662758][T10553] block nbd4: shutting down sockets
[  351.707670][ T5852] Buffer I/O error on dev nbd4, logical block 0, async page read
[  351.744270][   T56] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[  351.755251][   T56] Buffer I/O error on dev nbd4, logical block 1, async page read
[  351.764336][   T56] Buffer I/O error on dev nbd4, logical block 2, async page read
[  351.772945][   T56] Buffer I/O error on dev nbd4, logical block 3, async page read
[  351.778774][T10552] serio: Serial port pty25
[  351.783419][ T5852] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  351.802905][ T5852] Buffer I/O error on dev nbd4, logical block 0, async page read
[  351.810893][ T5852] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  351.822898][ T5852] Buffer I/O error on dev nbd4, logical block 1, async page read
[  351.831074][ T5852] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  351.840717][ T5852] Buffer I/O error on dev nbd4, logical block 2, async page read
[  351.848894][ T5852] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  351.859229][ T5852] Buffer I/O error on dev nbd4, logical block 3, async page read
[  351.867892][ T5852] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  351.877233][ T5852] Buffer I/O error on dev nbd4, logical block 0, async page read
[  351.886910][ T5852] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  351.903023][ T5852] Buffer I/O error on dev nbd4, logical block 1, async page read
[  351.921259][ T5852] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  351.982913][ T5852] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  352.017178][ T5852] ldm_validate_partition_table(): Disk read failed.
[  352.055710][ T5852] Dev nbd4: unable to read RDB block 0
[  352.119166][ T5852]  nbd4: unable to read partition table
[  352.184151][ T5852] ldm_validate_partition_table(): Disk read failed.
[  352.235613][ T5852] Dev nbd4: unable to read RDB block 0
[  352.263793][ T5852]  nbd4: unable to read partition table
[  352.537450][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1587'.
[  352.574487][T10572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1587'.
[  352.652539][  T988] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  352.713810][  T988] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  352.722581][  T988] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  352.764469][  T988] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  353.726028][T10602] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1601'.
[  353.752006][T10605] loop7: detected capacity change from 0 to 1024
[  353.946581][T10575] loop3: detected capacity change from 0 to 32768
[  354.150132][T10609] netlink: 'syz.6.1604': attribute type 2 has an invalid length.
[  354.500803][T10614] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1607'.
[  354.513942][T10614] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1607'.
[  354.589383][T10616] 9pnet_fd: Insufficient options for proto=fd
[  354.766783][T10621] netlink: 'syz.6.1608': attribute type 4 has an invalid length.
[  354.947048][T10625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1612'.
[  355.135050][T10629] loop2: detected capacity change from 0 to 1024
[  355.235314][T10629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  355.263005][T10629] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  355.424175][T10629] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.1613: lblock 0 mapped to illegal pblock 0 (length 4)
[  355.490074][T10629] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.1613: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  355.739764][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  356.658640][T10664] loop5: detected capacity change from 0 to 256
[  356.765011][T10664] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d)
[  357.728512][T10661] loop4: detected capacity change from 0 to 131072
[  357.765766][T10661] F2FS-fs (loop4): invalid crc value
[  357.940174][T10661] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  357.950631][T10661] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  358.370008][T10693] loop7: detected capacity change from 0 to 512
[  358.391398][T10693] EXT4-fs: Ignoring removed nobh option
[  358.503701][T10693] EXT4-fs warning (device loop7): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  358.513469][T10695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1641'.
[  358.577184][T10693] EXT4-fs warning (device loop7): dx_probe:848: Enable large directory feature to access it
[  358.588448][T10693] EXT4-fs warning (device loop7): dx_probe:933: inode #2: comm syz.7.1640: Corrupt directory, running e2fsck is recommended
[  358.624234][T10693] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117
[  358.641548][T10693] EXT4-fs error (device loop7): ext4_iget_extra_inode:5074: inode #15: comm syz.7.1640: corrupted in-inode xattr: invalid ea_ino
[  358.664373][T10693] EXT4-fs error (device loop7): ext4_orphan_get:1395: comm syz.7.1640: couldn't read orphan inode 15 (err -117)
[  358.731937][T10693] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  358.854541][T10693] EXT4-fs warning (device loop7): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  358.936585][T10693] EXT4-fs warning (device loop7): dx_probe:848: Enable large directory feature to access it
[  358.997314][T10693] EXT4-fs warning (device loop7): dx_probe:933: inode #2: comm syz.7.1640: Corrupt directory, running e2fsck is recommended
[  359.174801][T10712] EXT4-fs warning (device loop7): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  359.244991][T10712] EXT4-fs warning (device loop7): dx_probe:848: Enable large directory feature to access it
[  359.302314][T10712] EXT4-fs warning (device loop7): dx_probe:933: inode #2: comm syz.7.1640: Corrupt directory, running e2fsck is recommended
[  359.375586][T10704] EXT4-fs warning (device loop7): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  359.402682][ T5924] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  359.431504][T10714] syz.4.1646 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  359.453801][T10704] EXT4-fs warning (device loop7): dx_probe:848: Enable large directory feature to access it
[  359.548268][T10704] EXT4-fs warning (device loop7): dx_probe:933: inode #2: comm syz.7.1640: Corrupt directory, running e2fsck is recommended
[  359.588164][T10707] EXT4-fs warning (device loop7): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  359.624933][ T5924] usb 4-1: config 0 has an invalid interface number: 64 but max is 0
[  359.662486][ T5924] usb 4-1: config 0 has no interface number 0
[  359.722466][ T5924] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[  359.731765][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.763306][ T5924] usb 4-1: Product: syz
[  359.767510][ T5924] usb 4-1: Manufacturer: syz
[  359.772113][ T5924] usb 4-1: SerialNumber: syz
[  359.879775][ T5924] usb 4-1: config 0 descriptor??
