last executing test programs:

793.7411ms ago: executing program 0 (id=4857):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, 0xffffffffffffffff, 0x0, 0x26}, 0x10)

770.623972ms ago: executing program 0 (id=4860):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0)

745.567104ms ago: executing program 0 (id=4863):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@broadcast, 0x3, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x10000000, 0x2}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x3c}, 0xa, @in6=@empty, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800, 0xfffffffc}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@loopback, 0x3503, 0x3, 0x2, 0x1, 0x6, 0x200, 0xffffffff}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x1, 0x1, 0x0, 0xabf, 0x1000000}]}]}, 0x17c}}, 0x4000)

687.69808ms ago: executing program 0 (id=4866):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)={0x2c, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0xc, 0x36, 0x0, 0x0, @u64}]}, 0x2c}], 0x1}, 0x0)

660.482882ms ago: executing program 0 (id=4872):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_ERSPAN_VER={0x5}]}}}]}, 0x44}}, 0x0)

613.423946ms ago: executing program 0 (id=4877):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3b, 0x0, 0x61, 0x8, "bafe5ef3", "aa4bce26"}}, 0x0}, 0x0)

266.268057ms ago: executing program 4 (id=4918):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x70, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x1}}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x3}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}, @IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x70}}, 0x0)

201.225373ms ago: executing program 1 (id=4922):
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x40480, 0x0)
fcntl$lock(r0, 0x25, &(0x7f00000025c0)={0x0, 0x0, 0x4, 0x7fffffffffffffff})

200.795523ms ago: executing program 4 (id=4923):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0xfffffffc, 0x10, {{@in=@broadcast, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0xffff, 0x2000, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x9, 0x8}, {0x1, 0x9, 0x80, 0x1000000}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}, [@tmpl={0xc4, 0x5, [{{@in=@loopback, 0x4d4, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, {{@in=@loopback, 0xfffffffc, 0x2b}, 0x0, @in6=@dev, 0x3504, 0x0, 0x0, 0x0, 0x800}, {{@in6=@mcast1, 0x0, 0x6c}, 0x0, @in=@private=0xa010101, 0x3504, 0x2, 0x0, 0x1, 0x0, 0xabf}]}]}, 0x17c}}, 0x0)

185.668304ms ago: executing program 2 (id=4924):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@gettaction={0x20, 0x32, 0xbd5139864f3acfa7, 0x70bd2a, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40050}, 0x20040054)

176.278835ms ago: executing program 4 (id=4925):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x200, 0x12, 0x60d, 0x200, 0x202, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0x190, 0x200, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xff, 0x400, 0x3, 0x1, 0x0, "2cf989436bf8c106c0cb147702c4fdc23bee4a8072466fa88f77f217356e64415760e8ec02b4fac890258e0f83c764c3a3950b81a56d01afcf3e00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400)

146.343567ms ago: executing program 1 (id=4927):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0)

145.963607ms ago: executing program 2 (id=4928):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x20, 0x30, 0xc, 0xfd, 0x2, 0x0, 0x1, 0x7c00}, [@RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x80)

139.647408ms ago: executing program 1 (id=4929):
r0 = syz_open_procfs(0x0, &(0x7f0000002400)='net/wireless\x00')
read$FUSE(r0, &(0x7f0000003f80)={0x2020}, 0x2020)

139.083608ms ago: executing program 3 (id=4930):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x4, 0x66, 0x0, 0x0, 0x132, 0x3})

119.55863ms ago: executing program 3 (id=4931):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r0, 0x4b67, 0x0)

101.306581ms ago: executing program 2 (id=4932):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xffe5, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0)

101.093331ms ago: executing program 4 (id=4933):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES8], 0x4c}}, 0x0)

100.980442ms ago: executing program 1 (id=4934):
r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff)
keyctl$unlink(0x9, r0, 0xffffffffffffffff)

98.507252ms ago: executing program 3 (id=4935):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCFLSH(r0, 0x540b, 0x2)

54.017796ms ago: executing program 4 (id=4936):
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b001600010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1)

53.870505ms ago: executing program 2 (id=4937):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newlink={0x3c, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x40101}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3, 0x80}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x24000890)

53.782976ms ago: executing program 1 (id=4938):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000140)=0x7c7, 0x4)

53.675776ms ago: executing program 3 (id=4939):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @private0, 0x20}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@loopback]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x80000000}}], 0x40}, 0x0)

40.995807ms ago: executing program 1 (id=4940):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x9, 0xbaf, &(0x7f0000002f00)="$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")
quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000300)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

40.585737ms ago: executing program 3 (id=4941):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
read$FUSE(r0, 0x0, 0x0)

23.372438ms ago: executing program 4 (id=4942):
syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f00000105c0)='./file0\x00', 0x9, &(0x7f0000000040)={[{@atgc}, {@alloc_mode_reuse}, {@fsync_mode_strict}]}, 0x1, 0x10566, &(0x7f0000010640)="$eJzs3E9rI2UcB/Bf2v3vuhbxICg4oEIrJmza7qK37tpFXLZLUffgSdMkDdlNMqVJ27gnwYsH38CCr8S7L0b0JIgXQck8U936B9SUxt1+PjD9zjx55je/Kb08kzQBnFoL2Y8/VOJKXIyI+Yi4HFHsV8qtsJbixYh4JSLmHtsq5fhvA+ci4lJEXJkUTzUr5UtvrJ+7ffvRzZ++eHTn6+/GL782u7sGZu31iOjvpP2Dfsq8k/J+Od7Y7xbZX90vM73Qf1Ae5ykP2ltFhYPG4bxGkSudND/f2RtOcrvXaE6y090uxncG6YLD/c5hneKE+43d4rjV3iqyO8yL7DxMfY3LfDgcpTqtst6nRfkYjQ4zjbfH7XQ/Ow+KbA5G5Xiqm7fa40nul1leLpp5r1X0sfWff83/e3e6g71xtt/eHXbzQXatVn+rVr9ere/mrfaovVpt9FvXV7PFTm8yrTpqN/prnTzv9Nq1Zt5fyhY7zWa1Xs8W19tb3cYgq9drK7Wr1WtL5d6b2bt372W9VrY4yZvdwd6o2xtm2/luls5YypZrK28vZa/Wsw82NrPN92/d2tj88OP1j+7e2HjvnXLSn9rKFpevLi9X61ery/Ul9z+VtSnP53SrzLoBgCeP9T8wC9b/1v9h/Xvq79/yjan4AwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOLXufXvjpWJnIR0/U44/Ww49Xx5XImIuIn75C/Nx7kjN+bLO2b+Zf/YPPXxTiaLC5Brny+1SRKyV28/PpdcAAACAf+/MV59/llbr6cfCrBviJKWHNnOXPzmmepWIOLvw/TFUifJhU7wwfVe/VzsT4ymrHPZWPMC6MH1XSfHI7cxxVftH5o/EhceikmLuRNsBAABOxNGVwMmuQgAAADhJX866AWajeDez/Cx++QH+8ynKNwQvHjkCAAAAnkD+pR4AAACefsX63/f/AQAAwNMtff8fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/snM3K8lEYRzAH79efd+3SKKdF2Mu3ds+vIKWLYNuI7ybLkboEkLDOSdowqA440jy+8F4PKP8fQbcPGc+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7pZj2b9J8eH0pzNtsyzRwNAAAAsM9iPZtUb8Zp/j/vP8+7LvO8ExHdiNjXu/fiTy2zl3MGX3x/8KmG54gqYfcbw7z9i4jrvL1epM8AAACAn1uupvPUraeX8bELok1p0aZ7dttQXiciBuOXBlIiLzbFVXlVye7/3Y/7wpT32qoFrFF5VUm15NZvKu1berVh9GHopKHbajkAAEAr6p1Au10IAAAAbbo7dgEcR3U2M1+Lny/gH6YhnxD8W5sBAAAAv5Bb6gEAAOD0Vf2/5/8BAADAaUvP/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCQFuvZZLmazktzNtsyzRwNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvLE/7ygQAmEQBnvXdyZz/8NKg6amJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxc7987ZRhgEAf8//SkGIw0geyAJigAHqGncwo6WysIVvEKVuiXAxaiPUVmXI2IEFxkqojKz0E/AFugEeunbI4KEI5qL3fOdcQxQCSHdu8vtJz71PTtbd816kKM+9bwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBhMT7Im/GQLvNGfu63p3e34zg/NEazJ/M0RsyTKot+ASW9uisAAADgLGgW/X0IYXN/vBHHRpr1/+3iM7Hnf/DqMi/6+cN9fzFefnw/LWLWvfXr6kbp8j7xold3ppOLlc1w/b32j59oZU8+e/fSzL4hjU/23li0s+eZfPPo0cedLD1XRbUAwH9xoRjzpPh9KI6DOgsD4Mxo5RFK/X8zrbcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCos9sIrRZ6EEN5sHeTR/Ond7aPGy4/vp0X88vPb98rXjJdohxCu7kwnFyucy7q7efvO51vT6eSGRCKRrJK6fzIBAHDatPOIff3m/ngjnku6ITz74fn+/91SHk7Y/3/9YPxT+V7l/n9Q2QzXX3/3+pf9m7fvfLBzfeva5Nrki8Ho0ujScPTRcNTP3pX0vTEBAADg/+nkUe7/G92/r/+/XMrDCfv/1r1nP5bv1dT/H+lg0a/uSgAAAM6219/68/fkiPNJpxNube3u3hgsj6uvP1weayj1XzuXR7n/b3brrgoAAACowmIveW79/0opD8es/8+ezNMiHn42bJev2QwhnM/X/y9sz6ZXqpvOWqviz4nrniMAAAD1Op9Hef2/ne3/b6y2PDRCCO+9s8zzfwN47P7/2PvH8Y/Nb78q36u8/39Y3RTXUqO3fB7Z2Auh1au7IgAAAE6zl/KIzf6n++ONh9+//13H/n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgL/bn3jZhIIzj8OtLosRtMkJ6K4EZaKgQjMCHhGTJMzAAC9FQ0VosAiuABOeazlA8T/P/FVfcCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAy7s8fPEWEUWkLlOk8ebn9B4RH5G2bTv6vGWxOx+br3vO9odJzu+Y/pYRUUbRxzkAAL2rus2xWtfLv7z/eQd5h3mreVMvnvlpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALiyAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgWAAAAABDmb51GxwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjBQAA///8lVIP")
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)

14.81637ms ago: executing program 2 (id=4943):
r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
copy_file_range(r0, 0x0, r0, &(0x7f0000000140), 0x0, 0x2)

623.351µs ago: executing program 3 (id=4944):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)={0x14, 0x20, 0x1, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0)