[  359.965917][ T9309] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.002963][T10685] loop6: detected capacity change from 0 to 32768
[  360.134160][ T5924] uvcvideo 4-1:0.64: Found Unit with invalid ID 0
[  360.140681][ T5924] uvcvideo 4-1:0.64: Found UVC 0.08 device syz (046d:0823)
[  360.197399][ T5924] uvcvideo 4-1:0.64: No valid video chain found.
[  360.211458][ T5924] usb 4-1: USB disconnect, device number 11
[  360.219428][T10685] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  360.299364][T10730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1652'.
[  360.511580][T10685] XFS (loop6): Ending clean mount
[  360.598262][T10685] XFS (loop6): Quotacheck needed: Please wait.
[  360.721951][T10685] XFS (loop6): Quotacheck: Done.
[  361.059904][ T6361] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  361.182654][T10744] loop7: detected capacity change from 0 to 1024
[  361.263858][T10744] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  361.402926][T10744] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  361.548380][T10744] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  361.650234][T10744] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 35 with error 28
[  361.733840][T10744] EXT4-fs (loop7): This should not happen!! Data will be lost
[  361.733840][T10744] 
[  361.767367][T10744] EXT4-fs (loop7): Total free blocks count 0
[  361.842325][T10744] EXT4-fs (loop7): Free/Dirty block details
[  361.848340][T10744] EXT4-fs (loop7): free_blocks=4293918720
[  361.892456][T10744] EXT4-fs (loop7): dirty_blocks=64
[  361.897660][T10744] EXT4-fs (loop7): Block reservation details
[  361.934077][   T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  361.957322][T10744] EXT4-fs (loop7): i_reserved_data_blocks=4
[  362.108596][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  362.140074][   T24] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  362.169853][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.183137][T10724] loop5: detected capacity change from 0 to 32768
[  362.195337][   T24] usb 4-1: config 0 descriptor??
[  362.230492][T10724] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  362.231271][  T988] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:5: lblock 40 mapped to illegal pblock 8 (length 8)
[  362.288685][  T988] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 40 with max blocks 8 with error 117
[  362.362505][  T974] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  362.469883][   T24] usbhid 4-1:0.0: can't add hid device: -71
[  362.496626][   T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  362.550842][  T974] usb 7-1: Using ep0 maxpacket: 8
[  362.563636][   T24] usb 4-1: USB disconnect, device number 12
[  362.596026][  T974] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  362.622433][  T974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.637374][  T974] usb 7-1: Product: syz
[  362.641554][T10724] XFS (loop5): Ending clean mount
[  362.644148][T10724] XFS (loop5): Quotacheck needed: Please wait.
[  362.658645][  T974] usb 7-1: Manufacturer: syz
[  362.762472][  T974] usb 7-1: SerialNumber: syz
[  362.789552][  T974] usb 7-1: config 0 descriptor??
[  362.807268][  T974] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  362.807314][T10724] XFS (loop5): Quotacheck: Done.
[  362.911933][T10776] loop7: detected capacity change from 0 to 1024
[  362.937931][T10776] EXT4-fs: Ignoring removed orlov option
[  362.987076][T10776] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  363.004415][T10776] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  363.052664][T10724] XFS (loop5): User initiated shutdown received.
[  363.089386][   T30] audit: type=1800 audit(1760137112.007:263): pid=10776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1667" name="file1" dev="loop7" ino=15 res=0 errno=0
[  363.110302][T10724] XFS (loop5): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0xf5/0x190 (fs/xfs/xfs_fsops.c:466).  Shutting down filesystem.
[  363.110399][T10724] XFS (loop5): Please unmount the filesystem and rectify the problem(s)
[  363.175326][   T30] audit: type=1800 audit(1760137112.077:264): pid=10776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1667" name="file1" dev="loop7" ino=15 res=0 errno=0
[  363.228648][ T5828] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  363.281069][  T988] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: comm kworker/u8:5: lblock 0 mapped to illegal pblock 0 (length 1)
[  363.332609][  T988] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  363.372600][  T988] EXT4-fs (loop7): This should not happen!! Data will be lost
[  363.372600][  T988] 
[  363.434418][ T9309] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  363.479241][T10785] loop3: detected capacity change from 0 to 2048
[  363.525395][T10785] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  363.622213][T10790] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  363.679926][T10790] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  363.720583][T10790] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  363.796593][T10790] Remounting filesystem read-only
[  363.889614][  T974] usb 7-1: USB disconnect, device number 16
[  365.328936][T10841] loop7: detected capacity change from 0 to 512
[  365.439050][T10841] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  365.572217][T10841] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  365.621325][T10851] netlink: 360 bytes leftover after parsing attributes in process `syz.6.1697'.
[  365.832943][ T9309] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  365.996542][T10859] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1700'.
[  366.569273][T10875] loop6: detected capacity change from 0 to 512
[  366.673377][T10875] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  366.872721][ T5969] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  367.033329][ T5969] usb 8-1: Using ep0 maxpacket: 16
[  367.056541][ T5969] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  367.115664][ T5969] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  367.171194][ T5969] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  367.205290][ T5969] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.259824][ T5969] usb 8-1: config 0 descriptor??
[  367.645568][ T5969] usbhid 8-1:0.0: can't add hid device: -71
[  367.670227][ T5969] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  367.703076][ T5969] usb 8-1: USB disconnect, device number 5
[  367.992184][T10919] loop3: detected capacity change from 0 to 64
[  368.483311][T10929] loop5: detected capacity change from 0 to 128
[  368.505910][T10929] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  368.602126][T10929] hpfs: filesystem error: improperly stopped
[  368.608177][T10929] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  368.671933][T10929] hpfs: You really don't want any checks? You are crazy...
[  368.679710][T10929] hpfs: hpfs_map_sector(): read error
[  368.743786][T10929] hpfs: code page support is disabled
[  368.750178][T10929] hpfs: hpfs_map_4sectors(): unaligned read
[  368.781711][T10929] hpfs: hpfs_map_4sectors(): unaligned read
[  368.820755][T10929] hpfs: filesystem error: unable to find root dir
[  369.171999][ T5924] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  369.352555][ T5924] usb 8-1: Using ep0 maxpacket: 32
[  369.373550][ T5924] usb 8-1: config 0 interface 0 has no altsetting 0
[  369.404995][ T5924] usb 8-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  369.440992][ T5924] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.494882][ T5924] usb 8-1: config 0 descriptor??
[  369.601689][T10961] input: syz0 as /devices/virtual/input/input34
[  370.172465][ T5924] corsair-cpro 0003:1B1C:0C10.001C: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.7-1/input0
[  370.197794][T10967] loop6: detected capacity change from 0 to 32768
[  370.236185][T10967] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  370.245033][T10967] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  370.261321][T10967] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  370.277930][  T974] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  370.311845][  T974] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  370.702276][ T5924] corsair-cpro 0003:1B1C:0C10.001C: probe with driver corsair-cpro failed with error -71
[  370.704250][  T974] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 392ms
[  370.792257][ T5924] usb 8-1: USB disconnect, device number 6
[  370.799616][  T974] gfs2: fsid=syz:syz.0: jid=0: Done
[  370.845431][T10967] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  371.025779][T10956] loop3: detected capacity change from 0 to 32768
[  371.127823][T10956] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  371.631860][   T30] audit: type=1326 audit(1760137120.537:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10993 comm="syz.5.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdbc18eec9 code=0x7ffc0000
[  371.646351][ T5833] ocfs2: Unmounting device (7,3) on (node local)
[  371.777174][   T30] audit: type=1326 audit(1760137120.537:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10993 comm="syz.5.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdbc18eec9 code=0x7ffc0000
[  371.907728][   T30] audit: type=1326 audit(1760137120.557:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10993 comm="syz.5.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdbc18eec9 code=0x7ffc0000
[  372.001743][ T5916] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  372.012819][   T30] audit: type=1326 audit(1760137120.557:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10993 comm="syz.5.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdbc18eec9 code=0x7ffc0000
[  372.139097][   T30] audit: type=1326 audit(1760137120.557:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10993 comm="syz.5.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdbc18eec9 code=0x7ffc0000
[  372.198387][ T5916] usb 3-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c
[  372.223905][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.249618][   T30] audit: type=1326 audit(1760137120.607:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10993 comm="syz.5.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdbc18eec9 code=0x7ffc0000
[  372.277578][ T5916] usb 3-1: Product: syz
[  372.316120][ T5916] usb 3-1: Manufacturer: syz
[  372.320761][ T5916] usb 3-1: SerialNumber: syz
[  372.362114][   T30] audit: type=1326 audit(1760137120.617:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10993 comm="syz.5.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdbc18eec9 code=0x7ffc0000
[  372.449749][ T5916] usb 3-1: config 0 descriptor??
[  372.465883][   T30] audit: type=1326 audit(1760137120.627:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10993 comm="syz.5.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbdbc18eec9 code=0x7ffc0000
[  372.529303][   T30] audit: type=1326 audit(1760137120.627:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10993 comm="syz.5.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdbc18eec9 code=0x7ffc0000
[  372.638431][   T30] audit: type=1326 audit(1760137120.627:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10993 comm="syz.5.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fbdbc18eec9 code=0x7ffc0000
[  372.961771][T11028] netlink: 'syz.4.1754': attribute type 12 has an invalid length.
[  373.417622][ T5916] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  373.451680][ T5916] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  373.501948][ T5916] asix 3-1:0.0: probe with driver asix failed with error -71
[  373.584062][ T5916] usb 3-1: USB disconnect, device number 15
[  375.065277][T11078] loop3: detected capacity change from 0 to 1024
[  375.078348][T11078] EXT4-fs: Ignoring removed bh option
[  375.096568][T11078] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  375.134294][T11078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  375.185648][T11078] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2852: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  375.312131][ T5916] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  375.386006][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.471739][ T5916] usb 7-1: Using ep0 maxpacket: 32
[  375.483874][ T5916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  375.495576][ T5916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  375.572930][ T5916] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  375.614709][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.677479][ T5916] usb 7-1: config 0 descriptor??