0s ago: executing program 2 (id=4945):
unshare(0x22020600)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={0x0}, 0x18)

kernel console output (not intermixed with test programs):

escriptor too short
[  131.754835][   T15] usb 1-1: config 1 has an invalid descriptor of length 36, skipping remainder of the config
[  131.808310][ T1356] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  131.815921][   T20] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  131.825043][   T20] usb 3-1: config 1 has no interface number 1
[  131.850952][   T15] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  131.860168][   T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  131.865212][ T5308] usb 5-1: USB disconnect, device number 40
[  131.868792][   T15] usb 1-1: SerialNumber: syz
[  131.915404][   T15] cdc_acm 1-1:1.0: invalid descriptor buffer length
[  131.922078][   T15] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[  131.929911][   T15] cdc_acm 1-1:1.0: This needs exactly 3 endpoints
[  131.936407][   T15] cdc_acm: probe of 1-1:1.0 failed with error -22
[  131.947099][ T1000] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  132.032682][   T20] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  132.041795][   T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.049865][   T20] usb 3-1: Product: syz
[  132.054085][   T20] usb 3-1: Manufacturer: syz
[  132.058819][   T20] usb 3-1: SerialNumber: syz
[  132.064631][ T1356] usb 2-1: Using ep0 maxpacket: 32
[  132.137746][   T15] usb 1-1: USB disconnect, device number 39
[  132.224903][ T1000] usb 4-1: Using ep0 maxpacket: 8
[  132.235625][ T1356] usb 2-1: unable to get BOS descriptor or descriptor too short
[  132.321191][ T1356] usb 2-1: config 128 has an invalid interface number: 127 but max is 3
[  132.329636][ T1356] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  132.340233][ T1356] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4
[  132.349350][ T1356] usb 2-1: config 128 has no interface number 0
[  132.356202][ T1356] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  132.366756][ T1356] usb 2-1: config 128 interface 127 has no altsetting 0
[  132.374686][ T1000] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[  132.382865][ T1000] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  132.393006][ T1000] usb 4-1: config 0 has no interface number 0
[  132.438753][   T20] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc
[  132.461967][   T20] usb 3-1: USB disconnect, device number 38
[  132.471242][  T371] udevd[371]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  132.534940][ T1356] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  132.548481][ T1356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.556873][ T1356] usb 2-1: Product: syz
[  132.561025][ T1356] usb 2-1: Manufacturer: syz
[  132.565586][ T1356] usb 2-1: SerialNumber: syz
[  132.599061][ T1000] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  132.608157][ T1000] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.616184][ T1000] usb 4-1: Product: syz
[  132.620384][ T1000] usb 4-1: Manufacturer: syz
[  132.624975][ T1000] usb 4-1: SerialNumber: syz
[  132.630014][ T1000] usb 4-1: config 0 descriptor??
[  132.674542][ T1000] uvcvideo: Found UVC 0.04 device syz (046d:08c3)
[  132.680992][ T1000] uvcvideo: No valid video chain found.
[  132.844866][   T15] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  132.866178][    C1] Adjusting tsc more than 11% (6179561 vs 8464106)
[  132.895945][   T53] usb 4-1: USB disconnect, device number 39
[  133.015243][ T1356] usb 2-1: USB disconnect, device number 43
[  133.051326][   T20] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  133.162371][   T15] usb 5-1: Using ep0 maxpacket: 8
[  133.187064][   T25] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  133.322879][   T15] usb 5-1: config 0 has an invalid interface number: 31 but max is 0
[  133.331017][   T15] usb 5-1: config 0 has no interface number 0
[  133.483257][   T25] usb 3-1: Using ep0 maxpacket: 8
[  133.495664][   T20] usb 1-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x98, skipping
[  133.506485][   T20] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  133.529470][   T20] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  133.532623][   T15] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  133.539078][   T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.557229][   T15] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.577611][   T15] usb 5-1: Product: syz
[  133.581804][   T15] usb 5-1: Manufacturer: syz
[  133.594186][   T15] usb 5-1: SerialNumber: syz
[  133.599545][   T15] usb 5-1: config 0 descriptor??
[  133.619983][   T20] snd-usb-audio: probe of 1-1:27.0 failed with error -2
[  133.693023][   T25] usb 3-1: unable to get BOS descriptor or descriptor too short
[  133.792514][ T6035] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e02c, mo2=0000]
[  133.800288][ T6035] System zones: 0-2, 18-18, 34-34
[  133.806216][ T6035] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.2556: couldn't read orphan inode 16 (err -116)
[  133.816473][   T25] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 16
[  133.818173][ T6035] EXT4-fs (loop3): Remounting filesystem read-only
[  133.834611][ T6035] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,
[  133.834751][   T25] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x3 has invalid maxpacket 1023
[  133.843742][ T6035] ext4 filesystem being mounted at /549/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.858087][   T25] usb 3-1: config 1 interface 0 has no altsetting 0
[  133.881409][ T1000] usb 1-1: USB disconnect, device number 40
[  133.918887][ T6011] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (9621037545273099749, 9621037545261368549)
[  133.937926][ T6011] F2FS-fs (loop1): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [3439329283, 3] run fsck to fix.
[  133.950064][ T6011] F2FS-fs (loop1): Failed to read root inode
[  133.961771][ T6044] cgroup: subsys name conflicts with all
[  133.989173][   T15] uvcvideo: Found UVC 0.04 device syz (046d:08c3)
[  133.995621][   T15] uvcvideo: No streaming interface found for terminal 6.
[  133.995639][   T15] uvcvideo: Failed to create links for entity 5
[  134.009404][   T15] uvcvideo: Failed to register entities (-22).
[  134.018337][   T15] usb 5-1: USB disconnect, device number 41
[  134.075600][   T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  134.084922][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.093322][   T25] usb 3-1: Product: syz
[  134.099433][   T25] usb 3-1: Manufacturer: 󅹺
[  134.107051][   T25] usb 3-1: SerialNumber: syz
[  134.147311][ T6009] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  134.156002][ T6009] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  134.293145][ T6066] Quota error (device loop3): v2_read_file_info: Can't read info structure
[  134.301953][ T6066] EXT4-fs warning (device loop3): ext4_enable_quotas:6490: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix.
[  134.317017][ T6066] EXT4-fs (loop3): mount failed
[  134.518458][ T6077]  loop3: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215
[  134.518557][ T6077] loop3: p1 size 1342439424 extends beyond EOD, 
[  134.527540][   T25] cdc_ether: probe of 3-1:1.0 failed with error -71
[  134.611487][ T6077] truncated
[  134.622211][ T6077] loop3: p3 start 67166720 is beyond EOD, truncated
[  134.631247][ T6077] loop3: p5 size 1342439424 extends beyond EOD, truncated
[  134.642528][ T6077] loop3: p6 size 1342439424 extends beyond EOD, truncated
[  134.650599][ T6077] loop3: p7 size 1342439424 extends beyond EOD, truncated
[  134.658622][ T6077] loop3: p8 size 1342439424 extends beyond EOD, truncated
[  134.666341][ T6077] loop3: p9 size 1342439424 extends beyond EOD, truncated
[  134.674041][ T6077] loop3: p10 size 1342439424 extends beyond EOD, truncated
[  134.682935][ T6077] loop3: p11 size 1342439424 extends beyond EOD, truncated
[  134.694616][ T6077] loop3: p12 size 1342439424 extends beyond EOD, truncated
[  134.702490][ T6077] loop3: p13 size 1342439424 extends beyond EOD, truncated
[  134.710322][ T6077] loop3: p14 size 1342439424 extends beyond EOD, truncated
[  134.722342][ T6077] loop3: p15 size 1342439424 extends beyond EOD, truncated
[  134.733730][ T6077] loop3: p16 size 1342439424 extends beyond EOD, truncated
[  134.742278][ T6077] loop3: p17 size 1342439424 extends beyond EOD, truncated
[  134.745534][   T25] usb 3-1: USB disconnect, device number 39
[  134.750316][ T6077] loop3: p18 size 1342439424 extends beyond EOD, truncated
[  134.763418][ T6077] loop3: p19 size 1342439424 extends beyond EOD, truncated
[  134.771788][ T6077] loop3: p20 size 1342439424 extends beyond EOD, truncated
[  134.779779][ T6077] loop3: p21 size 1342439424 extends beyond EOD, truncated
[  134.789656][ T6077] loop3: p22 size 1342439424 extends beyond EOD, truncated
[  134.799822][ T6077] loop3: p23 size 1342439424 extends beyond EOD, truncated
[  134.807733][ T6077] loop3: p24 size 1342439424 extends beyond EOD, truncated
[  134.815696][ T6077] loop3: p25 size 1342439424 extends beyond EOD, truncated
[  134.823263][ T6077] loop3: p26 size 1342439424 extends beyond EOD, truncated
[  134.830909][ T6077] loop3: p27 size 1342439424 extends beyond EOD, truncated
[  134.837404][ T6100] EXT4-fs (loop4): Ignoring removed nobh option
[  134.844999][ T6077] loop3: p28 size 1342439424 extends beyond EOD, truncated
[  134.852778][ T6077] loop3: p29 size 1342439424 extends beyond EOD, truncated
[  134.865230][ T6077] loop3: p30 size 1342439424 extends beyond EOD, truncated
[  134.872586][ T6100] fscrypt (loop4, inode 2): Error -61 getting encryption context
[  134.880370][ T6100] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61
[  134.888829][ T6077] loop3: p31 size 1342439424 extends beyond EOD, truncated
[  134.889005][ T6100] EXT4-fs error (device loop4): ext4_orphan_get:1395: inode #13: comm syz.4.2583: inode has both inline data and extents flags
[  134.906598][ T6077] loop3: p32 size 1342439424 extends beyond EOD, 
[  134.909407][ T6100] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.2583: couldn't read orphan inode 13 (err -117)
[  134.909671][ T6077] truncated
[  134.916070][ T6100] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue
[  134.929077][ T6077] loop3: p33 size 1342439424 extends beyond EOD, 
[  134.950054][ T5308] usb 2-1: new full-speed USB device number 44 using dummy_hcd
[  134.955225][ T6077] truncated
[  134.969230][ T6077] loop3: p34 size 1342439424 extends beyond EOD, truncated
[  134.976826][ T6077] loop3: p35 size 1342439424 extends beyond EOD, truncated
[  134.984499][ T6077] loop3: p36 size 1342439424 extends beyond EOD, truncated
[  134.994856][ T6077] loop3: p37 size 1342439424 extends beyond EOD, truncated
[  135.003232][ T6077] loop3: p38 size 1342439424 extends beyond EOD, truncated
[  135.011093][ T6077] loop3: p39 size 1342439424 extends beyond EOD, truncated
[  135.020226][ T6077] loop3: p40 size 1342439424 extends beyond EOD, truncated
[  135.034604][ T6077] loop3: p41 size 1342439424 extends beyond EOD, truncated
[  135.043379][ T6077] loop3: p42 size 1342439424 extends beyond EOD, truncated
[  135.051180][ T6077] loop3: p43 size 1342439424 extends beyond EOD, truncated
[  135.058898][ T6077] loop3: p44 size 1342439424 extends beyond EOD, truncated
[  135.066804][ T6077] loop3: p45 size 1342439424 extends beyond EOD, truncated
[  135.074670][ T6077] loop3: p46 size 1342439424 extends beyond EOD, truncated
[  135.082321][ T6077] loop3: p47 size 1342439424 extends beyond EOD, truncated
[  135.089955][   T20] usb 1-1: new full-speed USB device number 41 using dummy_hcd
[  135.098454][ T6077] loop3: p48 size 1342439424 extends beyond EOD, truncated
[  135.106285][ T6077] loop3: p49 size 1342439424 extends beyond EOD, truncated
[  135.114322][ T6077] loop3: p50 size 1342439424 extends beyond EOD, truncated
[  135.123296][ T6077] loop3: p51 size 1342439424 extends beyond EOD, truncated
[  135.131529][ T6077] loop3: p52 size 1342439424 extends beyond EOD, truncated
[  135.139304][ T6077] loop3: p53 size 1342439424 extends beyond EOD, truncated
[  135.147520][ T6077] loop3: p54 size 1342439424 extends beyond EOD, truncated
[  135.148712][ T6116] IPv6: addrconf: prefix option has invalid lifetime
[  135.155269][ T6077] loop3: p55 size 1342439424 extends beyond EOD, truncated
[  135.180235][ T6077] loop3: p56 size 1342439424 extends beyond EOD, truncated
[  135.188191][ T6077] loop3: p57 size 1342439424 extends beyond EOD, truncated
[  135.195980][ T6077] loop3: p58 size 1342439424 extends beyond EOD, truncated
[  135.203578][ T6077] loop3: p59 size 1342439424 extends beyond EOD, truncated
[  135.211439][ T6077] loop3: p60 size 1342439424 extends beyond EOD, truncated
[  135.219688][ T6077] loop3: p61 size 1342439424 extends beyond EOD, truncated
[  135.227403][ T6077] loop3: p62 size 1342439424 extends beyond EOD, truncated
[  135.235388][ T6077] loop3: p63 size 1342439424 extends beyond EOD, truncated
[  135.242911][ T6120]  loop4: p3 < > p4 < >
[  135.243603][ T6077] loop3: p64 size 1342439424 extends beyond EOD, truncated
[  135.247207][ T6120] loop4: partition table partially beyond EOD, truncated
[  135.255338][ T6077] loop3: p65 size 1342439424 extends beyond EOD, 
[  135.261950][ T6120] loop4: p3 start 4284289 is beyond EOD, 
[  135.262288][ T6077] truncated
[  135.268455][ T6120] truncated
[  135.277694][ T6077] loop3: p66 size 1342439424 extends beyond EOD, truncated
[  135.288048][ T6077] loop3: p67 size 1342439424 extends beyond EOD, truncated
[  135.299143][ T6077] loop3: p68 size 1342439424 extends beyond EOD, truncated
[  135.307036][ T6077] loop3: p69 size 1342439424 extends beyond EOD, truncated
[  135.315075][ T6077] loop3: p70 size 1342439424 extends beyond EOD, truncated
[  135.323047][ T6077] loop3: p71 size 1342439424 extends beyond EOD, truncated
[  135.330654][ T6077] loop3: p72 size 1342439424 extends beyond EOD, truncated
[  135.338442][ T6077] loop3: p73 size 1342439424 extends beyond EOD, truncated
[  135.346232][ T6077] loop3: p74 size 1342439424 extends beyond EOD, truncated
[  135.353871][ T6077] loop3: p75 size 1342439424 extends beyond EOD, truncated
[  135.361705][ T6077] loop3: p76 size 1342439424 extends beyond EOD, truncated
[  135.369379][ T6077] loop3: p77 size 1342439424 extends beyond EOD, truncated
[  135.377002][ T6077] loop3: p78 size 1342439424 extends beyond EOD, truncated
[  135.384776][ T6077] loop3: p79 size 1342439424 extends beyond EOD, truncated
[  135.392457][ T6077] loop3: p80 size 1342439424 extends beyond EOD, truncated
[  135.400026][ T6077] loop3: p81 size 1342439424 extends beyond EOD, truncated
[  135.407930][ T6077] loop3: p82 size 1342439424 extends beyond EOD, truncated
[  135.411519][  T371] udevd[371]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  135.427595][ T6077] loop3: p83 size 1342439424 extends beyond EOD, truncated
[  135.435553][ T6077] loop3: p84 size 1342439424 extends beyond EOD, truncated
[  135.449120][ T6077] loop3: p85 size 1342439424 extends beyond EOD, truncated
[  135.461619][ T6077] loop3: p86 size 1342439424 extends beyond EOD, truncated
[  135.473838][ T6077] loop3: p87 size 1342439424 extends beyond EOD, truncated
[  135.481662][ T6077] loop3: p88 size 1342439424 extends beyond EOD, truncated
[  135.484177][   T25] usb 3-1: new low-speed USB device number 40 using dummy_hcd
[  135.489811][ T6077] loop3: p89 size 1342439424 extends beyond EOD, truncated
[  135.508997][ T6077] loop3: p90 size 1342439424 extends beyond EOD, truncated
[  135.519511][ T6077] loop3: p91 size 1342439424 extends beyond EOD, truncated
[  135.527267][ T6077] loop3: p92 size 1342439424 extends beyond EOD, truncated
[  135.535245][ T6077] loop3: p93 size 1342439424 extends beyond EOD, truncated
[  135.543119][ T6077] loop3: p94 size 1342439424 extends beyond EOD, truncated
[  135.550718][ T6077] loop3: p95 size 1342439424 extends beyond EOD, truncated
[  135.558321][ T6077] loop3: p96 size 1342439424 extends beyond EOD, truncated
[  135.565204][ T5308] usb 2-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23
[  135.566158][ T6077] loop3: p97 size 1342439424 extends beyond EOD, truncated
[  135.574825][ T5308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.582295][ T6077] loop3: p98 size 1342439424 extends beyond EOD, truncated
[  135.590014][   T20] usb 1-1: unable to get BOS descriptor or descriptor too short
[  135.597522][ T6077] loop3: p99 size 1342439424 extends beyond EOD, 
[  135.604912][ T5308] usb 2-1: Product: syz
[  135.604917][ T6077] truncated
[  135.605314][ T6077] loop3: p100 size 1342439424 extends beyond EOD, 
[  135.618816][ T5308] usb 2-1: Manufacturer: syz
[  135.618961][ T6077] truncated
[  135.625348][ T5308] usb 2-1: SerialNumber: syz
[  135.630865][ T6077] loop3: p101 size 1342439424 extends beyond EOD, 
[  135.636727][ T5308] usb 2-1: config 0 descriptor??
[  135.637772][ T6077] truncated
[  135.652600][ T6077] loop3: p102 size 1342439424 extends beyond EOD, truncated
[  135.657531][   T20] usb 1-1: not running at top speed; connect to a high speed hub
[  135.660594][ T6077] loop3: p103 size 1342439424 extends beyond EOD, truncated
[  135.675263][ T6077] loop3: p104 size 1342439424 extends beyond EOD, truncated
[  135.681282][ T5308] ftdi_sio 2-1:0.0: Ignoring interface reserved for JTAG
[  135.689996][ T6077] loop3: p105 size 1342439424 extends beyond EOD, truncated
[  135.697873][ T6077] loop3: p106 size 1342439424 extends beyond EOD, truncated
[  135.705599][ T6077] loop3: p107 size 1342439424 extends beyond EOD, truncated
[  135.713233][ T6077] loop3: p108 size 1342439424 extends beyond EOD, truncated
[  135.720977][ T6077] loop3: p109 size 1342439424 extends beyond EOD, truncated
[  135.728879][ T6077] loop3: p110 size 1342439424 extends beyond EOD, truncated
[  135.736512][ T6077] loop3: p111 size 1342439424 extends beyond EOD, truncated
[  135.744251][ T6077] loop3: p112 size 1342439424 extends beyond EOD, truncated
[  135.750146][   T20] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  135.761894][ T6077] loop3: p113 size 1342439424 extends beyond EOD, truncated
[  135.762045][   T20] usb 1-1: config 5 has 1 interface, different from the descriptor's value: 2
[  135.769679][ T6077] loop3: p114 size 1342439424 extends beyond EOD, truncated
[  135.785923][ T6077] loop3: p115 size 1342439424 extends beyond EOD, truncated
[  135.793557][ T6077] loop3: p116 size 1342439424 extends beyond EOD, truncated
[  135.801293][ T6077] loop3: p117 size 1342439424 extends beyond EOD, truncated
[  135.809001][ T6077] loop3: p118 size 1342439424 extends beyond EOD, truncated
[  135.816798][ T6077] loop3: p119 size 1342439424 extends beyond EOD, truncated
[  135.824712][ T6077] loop3: p120 size 1342439424 extends beyond EOD, truncated
[  135.830928][ T1356] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  135.832744][ T6077] loop3: p121 size 1342439424 extends beyond EOD, truncated
[  135.847404][ T6077] loop3: p122 size 1342439424 extends beyond EOD, truncated
[  135.855201][ T6077] loop3: p123 size 1342439424 extends beyond EOD, truncated
[  135.863093][ T6077] loop3: p124 size 1342439424 extends beyond EOD, truncated
[  135.870867][ T6077] loop3: p125 size 1342439424 extends beyond EOD, truncated
[  135.878708][ T6077] loop3: p126 size 1342439424 extends beyond EOD, truncated
[  135.886355][ T6077] loop3: p127 size 1342439424 extends beyond EOD, truncated
[  135.894349][ T6077] loop3: p128 size 1342439424 extends beyond EOD, truncated
[  135.902129][ T6077] loop3: p129 size 1342439424 extends beyond EOD, truncated
[  135.909824][ T6077] loop3: p130 size 1342439424 extends beyond EOD, truncated
[  135.921674][ T6077] loop3: p131 size 1342439424 extends beyond EOD, truncated
[  135.929931][ T6077] loop3: p132 size 1342439424 extends beyond EOD, truncated
[  135.938136][ T6077] loop3: p133 size 1342439424 extends beyond EOD, truncated
[  135.939730][   T53] usb 2-1: USB disconnect, device number 44
[  135.946116][ T6077] loop3: p134 size 1342439424 extends beyond EOD, truncated
[  135.960422][ T6077] loop3: p135 size 1342439424 extends beyond EOD, truncated
[  135.968120][ T6077] loop3: p136 size 1342439424 extends beyond EOD, truncated
[  135.975560][   T25] usb 3-1: unable to get BOS descriptor or descriptor too short
[  135.976244][ T6077] loop3: p137 size 1342439424 extends beyond EOD, truncated
[  135.983295][   T20] usb 1-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70
[  135.991215][ T6077] loop3: p138 size 1342439424 extends beyond EOD, truncated
[  135.999750][   T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.007974][ T6077] loop3: p139 size 1342439424 extends beyond EOD, truncated
[  136.015296][   T20] usb 1-1: Product: syz
[  136.023422][ T6077] loop3: p140 size 1342439424 extends beyond EOD, truncated
[  136.026809][   T20] usb 1-1: Manufacturer: syz
[  136.034920][ T6077] loop3: p141 size 1342439424 extends beyond EOD, truncated
[  136.038661][   T20] usb 1-1: SerialNumber: syz
[  136.046713][ T6077] loop3: p142 size 1342439424 extends beyond EOD, truncated
[  136.058739][ T6077] loop3: p143 size 1342439424 extends beyond EOD, truncated
[  136.066428][ T6077] loop3: p144 size 1342439424 extends beyond EOD, truncated
[  136.074255][ T6077] loop3: p145 size 1342439424 extends beyond EOD, truncated
[  136.081939][ T6077] loop3: p146 size 1342439424 extends beyond EOD, truncated
[  136.089675][ T6077] loop3: p147 size 1342439424 extends beyond EOD, truncated
[  136.097129][   T25] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 16, setting to 8
[  136.097948][ T6077] loop3: p148 size 1342439424 extends beyond EOD, 
[  136.107721][   T25] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x82 is Bulk; changing to Interrupt
[  136.107735][   T25] usb 3-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  136.107751][   T25] usb 3-1: config 1 interface 0 has no altsetting 0
[  136.114641][ T6077] truncated
[  136.131420][ T1356] usb 5-1: Using ep0 maxpacket: 16
[  136.137821][ T6077] loop3: p149 size 1342439424 extends beyond EOD, truncated
[  136.159647][ T6077] loop3: p150 size 1342439424 extends beyond EOD, truncated
[  136.167474][ T6077] loop3: p151 size 1342439424 extends beyond EOD, truncated
[  136.175125][ T6077] loop3: p152 size 1342439424 extends beyond EOD, truncated
[  136.183163][ T6077] loop3: p153 size 1342439424 extends beyond EOD, truncated
[  136.191438][ T6077] loop3: p154 size 1342439424 extends beyond EOD, truncated
[  136.199115][ T6077] loop3: p155 size 1342439424 extends beyond EOD, truncated
[  136.207003][ T6077] loop3: p156 size 1342439424 extends beyond EOD, truncated
[  136.215053][ T6077] loop3: p157 size 1342439424 extends beyond EOD, truncated
[  136.222986][ T6077] loop3: p158 size 1342439424 extends beyond EOD, truncated
[  136.230743][ T6077] loop3: p159 size 1342439424 extends beyond EOD, truncated
[  136.238459][ T6077] loop3: p160 size 1342439424 extends beyond EOD, truncated
[  136.246135][ T6077] loop3: p161 size 1342439424 extends beyond EOD, truncated
[  136.253854][ T6077] loop3: p162 size 1342439424 extends beyond EOD, truncated
[  136.261577][ T6077] loop3: p163 size 1342439424 extends beyond EOD, truncated
[  136.269227][ T6077] loop3: p164 size 1342439424 extends beyond EOD, truncated
[  136.277006][ T6077] loop3: p165 size 1342439424 extends beyond EOD, truncated
[  136.281808][ T1356] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  136.295438][ T6077] loop3: p166 size 1342439424 extends beyond EOD, truncated
[  136.295951][ T1356] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  136.303209][ T6077] loop3: p167 size 1342439424 extends beyond EOD, truncated
[  136.320318][ T6077] loop3: p168 size 1342439424 extends beyond EOD, truncated
[  136.328076][ T6077] loop3: p169 size 1342439424 extends beyond EOD, truncated
[  136.335823][ T6077] loop3: p170 size 1342439424 extends beyond EOD, truncated
[  136.343619][ T6077] loop3: p171 size 1342439424 extends beyond EOD, truncated
[  136.351396][ T6077] loop3: p172 size 1342439424 extends beyond EOD, truncated
[  136.359168][ T6077] loop3: p173 size 1342439424 extends beyond EOD, truncated