[  376.186234][T11099] veth3: entered promiscuous mode
[  376.187227][ T5916] savu 0003:1E7D:2D5A.001D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0
[  376.201524][T11099] veth3: entered allmulticast mode
[  376.349296][T11087] loop4: detected capacity change from 0 to 32768
[  376.470309][T11087] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  376.530783][ T5924] usb 7-1: USB disconnect, device number 17
[  376.638449][T11106] fido_id[11106]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory
[  376.713724][ T5902] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  376.891825][ T5969] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  376.892076][ T5902] usb 6-1: Using ep0 maxpacket: 32
[  376.958253][ T5841] ocfs2: Unmounting device (7,4) on (node local)
[  376.961589][ T5902] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  377.011561][ T5902] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  377.052182][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  377.063133][ T5969] usb 4-1: config 0 has an invalid interface number: 217 but max is 0
[  377.078095][ T5902] usb 6-1: Product: syz
[  377.083408][ T5969] usb 4-1: config 0 has no interface number 0
[  377.112878][ T5902] usb 6-1: Manufacturer: syz
[  377.117546][ T5902] usb 6-1: SerialNumber: syz
[  377.119228][ T5969] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  377.170114][ T5902] usb 6-1: config 0 descriptor??
[  377.187890][ T5969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.210502][T11111] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  377.226927][ T5969] usb 4-1: Product: syz
[  377.231153][ T5969] usb 4-1: Manufacturer: syz
[  377.231803][ T5902] hub 6-1:0.0: bad descriptor, ignoring hub
[  377.271140][ T5902] hub 6-1:0.0: probe with driver hub failed with error -5
[  377.278578][ T5969] usb 4-1: SerialNumber: syz
[  377.319258][ T5969] usb 4-1: config 0 descriptor??
[  377.346117][ T5969] hub 4-1:0.217: bad descriptor, ignoring hub
[  377.371437][ T5969] hub 4-1:0.217: probe with driver hub failed with error -5
[  377.555618][ T5969] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[  377.622640][ T5969] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  377.652988][ T5969] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[  377.681427][ T5969] usb 4-1: media controller created
[  377.738441][T11131] vivid-003: disconnect
[  377.758141][T11130] vivid-003: reconnect
[  377.775179][ T5969] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  378.093122][ T5969] DVB: Unable to find symbol dib7000p_attach()
[  378.123626][ T5969] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[  378.321438][ T5969] rc_core: IR keymap rc-dib0700-rc5 not found
[  378.327573][ T5969] Registered IR keymap rc-empty
[  378.345048][ T5969] dvb-usb: could not initialize remote control.
[  378.373812][ T5969] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[  378.414653][ T5969] usb 4-1: USB disconnect, device number 13
[  378.431828][ T5902] usb 6-1: USB disconnect, device number 22
[  378.478545][T11144] loop4: detected capacity change from 0 to 128
[  378.506661][T11144] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  378.525047][ T5969] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[  378.540213][T11144] hpfs: filesystem error: improperly stopped
[  378.568336][T11144] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  378.621411][T11144] hpfs: You really don't want any checks? You are crazy...
[  378.662509][T11144] hpfs: hpfs_map_sector(): read error
[  378.677980][T11144] hpfs: code page support is disabled
[  378.696447][T11144] hpfs: hpfs_map_4sectors(): unaligned read
[  378.703865][T11144] hpfs: hpfs_map_4sectors(): unaligned read
[  378.710484][T11144] hpfs: filesystem error: unable to find root dir
[  378.730565][T11144] hpfs: hpfs_map_4sectors(): unaligned read
[  379.021457][ T5970] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  379.191984][ T5902] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  379.221411][ T5970] usb 8-1: Using ep0 maxpacket: 8
[  379.272139][ T5970] usb 8-1: config 0 has no interfaces?
[  379.310354][ T5970] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  379.341315][ T5970] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.349381][ T5970] usb 8-1: Product: syz
[  379.368019][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  379.381284][ T5970] usb 8-1: Manufacturer: syz
[  379.385925][ T5970] usb 8-1: SerialNumber: syz
[  379.422403][ T5970] usb 8-1: config 0 descriptor??
[  379.433922][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  379.475156][ T5902] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  379.502838][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.540462][ T5902] usb 3-1: config 0 descriptor??
[  379.736862][    T9] usb 8-1: USB disconnect, device number 7
[  379.789599][T11176] loop3: detected capacity change from 0 to 1024
[  379.815488][T11176] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  379.841898][T11176] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  379.862346][T11176] EXT4-fs (loop3): orphan cleanup on readonly fs
[  379.868960][T11176] EXT4-fs error (device loop3): ext4_free_blocks:6705: comm syz.3.1810: Freeing blocks not in datazone - block = 0, count = 4096
[  379.901128][T11176] EXT4-fs (loop3): 1 orphan inode deleted
[  379.911760][T11176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  379.987226][ T5902] isku 0003:1E7D:319C.001E: unknown main item tag 0x0
[  379.997300][ T5902] isku 0003:1E7D:319C.001E: unknown main item tag 0x0
[  380.013266][ T5902] isku 0003:1E7D:319C.001E: unknown main item tag 0x0
[  380.047057][ T5902] isku 0003:1E7D:319C.001E: unknown main item tag 0x0
[  380.091387][ T5902] isku 0003:1E7D:319C.001E: unknown main item tag 0x0
[  380.111468][ T5902] isku 0003:1E7D:319C.001E: unknown main item tag 0x0
[  380.118352][ T5902] isku 0003:1E7D:319C.001E: unknown main item tag 0x0
[  380.191256][ T5902] isku 0003:1E7D:319C.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0
[  380.305594][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  380.468964][ T5902] usb 3-1: USB disconnect, device number 16
[  380.528996][T11186] fido_id[11186]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  380.557280][T11189] program syz.6.1815 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  380.595128][T11189] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  380.710876][T11191] loop4: detected capacity change from 0 to 1024
[  380.760566][T11191] hfsplus: Bad value for 'gid'
[  381.073583][T11201] misc userio: Begin command sent, but we're already running
[  381.500045][T11209] loop3: detected capacity change from 0 to 2048
[  381.564102][T11209] NILFS (loop3): invalid segment: Magic number mismatch
[  381.577600][T11209] NILFS (loop3): trying rollback from an earlier position
[  381.602245][ T5902] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  381.644751][T11209] NILFS (loop3): recovery complete
[  381.698689][T11219] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  381.814464][ T5902] usb 8-1: unable to get BOS descriptor or descriptor too short
[  381.845466][ T5902] usb 8-1: unable to read config index 0 descriptor/start: -71
[  381.873215][ T5902] usb 8-1: can't read configurations, error -71
[  381.978536][T11226] geneve2: entered promiscuous mode
[  381.993354][T11226] geneve2: entered allmulticast mode
[  382.141227][   T24] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  382.341602][   T24] usb 7-1: Using ep0 maxpacket: 32
[  382.355533][   T24] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  382.406553][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.453166][T11235] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1834'.