[  136.367120][ T6077] loop3: p174 size 1342439424 extends beyond EOD, truncated
[  136.374884][ T6077] loop3: p175 size 1342439424 extends beyond EOD, truncated
[  136.382553][ T6077] loop3: p176 size 1342439424 extends beyond EOD, truncated
[  136.390400][ T6077] loop3: p177 size 1342439424 extends beyond EOD, truncated
[  136.400186][   T20] usb 1-1: USB disconnect, device number 41
[  136.403778][ T6077] loop3: p178 size 1342439424 extends beyond EOD, truncated
[  136.408928][   T25] usb 3-1: string descriptor 0 read error: -22
[  136.414184][ T6077] loop3: p179 size 1342439424 extends beyond EOD, truncated
[  136.420531][   T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  136.427490][ T6077] loop3: p180 size 1342439424 extends beyond EOD, truncated
[  136.436093][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.443879][ T6077] loop3: p181 size 1342439424 extends beyond EOD, truncated
[  136.459054][ T6077] loop3: p182 size 1342439424 extends beyond EOD, truncated
[  136.466843][ T6077] loop3: p183 size 1342439424 extends beyond EOD, truncated
[  136.474464][ T6077] loop3: p184 size 1342439424 extends beyond EOD, truncated
[  136.477435][ T6118] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  136.488997][ T6118] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  136.496092][ T6118] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  136.496194][ T6077] loop3: p185 size 1342439424 extends beyond EOD, 
[  136.503277][ T1356] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  136.511379][ T6077] truncated
[  136.519048][ T1356] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.530550][   T25] cdc_ether: probe of 3-1:1.0 failed with error -22
[  136.537450][ T6077] loop3: p186 size 1342439424 extends beyond EOD, truncated
[  136.539972][ T1356] usb 5-1: Product: syz
[  136.549168][ T1356] usb 5-1: Manufacturer: syz
[  136.553778][ T1356] usb 5-1: SerialNumber: syz
[  136.557347][ T6077] loop3: p187 size 1342439424 extends beyond EOD, truncated
[  136.566168][ T6077] loop3: p188 size 1342439424 extends beyond EOD, truncated
[  136.575418][ T6077] loop3: p189 size 1342439424 extends beyond EOD, truncated
[  136.587528][ T6077] loop3: p190 size 1342439424 extends beyond EOD, truncated
[  136.597333][ T6077] loop3: p191 size 1342439424 extends beyond EOD, truncated
[  136.605120][ T6077] loop3: p192 size 1342439424 extends beyond EOD, truncated
[  136.612794][ T6077] loop3: p193 size 1342439424 extends beyond EOD, truncated
[  136.620727][ T6077] loop3: p194 size 1342439424 extends beyond EOD, truncated
[  136.628564][ T6077] loop3: p195 size 1342439424 extends beyond EOD, truncated
[  136.636398][ T6077] loop3: p196 size 1342439424 extends beyond EOD, truncated
[  136.644055][ T6077] loop3: p197 size 1342439424 extends beyond EOD, truncated
[  136.651866][ T6077] loop3: p198 size 1342439424 extends beyond EOD, truncated
[  136.659634][ T6077] loop3: p199 size 1342439424 extends beyond EOD, truncated
[  136.667289][ T6077] loop3: p200 size 1342439424 extends beyond EOD, truncated
[  136.675106][ T6077] loop3: p201 size 1342439424 extends beyond EOD, truncated
[  136.682811][ T6077] loop3: p202 size 1342439424 extends beyond EOD, truncated
[  136.690438][ T6077] loop3: p203 size 1342439424 extends beyond EOD, truncated
[  136.698189][ T6077] loop3: p204 size 1342439424 extends beyond EOD, truncated
[  136.705997][ T6077] loop3: p205 size 1342439424 extends beyond EOD, truncated
[  136.713805][ T6077] loop3: p206 size 1342439424 extends beyond EOD, truncated
[  136.721579][ T6077] loop3: p207 size 1342439424 extends beyond EOD, truncated
[  136.729501][ T6077] loop3: p208 size 1342439424 extends beyond EOD, truncated
[  136.737208][ T6077] loop3: p209 size 1342439424 extends beyond EOD, truncated
[  136.745137][ T6077] loop3: p210 size 1342439424 extends beyond EOD, truncated
[  136.752998][ T6077] loop3: p211 size 1342439424 extends beyond EOD, truncated
[  136.761152][ T6077] loop3: p212 size 1342439424 extends beyond EOD, truncated
[  136.769273][ T6077] loop3: p213 size 1342439424 extends beyond EOD, truncated
[  136.777526][ T6077] loop3: p214 size 1342439424 extends beyond EOD, truncated
[  136.785948][ T6077] loop3: p215 size 1342439424 extends beyond EOD, truncated
[  136.794404][ T6077] loop3: p216 size 1342439424 extends beyond EOD, truncated
[  136.802740][ T6077] loop3: p217 size 1342439424 extends beyond EOD, truncated
[  136.807029][ T1000] usb 3-1: USB disconnect, device number 40
[  136.811364][ T6077] loop3: p218 size 1342439424 extends beyond EOD, truncated
[  136.823906][ T6077] loop3: p219 size 1342439424 extends beyond EOD, truncated
[  136.831769][ T6077] loop3: p220 size 1342439424 extends beyond EOD, truncated
[  136.839406][ T6077] loop3: p221 size 1342439424 extends beyond EOD, truncated
[  136.847280][ T6077] loop3: p222 size 1342439424 extends beyond EOD, truncated
[  136.855343][ T6077] loop3: p223 size 1342439424 extends beyond EOD, truncated
[  136.863150][ T6077] loop3: p224 size 1342439424 extends beyond EOD, truncated
[  136.870785][ T6077] loop3: p225 size 1342439424 extends beyond EOD, truncated
[  136.878575][ T6077] loop3: p226 size 1342439424 extends beyond EOD, truncated
[  136.886280][ T6077] loop3: p227 size 1342439424 extends beyond EOD, truncated
[  136.893916][ T6077] loop3: p228 size 1342439424 extends beyond EOD, truncated
[  136.901322][ T1356] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  136.901997][ T6077] loop3: p229 size 1342439424 extends beyond EOD, 
[  136.908297][   T53] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  136.914873][ T6077] truncated
[  136.925842][ T6077] loop3: p230 size 1342439424 extends beyond EOD, truncated
[  136.933219][ T1356] usb 5-1: unit 1 not found!
[  136.934352][ T6077] loop3: p231 size 1342439424 extends beyond EOD, truncated
[  136.949206][ T1356] usb 5-1: USB disconnect, device number 42
[  136.953591][ T6077] loop3: p232 size 1342439424 extends beyond EOD, truncated
[  136.962809][ T6077] loop3: p233 size 1342439424 extends beyond EOD, truncated
[  136.970520][ T6077] loop3: p234 size 1342439424 extends beyond EOD, truncated
[  136.978455][ T6077] loop3: p235 size 1342439424 extends beyond EOD, truncated
[  136.986170][ T6077] loop3: p236 size 1342439424 extends beyond EOD, truncated
[  136.993856][ T6077] loop3: p237 size 1342439424 extends beyond EOD, truncated
[  137.001597][ T6077] loop3: p238 size 1342439424 extends beyond EOD, truncated
[  137.009249][ T6077] loop3: p239 size 1342439424 extends beyond EOD, truncated
[  137.017038][ T6077] loop3: p240 size 1342439424 extends beyond EOD, truncated
[  137.025067][ T6077] loop3: p241 size 1342439424 extends beyond EOD, truncated
[  137.035389][ T6077] loop3: p242 size 1342439424 extends beyond EOD, truncated
[  137.043425][ T6077] loop3: p243 size 1342439424 extends beyond EOD, truncated
[  137.051387][ T6077] loop3: p244 size 1342439424 extends beyond EOD, truncated
[  137.059362][ T6077] loop3: p245 size 1342439424 extends beyond EOD, truncated
[  137.067732][ T6077] loop3: p246 size 1342439424 extends beyond EOD, truncated
[  137.075734][ T6077] loop3: p247 size 1342439424 extends beyond EOD, truncated
[  137.084031][ T6077] loop3: p248 size 1342439424 extends beyond EOD, truncated
[  137.092183][ T6077] loop3: p249 size 1342439424 extends beyond EOD, truncated
[  137.099979][ T6077] loop3: p250 size 1342439424 extends beyond EOD, truncated
[  137.107753][ T6077] loop3: p251 size 1342439424 extends beyond EOD, truncated
[  137.115484][ T6077] loop3: p252 size 1342439424 extends beyond EOD, truncated
[  137.123258][ T6077] loop3: p253 size 1342439424 extends beyond EOD, truncated
[  137.130971][ T6077] loop3: p254 size 1342439424 extends beyond EOD, truncated
[  137.138714][ T6077] loop3: p255 size 1342439424 extends beyond EOD, truncated
[  137.202492][   T53] usb 2-1: Using ep0 maxpacket: 32
[  137.328891][  T371] udevd[371]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  137.338446][   T20] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  137.338743][   T53] usb 2-1: config 0 has an invalid interface number: 227 but max is 0
[  137.355869][ T1657] udevd[1657]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory
[  137.355873][ T1651] udevd[1651]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  137.357195][  T704] udevd[704]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[  137.376764][  T427] udevd[427]: inotify_add_watch(7, /dev/loop3p9, 10) failed: No such file or directory
[  137.386211][ T1654] udevd[1654]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory
[  137.400936][  T513] udevd[513]: inotify_add_watch(7, /dev/loop3p8, 10) failed: No such file or directory
[  137.415613][  T301] udevd[301]: inotify_add_watch(7, /dev/loop3p11, 10) failed: No such file or directory
[  137.417028][ T1652] udevd[1652]: inotify_add_watch(7, /dev/loop3p10, 10) failed: No such file or directory
[  137.429810][ T1658] udevd[1658]: inotify_add_watch(7, /dev/loop3p12, 10) failed: No such file or directory
[  137.436185][   T53] usb 2-1: config 0 has no interface number 0
[  137.452225][   T53] usb 2-1: config 0 interface 227 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24
[  137.610384][ T6162] EXT4-fs (loop3): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  137.616735][ T6172] fuse: Bad value for 'fd'
[  137.676845][   T53] usb 2-1: New USB device found, idVendor=0d83, idProduct=28bc, bcdDevice=7a.80
[  137.686796][   T53] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.687736][   T24] audit: type=1400 audit(1771909320.105:212): avc:  denied  { wake_alarm } for  pid=6178 comm="syz.4.2620" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  137.695269][   T53] usb 2-1: Product: syz
[  137.720650][   T53] usb 2-1: Manufacturer: syz
[  137.725730][   T53] usb 2-1: SerialNumber: syz
[  137.730952][   T53] usb 2-1: config 0 descriptor??
[  137.745544][   T94]  loop3: unable to read partition table
[  137.751590][   T94] loop3: partition table beyond EOD, truncated
[  137.758017][ T6139] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  137.786898][ T6176]  loop3: unable to read partition table
[  137.792730][ T6176] loop3: partition table beyond EOD, truncated
[  137.816363][ T6176] loop_reread_partitions: partition scan of loop3 () failed (rc=-5)
[  137.833939][   T20] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  137.842829][   T20] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  137.900044][   T15] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  137.910894][   T20] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  137.926334][   T20] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.937358][   T20] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.022894][   T53] cdc_eem: probe of 2-1:0.227 failed with error -71
[  138.035365][   T53] usb 2-1: USB disconnect, device number 45
[  138.089895][   T20] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  138.099005][   T20] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  138.107098][   T20] usb 1-1: Product: syz
[  138.111266][   T20] usb 1-1: Manufacturer: syz
[  138.168873][   T20] cdc_wdm 1-1:1.0: skipping garbage
[  138.174104][   T20] cdc_wdm 1-1:1.0: skipping garbage
[  138.190647][   T15] usb 3-1: Using ep0 maxpacket: 32
[  138.199001][   T20] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  138.290714][ T1356] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  138.324290][   T15] usb 3-1: config 250 has an invalid interface number: 8 but max is 0
[  138.332714][   T15] usb 3-1: config 250 has no interface number 0
[  138.339049][   T15] usb 3-1: New USB device found, idVendor=0ac8, idProduct=3410, bcdDevice=b6.f9
[  138.348113][   T15] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.399905][   T20] usb 1-1: USB disconnect, device number 42
[  138.491661][  T298] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  138.647987][   T15] usb 3-1: string descriptor 0 read error: -71
[  138.655308][   T15] usb 3-1: USB disconnect, device number 41
[  138.692477][ T1356] usb 5-1: config 0 has an invalid interface number: 233 but max is 0
[  138.700812][ T1356] usb 5-1: config 0 has no interface number 0
[  138.707133][ T1356] usb 5-1: config 0 interface 233 altsetting 12 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  138.718434][ T1356] usb 5-1: config 0 interface 233 has no altsetting 0
[  138.891221][ T1356] usb 5-1: New USB device found, idVendor=05d1, idProduct=8002, bcdDevice=c3.75
[  138.900273][ T1356] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.909180][ T1356] usb 5-1: Product: syz
[  138.913393][  T298] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  138.913545][ T1356] usb 5-1: Manufacturer: syz
[  138.928410][ T1356] usb 5-1: SerialNumber: syz
[  138.934864][  T298] usb 4-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c
[  138.937061][ T1356] usb 5-1: config 0 descriptor??
[  138.948759][  T298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.968941][  T298] usb 4-1: config 0 descriptor??
[  138.991168][ T1356] ftdi_sio 5-1:0.233: FTDI USB Serial Device converter detected
[  138.999309][ T1356] usb 5-1: Detected FT-X
[  139.018573][ T6206] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  139.027349][  T298] usb 4-1: bad CDC descriptors
[  139.033590][ T6206] EXT4-fs (loop0): 1 truncate cleaned up
[  139.039395][ T6206] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,jqfmt=vfsv0,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000601,barrier,max_dir_size_kb=0x0000000000000003,,errors=continue
[  139.222419][ T1356] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  139.237679][ T6241] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  139.244555][ T1356] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  139.259534][   T25] usb 4-1: USB disconnect, device number 40
[  139.277679][ T1356] ftdi_sio 5-1:0.233: GPIO initialisation failed: -71
[  139.285364][ T6241] EXT4-fs error (device loop2): ext4_orphan_get:1395: inode #17: comm syz.2.2649: inode has both inline data and extents flags
[  139.300210][ T1356] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  139.313036][ T1356] usb 5-1: USB disconnect, device number 43
[  139.320365][ T6241] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.2649: couldn't read orphan inode 17 (err -117)
[  139.321452][ T1356] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  139.342097][ T1356] ftdi_sio 5-1:0.233: device disconnected
[  139.349007][ T6241] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[  139.421129][  T298] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  139.540326][ T6273] tmpfs: Bad value for 'fscontext'
[  139.552923][ T6275] EXT4-fs (loop2): Ignoring removed bh option
[  139.563002][ T6275] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  139.581687][ T6275] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2664: bg 0: block 384: padding at end of block bitmap is not set
[  139.597615][ T6275] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5661: Corrupt filesystem
[  139.610883][ T6275] EXT4-fs error (device loop2): ext4_clear_blocks:880: inode #11: comm syz.2.2664: attempt to clear invalid blocks 983260 len 1
[  139.624490][ T6275] EXT4-fs error (device loop2): __ext4_get_inode_loc:4444: comm syz.2.2664: Invalid inode table block 0 in block_group 0
[  139.637291][ T6275] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  139.646918][ T6275] EXT4-fs error (device loop2) in ext4_orphan_del:3292: Corrupt filesystem
[  139.655843][ T6275] EXT4-fs error (device loop2): __ext4_get_inode_loc:4444: comm syz.2.2664: Invalid inode table block 0 in block_group 0
[  139.668713][ T6275] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  139.678328][ T6275] EXT4-fs error (device loop2): ext4_truncate:4396: inode #11: comm syz.2.2664: mark_inode_dirty error
[  139.689563][ T6275] EXT4-fs error (device loop2) in ext4_orphan_cleanup:3108: Corrupt filesystem
[  139.698753][ T6275] EXT4-fs (loop2): 1 truncate cleaned up
[  139.704390][ T6275] EXT4-fs (loop2): mounted filesystem without journal. Opts: bh,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity,,errors=continue
[  139.720359][  T298] usb 2-1: Using ep0 maxpacket: 16
[  139.862429][  T298] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  139.906084][   T15] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  139.949954][  T298] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  140.037683][  T298] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  140.092195][ T1444] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  140.125151][  T298] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  140.134231][  T298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  140.142575][  T298] usb 2-1: SerialNumber: syz
[  140.168936][   T15] usb 1-1: Using ep0 maxpacket: 16
[  140.174140][   T53] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  140.212759][   T15] usb 1-1: too many configurations: 255, using maximum allowed: 8
[  140.300277][ T1356] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  140.300357][   T15] usb 1-1: config index 0 descriptor too short (expected 2130, got 36)
[  140.316411][   T15] usb 1-1: config 0 has no interfaces?
[  140.398941][   T15] usb 1-1: config index 1 descriptor too short (expected 2130, got 36)
[  140.407312][   T15] usb 1-1: config 0 has no interfaces?
[  140.412152][   T25] usb 2-1: USB disconnect, device number 46
[  140.442752][   T53] usb 5-1: Using ep0 maxpacket: 32
[  140.486557][ T1444] usb 3-1: config 0 has an invalid interface number: 64 but max is 0
[  140.494812][ T1444] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  140.505016][   T53] usb 5-1: too many configurations: 255, using maximum allowed: 8
[  140.512861][   T15] usb 1-1: config index 2 descriptor too short (expected 2130, got 36)
[  140.521369][   T15] usb 1-1: config 0 has no interfaces?
[  140.526884][ T1444] usb 3-1: config 0 has no interface number 0
[  140.574051][ T1356] usb 4-1: Using ep0 maxpacket: 16
[  140.606965][   T53] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  140.617086][   T15] usb 1-1: config index 3 descriptor too short (expected 2130, got 36)
[  140.625545][   T15] usb 1-1: config 0 has no interfaces?
[  140.694603][   T53] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  140.705650][ T1444] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  140.714674][ T1444] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.722790][   T15] usb 1-1: config index 4 descriptor too short (expected 2130, got 36)
[  140.731073][ T1444] usb 3-1: Product: syz
[  140.735213][ T1444] usb 3-1: Manufacturer: syz
[  140.738324][ T1356] usb 4-1: config 1 has an invalid interface number: 105 but max is 0
[  140.739927][   T15] usb 1-1: config 0 has no interfaces?
[  140.748433][ T1356] usb 4-1: config 1 has no interface number 0
[  140.754114][ T1444] usb 3-1: SerialNumber: syz
[  140.760419][ T1356] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  140.765598][ T1444] usb 3-1: config 0 descriptor??
[  140.775224][ T1356] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  140.782318][   T53] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  140.789809][ T1356] usb 4-1: config 1 interface 105 has no altsetting 0
[  140.847896][   T15] usb 1-1: config index 5 descriptor too short (expected 2130, got 36)
[  140.856281][   T15] usb 1-1: config 0 has no interfaces?
[  140.880800][   T53] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  140.946062][   T15] usb 1-1: config index 6 descriptor too short (expected 2130, got 36)
[  140.955356][   T15] usb 1-1: config 0 has no interfaces?
[  140.967811][   T53] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  141.001261][ T1356] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  141.012343][ T1356] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.020331][ T1356] usb 4-1: Product: syz
[  141.024885][ T1356] usb 4-1: Manufacturer: syz
[  141.029457][ T1356] usb 4-1: SerialNumber: syz
[  141.040381][   T20] usb 3-1: USB disconnect, device number 42
[  141.054923][   T15] usb 1-1: config index 7 descriptor too short (expected 2130, got 36)
[  141.063319][   T15] usb 1-1: config 0 has no interfaces?
[  141.065799][ T6302] raw-gadget.4 gadget: fail, usb_ep_enable returned -22
[  141.075750][ T6302] raw-gadget.4 gadget: fail, usb_ep_enable returned -22
[  141.087570][   T53] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  141.152890][   T15] usb 1-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.00
[  141.161920][   T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=252
[  141.170248][   T15] usb 1-1: SerialNumber: syz
[  141.174953][   T53] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  141.185718][   T15] usb 1-1: config 0 descriptor??
[  141.261707][   T53] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  141.305251][ T1000] usb 2-1: new full-speed USB device number 47 using dummy_hcd
[  141.348881][ T1356] aqc111: probe of 4-1:1.105 failed with error -71
[  141.358135][ T1356] usb 4-1: USB disconnect, device number 41
[  141.436081][   T53] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  141.445257][   T53] usb 5-1: New USB device strings: Mfr=246, Product=255, SerialNumber=255
[  141.456238][   T53] usb 5-1: Product: syz
[  141.460454][   T53] usb 5-1: Manufacturer: syz
[  141.463319][   T20] usb 1-1: USB disconnect, device number 43
[  141.465040][   T53] usb 5-1: SerialNumber: syz
[  141.466182][   T53] usb 5-1: config 0 descriptor??
[  141.534253][   T53] hub 5-1:0.0: Invalid hub with more than one config or interface
[  141.542171][   T53] hub: probe of 5-1:0.0 failed with error -22
[  141.635308][ T6312] EXT4-fs (loop2): orphan cleanup on readonly fs
[  141.641883][ T6312] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #4: comm syz.2.2681: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  141.660464][ T6312] EXT4-fs error (device loop2): ext4_quota_enable:6449: comm syz.2.2681: Bad quota inode: 4, type: 1
[  141.671542][ T6312] EXT4-fs warning (device loop2): ext4_enable_quotas:6490: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  141.686527][ T6312] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  141.693210][ T6312] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[  141.729747][ T1000] usb 2-1: config 0 has an invalid interface number: 20 but max is 0
[  141.737818][ T1000] usb 2-1: config 0 has no interface number 0
[  141.744385][ T1000] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  141.762440][ T1000] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  141.786096][   T15] usb 5-1: USB disconnect, device number 44
[  141.884905][ T6326] erofs: (device loop2): mounted with root inode @ nid 36.
[  141.936546][ T1000] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.00
[  141.945661][ T1000] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.953723][ T1000] usb 2-1: Product: syz
[  141.957918][ T1000] usb 2-1: Manufacturer: syz
[  141.962637][ T1000] usb 2-1: SerialNumber: syz
[  141.967734][ T1000] usb 2-1: config 0 descriptor??
[  141.991032][ T6310] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  142.008605][ T6332] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  142.022817][ T1000] ums-sddr09 2-1:0.20: USB Mass Storage device detected
[  142.056017][ T1000] ums-sddr09: probe of 2-1:0.20 failed with error -22
[  142.152654][ T6342] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  142.261439][   T20] usb 2-1: USB disconnect, device number 47
[  142.326730][   T15] usb 3-1: new full-speed USB device number 43 using dummy_hcd
[  142.328846][ T6348] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  142.344085][ T6348] ext4 filesystem being mounted at /616/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.546603][ T6345] F2FS-fs (loop3): invalid crc value
[  142.553525][ T6345] F2FS-fs (loop3): Invalid segment type: 32, segno: 2
[  142.560491][ T6345] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117)
[  142.584777][ T6352] EXT4-fs (loop4): Unsupported blocksize for fs-verity
[  142.716885][   T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  142.733182][   T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.744175][   T15] usb 3-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00