[  382.493407][   T24] usb 7-1: config 0 descriptor??
[  382.552692][   T24] gspca_main: nw80x-2.14.0 probing 055f:d001
[  382.907518][T11244] loop4: detected capacity change from 0 to 1024
[  383.026796][T11244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  383.106015][T11244] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  383.265423][T11259] io-wq is not configured for unbound workers
[  383.359935][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  383.631433][   T24] gspca_nw80x: reg_w err -71
[  383.636177][   T24] nw80x 7-1:0.0: probe with driver nw80x failed with error -71
[  383.687798][   T24] usb 7-1: USB disconnect, device number 18
[  383.707008][T11268] loop5: detected capacity change from 0 to 512
[  383.861700][T11268] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  383.905417][T11268] ext4 filesystem being mounted at /288/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  384.406983][T11280] loop4: detected capacity change from 0 to 32768
[  384.418650][T11280] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  384.419838][ T5828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  384.426897][T11280] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  384.477036][T11290] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1856'.
[  384.477806][T11280] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  384.496017][    T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  384.514758][    T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  384.555280][T11290] netlink: 'syz.3.1856': attribute type 7 has an invalid length.
[  384.604394][T11295] loop6: detected capacity change from 0 to 128
[  384.618308][T11290] netlink: 'syz.3.1856': attribute type 8 has an invalid length.
[  384.650677][T11295] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  384.663585][T11290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1856'.
[  384.677956][    T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 163ms
[  384.709983][    T9] gfs2: fsid=syz:syz.0: jid=0: Done
[  384.715828][T11280] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  384.758569][T11295] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  384.882884][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  384.882908][   T30] audit: type=1800 audit(1760137133.808:276): pid=11280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1852" name="file1" dev="loop4" ino=4677 res=0 errno=0
[  385.199829][T11303] pim6reg1: entered promiscuous mode
[  385.222474][T11303] pim6reg1: entered allmulticast mode
[  385.244205][ T1151] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  385.515706][T11312] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.524900][T11312] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.153901][   T30] audit: type=1326 audit(1760137135.068:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11327 comm="syz.2.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea158eec9 code=0x7ffc0000
[  386.244566][   T30] audit: type=1326 audit(1760137135.068:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11327 comm="syz.2.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea158eec9 code=0x7ffc0000
[  386.313910][   T30] audit: type=1326 audit(1760137135.078:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11327 comm="syz.2.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f4ea158eec9 code=0x7ffc0000
[  386.313986][   T30] audit: type=1326 audit(1760137135.078:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11327 comm="syz.2.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea158eec9 code=0x7ffc0000
[  386.314056][   T30] audit: type=1326 audit(1760137135.078:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11327 comm="syz.2.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea158eec9 code=0x7ffc0000
[  386.314126][   T30] audit: type=1326 audit(1760137135.108:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11327 comm="syz.2.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f4ea158eec9 code=0x7ffc0000
[  386.314196][   T30] audit: type=1326 audit(1760137135.108:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11327 comm="syz.2.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea158eec9 code=0x7ffc0000
[  386.314265][   T30] audit: type=1326 audit(1760137135.108:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11327 comm="syz.2.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f4ea158eec9 code=0x7ffc0000
[  386.314337][   T30] audit: type=1326 audit(1760137135.108:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11327 comm="syz.2.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea158eec9 code=0x7ffc0000
[  386.399524][T11332] loop5: detected capacity change from 0 to 2048
[  386.406640][T11332] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  386.491545][T11333] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  386.569694][T11339] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1874'.
[  386.676055][T11332] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  386.721034][T11332] Remounting filesystem read-only
[  387.047548][ T7516] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.054837][ T7516] bridge0: port 2(bridge_slave_1) entered forwarding state
[  387.071669][   T24] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  387.272081][   T24] usb 7-1: Using ep0 maxpacket: 8
[  387.312407][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  387.350850][   T24] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  387.400501][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.438219][T11354] rtc_cmos 00:00: Alarms can be up to one day in the future
[  387.452978][   T24] usb 7-1: config 0 descriptor??