[  142.753412][   T15] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.771238][   T15] usb 3-1: config 0 descriptor??
[  142.807870][ T6361] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  142.858930][ T6359] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  143.058210][ T6378] EXT4-fs error (device loop1): dx_probe:796: inode #2: comm syz.1.2703: Directory hole found for htree index block 0
[  143.070739][ T6378] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  143.079000][ T6378] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000009,jqfmt=vfsold,nolazytime,grpjquota=.journal_async_commit,resuid=0x0000000000000000,barrier=0x0000000000000000,grpid,,,errors=continue
[  143.137597][ T6364] F2FS-fs (loop4): Value of option "test_dummy_encryption=synz_mode=strict" is unrecognized
[  143.139901][   T15] usbhid 3-1:0.0: can't add hid device: -71
[  143.153787][   T15] usbhid: probe of 3-1:0.0 failed with error -71
[  143.163531][   T15] usb 3-1: USB disconnect, device number 43
[  143.895530][ T6397] F2FS-fs (loop2): Wrong secs_per_zone / total_sections (67108865, 24)
[  143.903805][ T6397] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  143.934500][ T6397] F2FS-fs (loop2): invalid crc value
[  143.982304][ T6397] F2FS-fs (loop2): Found nat_bits in checkpoint
[  144.049555][ T6397] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  144.060389][ T6397] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  144.382256][ T6391] F2FS-fs (loop4): Found nat_bits in checkpoint
[  144.451696][ T6391] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  144.823800][   T24] audit: type=1400 audit(1771909326.637:213): avc:  denied  { create } for  pid=6439 comm="syz.3.2724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  144.926558][   T24] audit: type=1400 audit(1771909326.665:214): avc:  denied  { write } for  pid=6439 comm="syz.3.2724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  145.022864][   T24] audit: type=1400 audit(1771909326.665:215): avc:  denied  { nlmsg_write } for  pid=6439 comm="syz.3.2724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  145.065129][   T24] audit: type=1400 audit(1771909326.806:216): avc:  denied  { getopt } for  pid=6446 comm="syz.3.2728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  145.301551][   T20] usb 4-1: new full-speed USB device number 42 using dummy_hcd
[  145.603542][ T1356] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  145.622816][ T6462] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[  145.646560][   T20] usb 4-1: not running at top speed; connect to a high speed hub
[  145.727760][ T6467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2734'.
[  145.736890][   T20] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  145.747723][   T20] usb 4-1: config 0 has no interface number 0
[  145.753832][   T20] usb 4-1: config 0 interface 184 has no altsetting 0
[  145.872892][ T1356] usb 1-1: Using ep0 maxpacket: 32
[  145.948457][   T20] usb 4-1: New USB device found, idVendor=644d, idProduct=cf2f, bcdDevice=3b.94
[  145.973687][   T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.989581][   T20] usb 4-1: Product: syz
[  145.994080][   T20] usb 4-1: Manufacturer: syz
[  145.998810][   T20] usb 4-1: SerialNumber: syz
[  146.003876][ T1356] usb 1-1: config 0 has an invalid interface number: 183 but max is 0
[  146.015906][   T20] usb 4-1: config 0 descriptor??
[  146.020937][ T1356] usb 1-1: config 0 has no interface number 0
[  146.027104][ T1356] usb 1-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528
[  146.180433][ T6480] FAT-fs (loop2): Directory bread(block 64) failed
[  146.188578][ T6480] FAT-fs (loop2): Directory bread(block 65) failed
[  146.195250][ T6480] FAT-fs (loop2): Directory bread(block 66) failed
[  146.202049][ T6480] FAT-fs (loop2): Directory bread(block 67) failed
[  146.209006][ T6480] FAT-fs (loop2): Directory bread(block 68) failed
[  146.217961][ T1356] usb 1-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8
[  146.223051][ T6480] FAT-fs (loop2): Directory bread(block 69) failed
[  146.231078][ T1356] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.235031][ T6480] FAT-fs (loop2): Directory bread(block 70) failed
[  146.241952][ T1356] usb 1-1: Product: syz
[  146.248442][ T6480] FAT-fs (loop2): Directory bread(block 71) failed
[  146.252582][ T1356] usb 1-1: Manufacturer: syz
[  146.252592][ T1356] usb 1-1: SerialNumber: syz
[  146.256175][ T1356] usb 1-1: config 0 descriptor??
[  146.259455][ T6480] FAT-fs (loop2): Directory bread(block 72) failed
[  146.280211][ T6480] FAT-fs (loop2): Directory bread(block 73) failed
[  146.296939][ T6458] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  146.353528][   T24] audit: type=1326 audit(1771909328.060:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6493 comm="syz.4.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef83a629 code=0x7ffc0000
[  146.380277][   T20] usb-storage 4-1:0.184: USB Mass Storage device detected
[  146.388414][   T24] audit: type=1326 audit(1771909328.087:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6493 comm="syz.4.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef83a629 code=0x7ffc0000
[  146.412253][   T24] audit: type=1326 audit(1771909328.087:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6493 comm="syz.4.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fb1ef83a629 code=0x7ffc0000
[  146.440041][   T24] audit: type=1326 audit(1771909328.087:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6493 comm="syz.4.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef83a629 code=0x7ffc0000
[  146.463452][   T24] audit: type=1326 audit(1771909328.087:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6493 comm="syz.4.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef83a629 code=0x7ffc0000
[  146.501876][   T20] usb 4-1: USB disconnect, device number 42
[  146.552196][ T1356] net1080: probe of 1-1:0.183 failed with error -71
[  146.564312][ T1356] usb 1-1: USB disconnect, device number 44
[  146.635993][   T24] audit: type=1400 audit(1771909328.319:222): avc:  denied  { setcurrent } for  pid=6508 comm="syz.4.2750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  146.983954][ T6568] binder: 6567:6568 ioctl c0306201 200000000040 returned -22
[  147.040486][ T6578] xt_ecn: cannot match TCP bits for non-tcp packets
[  147.052888][ T6580] netlink: 'syz.3.2787': attribute type 13 has an invalid length.
[  147.086600][ T6580] gretap0: refused to change device tx_queue_len
[  147.101790][ T6580] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  147.206568][ T6594] syz.2.2793 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  147.239187][ T6598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2796'.
[  147.542078][ T6647] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2820'.
[  147.628066][ T6535] F2FS-fs (loop1): Found nat_bits in checkpoint
[  147.718394][ T6535] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  147.974857][ T1356] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  148.094123][ T6706] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  148.133279][ T6706] overlayfs: missing 'lowerdir'
[  148.233641][ T1356] usb 1-1: Using ep0 maxpacket: 16
[  148.274101][ T6737] netlink: 276 bytes leftover after parsing attributes in process `syz.1.2861'.
[  148.285552][ T6738] xt_l2tp: missing protocol rule (udp|l2tpip)
[  148.332810][ T6746] netlink: 'syz.3.2867': attribute type 3 has an invalid length.
[  148.395428][ T6758] x_tables: duplicate underflow at hook 3
[  148.406017][ T1356] usb 1-1: unable to get BOS descriptor or descriptor too short
[  148.419036][ T6762] printk: syz.1.2875 (6762): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated).
[  148.483946][ T6774] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2882'.
[  148.492308][ T1356] usb 1-1: config 7 has an invalid interface number: 150 but max is 0
[  148.511664][ T1356] usb 1-1: config 7 has no interface number 0
[  148.511682][ T1356] usb 1-1: config 7 interface 150 has no altsetting 0
[  148.554967][ T6786] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2887'.
[  148.630989][ T6799] xt_TCPMSS: Only works on TCP SYN packets
[  148.675497][ T1356] usb 1-1: New USB device found, idVendor=128d, idProduct=0003, bcdDevice= 1.02
[  148.675511][ T1356] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.675520][ T1356] usb 1-1: Product: syz
[  148.675529][ T1356] usb 1-1: Manufacturer: syz
[  148.675539][ T1356] usb 1-1: SerialNumber: syz
[  148.713878][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2898'.
[  148.784802][   T53] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  148.803159][ T6824] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2905'.
[  148.829570][ T6824] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2905'.
[  149.020628][ T1356] ftdi_sio 1-1:7.150: FTDI USB Serial Device converter detected
[  149.042282][ T1356] usb 1-1: Detected SIO
[  149.049558][ T1356] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  149.074129][   T53] usb 4-1: Using ep0 maxpacket: 8
[  149.076611][ T1356] usb 1-1: USB disconnect, device number 45
[  149.094404][ T1356] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  149.125280][ T1356] ftdi_sio 1-1:7.150: device disconnected
[  149.188026][ T6890] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  149.230347][   T53] usb 4-1: config 0 has an invalid interface number: 143 but max is 0
[  149.240419][   T53] usb 4-1: config 0 has no interface number 0
[  149.246933][   T53] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[  149.256014][   T53] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.268262][   T53] usb 4-1: config 0 descriptor??
[  149.373702][ T6920] erofs: (device loop1): mounted with root inode @ nid 36.
[  149.409662][ T6920] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  149.419786][ T6920] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851]
[  149.432061][ T6920] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117]
[  149.542674][ T1356] usb 4-1: USB disconnect, device number 43
[  149.680405][ T6964] xt_SECMARK: invalid security context 'unconfined'
[  149.966868][ T6985] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  149.986197][ T6985] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  150.004621][ T6985] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  150.017554][ T6985] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  150.026148][ T6985] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  150.034543][ T6985] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  150.042807][ T6985] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  150.053704][ T6982]  loop2: p1 < > p2 < > p3 p4 < >
[  150.067052][ T6982] loop2: partition table partially beyond EOD, truncated
[  150.085121][ T6982] loop2: p1 start 67108864 is beyond EOD, truncated
[  150.102761][ T6982] loop2: p3 start 100859904 is beyond EOD, truncated
[  150.174524][   T94]  loop2: p1 < > p2 < > p3 p4 < >
[  150.179595][   T94] loop2: partition table partially beyond EOD, truncated
[  150.206272][   T94] loop2: p1 start 67108864 is beyond EOD, truncated
[  150.226885][   T94] loop2: p3 start 100859904 is beyond EOD, truncated
[  150.321056][ T7017] device bridge2 entered promiscuous mode
[  150.327825][ T7021] netlink: 'syz.2.2999': attribute type 1 has an invalid length.
[  150.334712][  T371] udevd[371]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  150.351177][ T1651] udevd[1651]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  150.361144][ T7021] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2999'.
[  150.453809][  T371] udevd[371]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  150.470777][ T1651] udevd[1651]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  150.501348][ T7047] binder: 7046:7047 ioctl 40046210 0 returned -14
[  150.545679][ T7054] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  150.601036][ T7057] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready
[  150.788933][ T7099] netlink: 'syz.1.3037': attribute type 9 has an invalid length.
[  150.812641][ T7099] netlink: 'syz.1.3037': attribute type 7 has an invalid length.