[  387.693607][   T24] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  387.951170][ T5902] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  388.020904][   T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  388.039368][ T5924] rtc_cmos 00:00: Alarms can be up to one day in the future
[  388.060962][ T5924] rtc_cmos 00:00: Alarms can be up to one day in the future
[  388.086330][ T5924] rtc_cmos 00:00: Alarms can be up to one day in the future
[  388.094468][ T5924] rtc_cmos 00:00: Alarms can be up to one day in the future
[  388.102042][ T5924] rtc rtc0: __rtc_set_alarm: err=-22
[  388.114815][ T5902] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  388.135951][ T5902] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  388.150875][ T5902] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.181926][ T5902] usb 8-1: config 0 descriptor??
[  388.186003][ T5969] usb 7-1: USB disconnect, device number 19
[  388.212963][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  388.215268][   T24] usb 6-1: Using ep0 maxpacket: 16
[  388.219357][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  388.258222][   T24] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  388.289112][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.311040][   T24] usb 6-1: Product: syz
[  388.322517][   T24] usb 6-1: Manufacturer: syz
[  388.327185][   T24] usb 6-1: SerialNumber: syz
[  388.340556][   T24] usb 6-1: config 0 descriptor??
[  388.406900][ T5902] usbhid 8-1:0.0: can't add hid device: -71
[  388.421360][ T5902] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  388.453938][ T5902] usb 8-1: USB disconnect, device number 10
[  388.630589][T11375] loop3: detected capacity change from 0 to 512
[  388.652541][T11375] EXT4-fs: Ignoring removed orlov option
[  388.673176][T11375] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  388.694811][T11375] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  388.736346][T11375] EXT4-fs error (device loop3): ext4_iget_extra_inode:5074: inode #15: comm syz.3.1892: corrupted in-inode xattr: e_value size too large
[  388.792041][   T24] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  388.827894][T11375] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.1892: couldn't read orphan inode 15 (err -117)
[  388.851905][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  388.871780][   T24] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  388.879774][   T24] usb 6-1: media controller created
[  388.900855][ T5902] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  388.911502][T11375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  388.930257][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  389.034023][   T24] zl10353_read_register: readreg error (reg=127, ret==0)
[  389.050995][   T24] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  389.067856][   T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  389.090940][ T5902] usb 8-1: Using ep0 maxpacket: 32
[  389.103072][ T5902] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  389.120888][   T24] usb 6-1: USB disconnect, device number 23
[  389.131627][ T5902] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  389.174127][ T5902] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.225187][ T5902] usb 8-1: config 0 descriptor??
[  389.258672][   T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  389.281939][ T5902] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  389.314031][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  389.335945][ T5902] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  389.652343][T11362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  389.691493][T11362] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  389.716940][   T24] usb 8-1: USB disconnect, device number 11
[  389.742906][   T24] ldusb 8-1:0.0: LD USB Device #0 now disconnected
[  389.982803][T11381] loop6: detected capacity change from 0 to 32768
[  390.049690][T11381] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  390.129165][T11381] XFS (loop6): Ending clean mount
[  390.170427][T11381] XFS (loop6): Quotacheck needed: Please wait.
[  390.200847][ T5969] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  390.292263][T11381] XFS (loop6): Quotacheck: Done.
[  390.351327][ T5969] usb 6-1: Using ep0 maxpacket: 16
[  390.363722][ T5969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  390.386464][ T5969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  390.408381][ T5969] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  390.432720][ T5969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  390.633382][ T5924] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  390.704247][ T6361] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  390.830739][ T5902] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  390.843618][ T5924] usb 5-1: config 0 has an invalid interface number: 217 but max is 0
[  390.874489][ T5924] usb 5-1: config 0 has no interface number 0
[  390.906180][ T5924] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  390.917987][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.926916][ T5924] usb 5-1: Product: syz
[  390.932663][ T5924] usb 5-1: Manufacturer: syz
[  390.937274][ T5924] usb 5-1: SerialNumber: syz
[  390.957451][ T5924] usb 5-1: config 0 descriptor??
[  390.965849][ T5924] hub 5-1:0.217: bad descriptor, ignoring hub
[  390.978088][ T5924] hub 5-1:0.217: probe with driver hub failed with error -5
[  391.011917][    T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  391.020723][ T5902] usb 8-1: Using ep0 maxpacket: 8
[  391.028450][ T5902] usb 8-1: config 1 interface 0 altsetting 14 bulk endpoint 0x1 has invalid maxpacket 64
[  391.039521][ T5902] usb 8-1: config 1 interface 0 has no altsetting 0
[  391.051562][ T5902] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  391.061006][ T5902] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.069059][ T5902] usb 8-1: Product: syz
[  391.074788][ T5902] usb 8-1: Manufacturer: syz
[  391.079426][ T5902] usb 8-1: SerialNumber: syz
[  391.099991][T11426] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[  391.176614][ T5924] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[  391.184845][    T9] usb 4-1: Using ep0 maxpacket: 8
[  391.206658][ T5924] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  391.218596][    T9] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  391.232566][ T5924] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[  391.242877][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.252365][ T5924] usb 5-1: media controller created
[  391.257694][    T9] usb 4-1: Product: syz
[  391.267789][    T9] usb 4-1: Manufacturer: syz
[  391.278162][    T9] usb 4-1: SerialNumber: syz
[  391.299035][    T9] usb 4-1: config 0 descriptor??
[  391.345859][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  391.354710][    T9] gspca_main: se401-2.14.0 probing 047d:5003
[  391.409923][ T5969] usb 6-1: config 0 descriptor??