[  150.821166][ T7099] netlink: 'syz.1.3037': attribute type 8 has an invalid length.
[  151.025075][ T7127] F2FS-fs (loop2): Wrong SSA boundary, start(3584) end(4096) blocks(0)
[  151.046155][ T7127] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  151.054445][ T7127] F2FS-fs (loop2): fault_type options not supported
[  151.087344][ T7127] F2FS-fs (loop2): invalid crc value
[  151.101714][ T7127] F2FS-fs (loop2): Found nat_bits in checkpoint
[  151.138595][ T7127] F2FS-fs (loop2): Start checkpoint disabled!
[  151.156624][ T7127] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  151.163677][ T7127] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  151.171216][   T24] kauditd_printk_skb: 77 callbacks suppressed
[  151.171226][   T24] audit: type=1400 audit(1771909332.523:300): avc:  denied  { write } for  pid=7164 comm="syz.3.3066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  151.213164][ T7173] __nla_validate_parse: 1 callbacks suppressed
[  151.213172][ T7173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3070'.
[  151.229007][   T24] audit: type=1400 audit(1771909332.579:301): avc:  denied  { write } for  pid=7126 comm="syz.2.3050" name="/" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  151.275589][    T7] attempt to access beyond end of device
[  151.275589][    T7] loop2: rw=2049, want=40976, limit=40427
[  151.275839][   T24] audit: type=1400 audit(1771909332.579:302): avc:  denied  { add_name } for  pid=7126 comm="syz.2.3050" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  151.327527][   T24] audit: type=1400 audit(1771909332.579:303): avc:  denied  { create } for  pid=7126 comm="syz.2.3050" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  151.327551][   T24] audit: type=1400 audit(1771909332.579:304): avc:  denied  { write open } for  pid=7126 comm="syz.2.3050" path="/564/bus/file1" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  151.486321][   T24] audit: type=1400 audit(1771909332.820:305): avc:  denied  { bind } for  pid=7200 comm="syz.1.3086" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  151.506572][   T24] audit: type=1400 audit(1771909332.820:306): avc:  denied  { name_bind } for  pid=7200 comm="syz.1.3086" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  151.507617][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3087'.
[  151.531804][   T24] audit: type=1400 audit(1771909332.848:307): avc:  denied  { node_bind } for  pid=7200 comm="syz.1.3086" saddr=ff02::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  151.539915][ T7208] netlink: 'syz.4.3087': attribute type 5 has an invalid length.
[  151.562537][ T7212] netlink: 'syz.0.3088': attribute type 4 has an invalid length.
[  151.565702][ T7208] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3087'.
[  151.588837][ T7214] x_tables: duplicate underflow at hook 3
[  151.602901][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3088'.
[  151.615250][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3088'.
[  151.615860][ T7216] device vlan0 entered promiscuous mode
[  151.670878][   T24] audit: type=1400 audit(1771909333.005:308): avc:  granted  { setsecparam } for  pid=7225 comm="syz.2.3096" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  151.772670][ T7249] netlink: 'syz.3.3108': attribute type 1 has an invalid length.
[  151.807040][ T7265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  151.836773][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3115'.
[  151.865990][ T7266] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3116'.
[  151.893985][ T7284] netlink: 272 bytes leftover after parsing attributes in process `syz.2.3124'.
[  152.071740][ T7330] netlink: 'syz.3.3147': attribute type 32 has an invalid length.
[  152.108593][   T24] audit: type=1400 audit(1771909333.405:309): avc:  denied  { setopt } for  pid=7340 comm="syz.0.3152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  152.129355][ T7334] FAT-fs (loop2): Directory bread(block 64) failed
[  152.137996][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3153'.
[  152.151499][ T7334] FAT-fs (loop2): Directory bread(block 65) failed
[  152.158871][ T7334] FAT-fs (loop2): Directory bread(block 66) failed
[  152.165640][ T7334] FAT-fs (loop2): Directory bread(block 67) failed
[  152.172591][ T7334] FAT-fs (loop2): Directory bread(block 68) failed
[  152.180313][ T7334] FAT-fs (loop2): Directory bread(block 69) failed
[  152.186901][ T7334] FAT-fs (loop2): Directory bread(block 70) failed
[  152.193590][ T7334] FAT-fs (loop2): Directory bread(block 71) failed
[  152.200313][ T7334] FAT-fs (loop2): Directory bread(block 72) failed
[  152.206835][ T7334] FAT-fs (loop2): Directory bread(block 73) failed
[  152.446464][ T1356] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  152.548525][ T7398] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[  152.564454][ T7398] System zones: 1-12
[  152.583353][ T7398] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.3180: invalid indirect mapped block 1819239214 (level 1)
[  152.599794][ T7398] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3180: bg 0: block 361: padding at end of block bitmap is not set
[  152.619244][ T7398] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5661: Corrupt filesystem
[  152.639752][ T7398] EXT4-fs error (device loop2): ext4_clear_blocks:880: inode #13: comm syz.2.3180: attempt to clear invalid blocks 33619980 len 1
[  152.675563][ T7398] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.3180: invalid indirect mapped block 1819239214 (level 0)
[  152.726518][ T1356] usb 2-1: Using ep0 maxpacket: 16
[  152.737568][ T7398] EXT4-fs (loop2): 1 truncate cleaned up
[  152.743270][ T7398] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,,errors=continue
[  152.795525][ T7398] EXT4-fs error (device loop2): dx_probe:796: inode #2: comm syz.2.3180: Directory hole found for htree index block 0
[  152.825208][ T7351] F2FS-fs (loop0): Found nat_bits in checkpoint
[  152.841653][ T7435] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.3194'.
[  152.855904][ T1356] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  152.864753][ T7351] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b
[  152.866212][ T1356] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  153.061716][ T7467] validate_nla: 1 callbacks suppressed
[  153.061726][ T7467] netlink: 'syz.2.3212': attribute type 1 has an invalid length.
[  153.082840][ T1356] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  153.092682][ T7471] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  153.113596][ T1356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.133974][ T1356] usb 2-1: Product: syz
[  153.136896][ T7471] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  153.146798][ T1356] usb 2-1: Manufacturer: syz
[  153.155946][ T1356] usb 2-1: SerialNumber: syz
[  153.158419][ T7471] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  153.674437][  T692] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  153.706823][ T1356] usb 2-1: cannot find UAC_HEADER
[  153.717890][ T7587] FAT-fs (loop3): Directory bread(block 64) failed
[  153.724507][ T7587] FAT-fs (loop3): Directory bread(block 65) failed
[  153.725952][ T1356] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[  153.732882][ T7587] FAT-fs (loop3): Directory bread(block 66) failed
[  153.744034][ T1356] usb 2-1: USB disconnect, device number 48
[  153.748344][ T7587] FAT-fs (loop3): Directory bread(block 67) failed
[  153.757122][ T7587] FAT-fs (loop3): Directory bread(block 68) failed
[  153.763989][ T7587] FAT-fs (loop3): Directory bread(block 69) failed
[  153.771497][ T7587] FAT-fs (loop3): Directory bread(block 70) failed
[  153.778090][ T7587] FAT-fs (loop3): Directory bread(block 71) failed
[  153.792969][ T7587] FAT-fs (loop3): Directory bread(block 72) failed
[  153.801432][ T7587] FAT-fs (loop3): Directory bread(block 73) failed
[  153.935587][  T692] usb 3-1: Using ep0 maxpacket: 16
[  154.155228][ T7670] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  154.171075][ T7670] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x6a38e987, utbl_chksum : 0xe619d30d)
[  154.196685][ T7670] overlayfs: filesystem on './file0' not supported
[  154.234588][  T692] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  154.243746][  T692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.251776][  T692] usb 3-1: Product: syz
[  154.255964][  T692] usb 3-1: Manufacturer: syz
[  154.260532][  T692] usb 3-1: SerialNumber: syz
[  154.266990][  T692] usb 3-1: config 0 descriptor??
[  154.355713][ T7699] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT
[  154.485478][ T7723] device ip6erspan0 entered promiscuous mode
[  154.546903][  T692] r8152 3-1:0.0: Unknown version 0x0000
[  154.695205][ T7772] netlink: 'syz.4.3359': attribute type 9 has an invalid length.
[  154.744434][ T7778] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  154.758675][ T7782] device batadv_slave_0 entered promiscuous mode
[  154.763719][  T298] usb 3-1: USB disconnect, device number 44
[  154.767914][ T7782] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  154.871183][ T7741] F2FS-fs (loop0): invalid crc value
[  154.913315][ T7741] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  154.954597][ T7741] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0
[  154.961639][ T7741] F2FS-fs (loop0): Start checkpoint disabled!
[  154.972632][ T7741] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  155.139923][ T7839] xt_bpf: check failed: parse error
[  155.483561][ T7937] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  155.668893][ T7961] FAT-fs (loop1): Directory bread(block 64) failed
[  155.724282][ T7961] FAT-fs (loop1): Directory bread(block 65) failed
[  155.730859][ T7961] FAT-fs (loop1): Directory bread(block 66) failed
[  155.780718][ T7961] FAT-fs (loop1): Directory bread(block 67) failed
[  155.802922][ T7961] FAT-fs (loop1): Directory bread(block 68) failed
[  155.825664][ T7961] FAT-fs (loop1): Directory bread(block 69) failed
[  155.843356][ T7961] FAT-fs (loop1): Directory bread(block 70) failed
[  155.854162][ T7961] FAT-fs (loop1): Directory bread(block 71) failed
[  155.881202][ T8002] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.893839][ T7961] FAT-fs (loop1): Directory bread(block 72) failed
[  155.900389][ T7961] FAT-fs (loop1): Directory bread(block 73) failed
[  155.907810][ T8002] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  156.216018][ T8059] SELinux: failed to load policy
[  156.363995][ T8090] Unknown ioctl 1342215171
[  156.530377][ T8125] mip6: mip6_rthdr_init_state: state's mode is not 2: 0
[  156.574521][ T8132] xt_NFQUEUE: number of queues (65534) out of range (got 131068)
[  156.632358][   T24] kauditd_printk_skb: 60 callbacks suppressed
[  156.632368][   T24] audit: type=1326 audit(1771909337.602:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.0.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6eaf0629 code=0x7ffc0000
[  156.703759][   T24] audit: type=1326 audit(1771909337.602:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.0.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fda6eaf0629 code=0x7ffc0000
[  156.800096][   T24] audit: type=1326 audit(1772433625.623:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.0.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6eaf0629 code=0x7ffc0000
[  156.848135][   T24] audit: type=1400 audit(1772433625.754:373): avc:  denied  { accept } for  pid=8172 comm="syz.0.3555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  156.927985][   T24] audit: type=1400 audit(1772433625.792:374): avc:  denied  { getopt } for  pid=8179 comm="syz.3.3557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  156.983280][ T8212] device sit0 entered promiscuous mode
[  156.993768][ T8212] __nla_validate_parse: 19 callbacks suppressed
[  156.993776][ T8212] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3573'.
[  157.039517][ T8220] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3577'.