[  391.547367][T11426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  391.594061][T11426] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  391.731258][ T5902] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 14 proto 1 vid 0x04B8 pid 0x0202
[  391.756987][ T5924] DVB: Unable to find symbol dib7000p_attach()
[  391.765605][    T9] gspca_se401: ExtraFeatures: 117
[  391.787203][    T9] gspca_se401: Too many frame sizes
[  391.792860][ T5924] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[  391.806333][ T5902] usb 8-1: USB disconnect, device number 12
[  391.838605][ T5902] usblp0: removed
[  391.970719][    T9] usb 4-1: USB disconnect, device number 14
[  392.020764][ T5924] rc_core: IR keymap rc-dib0700-rc5 not found
[  392.047974][ T5924] Registered IR keymap rc-empty
[  392.064499][ T5924] dvb-usb: could not initialize remote control.
[  392.081782][ T5924] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[  392.092696][T11400] ------------[ cut here ]------------
[  392.098232][T11400] usb 5-1: BOGUS control dir, pipe 80001180 doesn't match bRequestType c0
[  392.129164][T11400] WARNING: CPU: 0 PID: 11400 at drivers/usb/core/urb.c:412 usb_submit_urb+0x157d/0x1990
[  392.139535][T11400] Modules linked in:
[  392.144361][T11400] CPU: 0 UID: 0 PID: 11400 Comm: syz.5.1903 Not tainted syzkaller #0 PREEMPT(full) 
[  392.153837][T11400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  392.163994][T11400] RIP: 0010:usb_submit_urb+0x157d/0x1990
[  392.169656][T11400] Code: e8 48 71 b0 fa 48 8b 7c 24 38 e8 1e 5c d3 fe 48 8b 54 24 30 45 89 e8 44 89 f9 48 89 c6 48 c7 c7 20 6d 51 8c e8 14 aa 6e fa 90 <0f> 0b 90 90 e9 ca ed ff ff e8 15 71 b0 fa 0f b6 2d 58 00 60 09 31
[  392.189520][T11400] RSP: 0018:ffffc9000cfe7970 EFLAGS: 00010282
[  392.195883][T11400] RAX: 0000000000000000 RBX: ffff88805e474200 RCX: ffffc9000c2dd000
[  392.204301][T11400] RDX: 0000000000080000 RSI: ffffffff817a9ef5 RDI: 0000000000000001
[  392.212974][T11400] RBP: ffff888055060058 R08: 0000000000000001 R09: 0000000000000000
[  392.221027][T11400] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888063281b20
[  392.229010][T11400] R13: 00000000000000c0 R14: 0000000000000001 R15: 0000000080001180
[  392.237144][T11400] FS:  00007fbdbd04e6c0(0000) GS:ffff8881249de000(0000) knlGS:0000000000000000
[  392.246356][T11400] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  392.253200][T11400] CR2: 00007fca785156c0 CR3: 000000005e449000 CR4: 0000000000350ef0
[  392.261291][T11400] Call Trace:
[  392.264576][T11400]  <TASK>
[  392.267520][T11400]  ? __init_swait_queue_head+0xca/0x150
[  392.273240][T11400]  usb_start_wait_urb+0x104/0x4b0
[  392.278294][T11400]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  392.284016][T11400]  ? srso_alias_return_thunk+0x5/0xfbef5
[  392.289677][T11400]  ? __asan_memset+0x23/0x50
[  392.294330][T11400]  ? srso_alias_return_thunk+0x5/0xfbef5
[  392.299996][T11400]  usb_control_msg+0x326/0x4a0
[  392.304820][T11400]  ? __pfx_usb_control_msg+0x10/0x10
[  392.310142][T11400]  dib0700_ctrl_rd+0x1b2/0x350
[  392.315024][T11400]  dib0700_i2c_xfer+0xa9a/0xe40
[  392.319938][T11400]  __i2c_transfer+0x6b6/0x2190
[  392.324780][T11400]  ? lockdep_hardirqs_on+0x7c/0x110
[  392.327523][ T5969] mcp2221 0003:04D8:00DD.001F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0
[  392.330004][T11400]  ? __pfx___i2c_transfer+0x10/0x10
[  392.345664][T11400]  ? srso_alias_return_thunk+0x5/0xfbef5
[  392.351376][T11400]  ? rt_mutex_slowtrylock+0xc9/0x100
[  392.356722][T11400]  i2c_transfer+0x1da/0x380
[  392.362023][T11400]  i2cdev_ioctl_rdwr+0x373/0x710
[  392.367018][T11400]  i2cdev_ioctl+0x5ff/0x820
[  392.371998][T11400]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  392.377061][T11400]  ? srso_alias_return_thunk+0x5/0xfbef5
[  392.382950][T11400]  ? __fget_files+0x20e/0x3c0
[  392.387683][T11400]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  392.392868][T11400]  __x64_sys_ioctl+0x18e/0x210
[  392.397680][T11400]  do_syscall_64+0xcd/0xfa0
[  392.402245][T11400]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.408158][T11400] RIP: 0033:0x7fbdbc18eec9
[  392.412620][T11400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  392.432466][T11400] RSP: 002b:00007fbdbd04e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  392.441037][T11400] RAX: ffffffffffffffda RBX: 00007fbdbc3e5fa0 RCX: 00007fbdbc18eec9
[  392.449026][T11400] RDX: 00002000000001c0 RSI: 0000000000000707 RDI: 0000000000000004
[  392.457053][T11400] RBP: 00007fbdbc211f91 R08: 0000000000000000 R09: 0000000000000000
[  392.465121][T11400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  392.473150][T11400] R13: 00007fbdbc3e6038 R14: 00007fbdbc3e5fa0 R15: 00007ffdb8550b18
[  392.481219][T11400]  </TASK>
[  392.484264][T11400] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  392.491570][T11400] CPU: 0 UID: 0 PID: 11400 Comm: syz.5.1903 Not tainted syzkaller #0 PREEMPT(full) 
[  392.500951][T11400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  392.511007][T11400] Call Trace:
[  392.514281][T11400]  <TASK>
[  392.517207][T11400]  dump_stack_lvl+0x3d/0x1f0
[  392.521816][T11400]  vpanic+0x640/0x6f0
[  392.525826][T11400]  ? usb_submit_urb+0x157d/0x1990
[  392.530855][T11400]  panic+0xca/0xd0
[  392.534600][T11400]  ? __pfx_panic+0x10/0x10
[  392.539067][T11400]  check_panic_on_warn+0xab/0xb0
[  392.544034][T11400]  __warn+0xf6/0x3c0
[  392.547933][T11400]  ? preempt_schedule_notrace+0x62/0xe0
[  392.553494][T11400]  ? usb_submit_urb+0x157d/0x1990
[  392.558528][T11400]  report_bug+0x3c3/0x580
[  392.562865][T11400]  ? usb_submit_urb+0x157d/0x1990
[  392.567899][T11400]  handle_bug+0x184/0x210
[  392.572249][T11400]  exc_invalid_op+0x17/0x50
[  392.576774][T11400]  asm_exc_invalid_op+0x1a/0x20
[  392.581631][T11400] RIP: 0010:usb_submit_urb+0x157d/0x1990
[  392.587271][T11400] Code: e8 48 71 b0 fa 48 8b 7c 24 38 e8 1e 5c d3 fe 48 8b 54 24 30 45 89 e8 44 89 f9 48 89 c6 48 c7 c7 20 6d 51 8c e8 14 aa 6e fa 90 <0f> 0b 90 90 e9 ca ed ff ff e8 15 71 b0 fa 0f b6 2d 58 00 60 09 31
[  392.606889][T11400] RSP: 0018:ffffc9000cfe7970 EFLAGS: 00010282
[  392.612964][T11400] RAX: 0000000000000000 RBX: ffff88805e474200 RCX: ffffc9000c2dd000
[  392.620938][T11400] RDX: 0000000000080000 RSI: ffffffff817a9ef5 RDI: 0000000000000001
[  392.628910][T11400] RBP: ffff888055060058 R08: 0000000000000001 R09: 0000000000000000
[  392.636885][T11400] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888063281b20
[  392.644856][T11400] R13: 00000000000000c0 R14: 0000000000000001 R15: 0000000080001180
[  392.652867][T11400]  ? __warn_printk+0x1a5/0x350
[  392.657702][T11400]  ? __init_swait_queue_head+0xca/0x150
[  392.663292][T11400]  usb_start_wait_urb+0x104/0x4b0
[  392.668354][T11400]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  392.673957][T11400]  ? srso_alias_return_thunk+0x5/0xfbef5
[  392.679626][T11400]  ? __asan_memset+0x23/0x50
[  392.684245][T11400]  ? srso_alias_return_thunk+0x5/0xfbef5
[  392.689909][T11400]  usb_control_msg+0x326/0x4a0
[  392.694694][T11400]  ? __pfx_usb_control_msg+0x10/0x10
[  392.700011][T11400]  dib0700_ctrl_rd+0x1b2/0x350
[  392.704823][T11400]  dib0700_i2c_xfer+0xa9a/0xe40
[  392.709847][T11400]  __i2c_transfer+0x6b6/0x2190
[  392.714669][T11400]  ? lockdep_hardirqs_on+0x7c/0x110
[  392.719972][T11400]  ? __pfx___i2c_transfer+0x10/0x10
[  392.725207][T11400]  ? srso_alias_return_thunk+0x5/0xfbef5
[  392.730858][T11400]  ? rt_mutex_slowtrylock+0xc9/0x100
[  392.736206][T11400]  i2c_transfer+0x1da/0x380
[  392.740768][T11400]  i2cdev_ioctl_rdwr+0x373/0x710
[  392.745758][T11400]  i2cdev_ioctl+0x5ff/0x820
[  392.750292][T11400]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  392.755342][T11400]  ? srso_alias_return_thunk+0x5/0xfbef5
[  392.760999][T11400]  ? __fget_files+0x20e/0x3c0
[  392.765715][T11400]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  392.770766][T11400]  __x64_sys_ioctl+0x18e/0x210
[  392.775552][T11400]  do_syscall_64+0xcd/0xfa0
[  392.780070][T11400]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.785970][T11400] RIP: 0033:0x7fbdbc18eec9
[  392.790390][T11400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  392.810010][T11400] RSP: 002b:00007fbdbd04e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  392.818435][T11400] RAX: ffffffffffffffda RBX: 00007fbdbc3e5fa0 RCX: 00007fbdbc18eec9
[  392.826406][T11400] RDX: 00002000000001c0 RSI: 0000000000000707 RDI: 0000000000000004
[  392.834376][T11400] RBP: 00007fbdbc211f91 R08: 0000000000000000 R09: 0000000000000000
[  392.842348][T11400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  392.850320][T11400] R13: 00007fbdbc3e6038 R14: 00007fbdbc3e5fa0 R15: 00007ffdb8550b18
[  392.858319][T11400]  </TASK>
[  392.861564][T11400] Kernel Offset: disabled
[  392.865885][T11400] Rebooting in 86400 seconds..