[  157.172792][   T24] audit: type=1400 audit(1772433626.111:375): avc:  denied  { getopt } for  pid=8250 comm="syz.0.3593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  157.262628][   T24] audit: type=1326 audit(1772433626.196:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8275 comm="syz.3.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4efd9629 code=0x7ffc0000
[  157.297488][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3609'.
[  157.328266][   T24] audit: type=1326 audit(1772433626.224:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8275 comm="syz.3.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f0b4efd9629 code=0x7ffc0000
[  157.382382][ T8295] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3615'.
[  157.385997][ T8300] netlink: 'syz.3.3616': attribute type 3 has an invalid length.
[  157.415424][   T24] audit: type=1326 audit(1772433626.224:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8275 comm="syz.3.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4efd9629 code=0x7ffc0000
[  157.418665][ T8300] netlink: 'syz.3.3616': attribute type 3 has an invalid length.
[  157.439728][   T24] audit: type=1326 audit(1772433626.224:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8275 comm="syz.3.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4efd9629 code=0x7ffc0000
[  157.557884][ T8304] FAT-fs (loop0): Directory bread(block 414) failed
[  157.567082][ T8314] 8021q: VLANs not supported on sit0
[  157.573244][ T8304] FAT-fs (loop0): Directory bread(block 415) failed
[  157.579867][ T8304] FAT-fs (loop0): Directory bread(block 416) failed
[  157.587639][ T8304] FAT-fs (loop0): Directory bread(block 417) failed
[  157.594967][ T8304] FAT-fs (loop0): Directory bread(block 418) failed
[  157.601771][ T8304] FAT-fs (loop0): Directory bread(block 419) failed
[  157.608931][ T8304] FAT-fs (loop0): Directory bread(block 420) failed
[  157.625217][ T8321] xt_limit: Overflow, try lower: 268435456/134217728
[  157.643749][ T8304] FAT-fs (loop0): Directory bread(block 421) failed
[  157.645240][ T8324] bridge1: the hash_elasticity option has been deprecated and is always 16
[  157.672761][ T8329] IPv6: sit1: Disabled Multicast RS
[  157.673894][ T8304] FAT-fs (loop0): Directory bread(block 414) failed
[  157.693412][ T8304] FAT-fs (loop0): Directory bread(block 415) failed
[  157.803854][ T8335] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1)
[  157.825487][ T8335] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  157.849840][ T8351] device gre1 entered promiscuous mode
[  157.855525][    T7] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1)
[  157.858643][ T8349] netlink: 'syz.1.3638': attribute type 4 has an invalid length.
[  157.876211][ T8349] netlink: 'syz.1.3638': attribute type 5 has an invalid length.
[  157.884337][ T8349] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.3638'.
[  157.911386][ T8358] xt_CT: You must specify a L4 protocol and not use inversions on it
[  157.927957][ T8360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3644'.
[  158.020231][ T8383] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.027461][ T8383] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.045478][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3660'.
[  158.067556][ T8383] device bridge_slave_0 left promiscuous mode
[  158.077614][ T8383] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.087993][ T8383] device bridge_slave_1 left promiscuous mode
[  158.094268][ T8383] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.237588][ T8421] usb usb7: usbfs: process 8421 (syz.4.3671) did not claim interface 0 before use
[  158.286850][ T8431] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3681'.
[  158.514701][ T8489] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3708'.
[  158.804171][ T8537] device ip6erspan0 left promiscuous mode
[  158.830023][ T8543] xt_NFQUEUE: number of queues (65530) out of range (got 65786)
[  158.867890][ T8547] device gre1 entered promiscuous mode
[  158.917247][ T8555] device bridge1 entered promiscuous mode
[  159.137423][ T8603] netlink: 'syz.0.3764': attribute type 9 has an invalid length.
[  159.223859][ T8615] FAT-fs (loop4): Directory bread(block 64) failed
[  159.232623][ T8615] FAT-fs (loop4): Directory bread(block 65) failed
[  159.241416][ T8615] FAT-fs (loop4): Directory bread(block 66) failed
[  159.248237][ T8615] FAT-fs (loop4): Directory bread(block 67) failed
[  159.255871][ T8615] FAT-fs (loop4): Directory bread(block 68) failed
[  159.262715][ T8615] FAT-fs (loop4): Directory bread(block 69) failed
[  159.269736][ T8615] FAT-fs (loop4): Directory bread(block 70) failed
[  159.276529][ T8615] FAT-fs (loop4): Directory bread(block 71) failed
[  159.283384][ T8615] FAT-fs (loop4): Directory bread(block 72) failed
[  159.290173][ T8615] FAT-fs (loop4): Directory bread(block 73) failed
[  159.442602][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3790'.
[  159.611476][ T8658] EXT4-fs (loop0): Ignoring removed nobh option
[  159.621407][ T8658] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  159.631052][ T8658] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.3792: invalid indirect mapped block 256 (level 1)
[  159.644672][ T8658] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.3792: invalid indirect mapped block 2683928664 (level 1)
[  159.658999][ T8658] EXT4-fs (loop0): 1 truncate cleaned up
[  159.662780][ T8663] EXT4-fs (loop4): Ignoring removed orlov option
[  159.675187][ T8658] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,jqfmt=vfsv1,nobh,nodioread_nolock,journal_ioprio=0x0000000000000004,usrjquota=.noacl,norecovery,jqfmt=vfsv0,auto_da_alloc,,,errors=continue
[  159.706511][ T8663] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e814e01d, mo2=0003]
[  159.714752][ T8663] System zones: 1-12
[  159.719420][ T8663] EXT4-fs error (device loop4): ext4_orphan_get:1395: inode #15: comm syz.4.3794: inode has both inline data and extents flags
[  159.738794][ T8663] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.3794: couldn't read orphan inode 15 (err -117)
[  159.756661][ T8663] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,debug,i_version,grpquota,nombcache,inlinecrypt,delalloc,nombcache,,errors=continue
[  159.762087][ T8686] netlink: 'syz.1.3803': attribute type 3 has an invalid length.
[  159.892632][ T8706] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.899844][ T8706] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.928515][ T8706] device bridge_slave_0 left promiscuous mode
[  159.934762][ T8706] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.952230][ T8706] device bridge_slave_1 left promiscuous mode
[  159.959899][ T8706] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.147354][   T53] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  160.214947][ T8773] xt_socket: unknown flags 0x40
[  160.308716][ T8797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  160.326137][ T8800] 8021q: VLANs not supported on lo
[  160.405516][ T8819] xt_ecn: cannot match TCP bits for non-tcp packets
[  160.454532][ T8831] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  160.454671][ T8833] xt_TCPMSS: Only works on TCP SYN packets
[  160.530328][ T8845] netlink: 'syz.2.3882': attribute type 1 has an invalid length.
[  160.552261][ T8849] SELinux:  Context ›Y7»ôj is not valid (left unmapped).
[  160.571396][   T53] usb 2-1: unable to get BOS descriptor or descriptor too short
[  160.666867][   T53] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  160.686252][   T53] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  160.702818][ T8871] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[  160.703096][   T53] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  160.721156][ T8871] EXT4-fs error (device loop2): ext4_find_extent:928: inode #2: comm syz.2.3895: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  160.845963][ T8899] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  160.859818][ T8899] overlayfs: missing 'lowerdir'
[  160.900018][   T53] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  160.909243][  T298] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  160.921246][   T53] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.929246][   T53] usb 2-1: Product: syz
[  160.952119][   T53] usb 2-1: Manufacturer: syz
[  160.965949][   T53] usb 2-1: SerialNumber: syz
[  161.112752][ T8910] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64)
[  161.121950][ T8910] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  161.130539][ T8910] F2FS-fs (loop2): fault_type options not supported
[  161.141430][ T8910] F2FS-fs (loop2): invalid crc value
[  161.150701][ T8910] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  161.164998][  T298] usb 4-1: Using ep0 maxpacket: 16
[  161.180447][ T8910] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  161.187691][ T8910] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  161.241076][ T1356] usb 2-1: USB disconnect, device number 49
[  161.368296][ T8944] EXT4-fs (loop0): Invalid log block size: 100663297
[  161.383249][ T8949] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  161.459460][ T8962] IPv6: NLM_F_CREATE should be specified when creating new route
[  161.472495][  T298] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  161.491239][  T298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.510068][  T298] usb 4-1: Product: syz
[  161.514264][  T298] usb 4-1: Manufacturer: syz
[  161.531444][  T298] usb 4-1: SerialNumber: syz
[  161.547522][  T298] usb 4-1: config 0 descriptor??
[  161.590150][  T298] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  161.599179][ T8991] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  161.607145][  T298] usb 4-1: Detected FT232H
[  161.619271][ T8991] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  161.683106][ T9009] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  161.690571][ T9009] IPv6: NLM_F_CREATE should be set when creating new route
[  161.698086][ T9009] IPv6: NLM_F_CREATE should be set when creating new route
[  161.791437][ T9033] netlink: 'syz.1.3973': attribute type 4 has an invalid length.
[  161.956895][ T9070] tc_dump_action: action bad kind
[  162.034297][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  162.055863][  T298] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  162.089349][  T298] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71
[  162.096845][  T298] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  162.108889][ T9096] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4004: bg 0: block 248: padding at end of block bitmap is not set
[  162.124201][  T298] usb 4-1: USB disconnect, device number 44
[  162.130838][  T298] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  162.140585][  T298] ftdi_sio 4-1:0.0: device disconnected
[  162.146768][ T9096] __quota_error: 489 callbacks suppressed
[  162.146779][ T9096] Quota error (device loop4): write_blk: dquota write failed
[  162.160050][ T9096] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  162.170650][ T9096] EXT4-fs error (device loop4): ext4_acquire_dquot:6225: comm syz.4.4004: Failed to acquire dquot type 1
[  162.172275][ T9116] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.189898][ T9096] EXT4-fs (loop4): 1 truncate cleaned up
[  162.192430][ T9116] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  162.202387][ T9096] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[  162.221087][ T9096] ext4 filesystem being mounted at /823/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  162.324309][ T9136] xt_CT: No such helper "netbios-ns"
[  162.359630][   T24] audit: type=1326 audit(1772433630.998:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9143 comm="syz.1.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd989bf1629 code=0x7ffc0000
[  162.379535][ T9147] netlink: 'syz.4.4027': attribute type 32 has an invalid length.
[  162.391287][   T24] audit: type=1326 audit(1772433630.998:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9143 comm="syz.1.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd989bf1629 code=0x7ffc0000
[  162.419201][ T9153] usb usb9: usbfs: process 9153 (syz.0.4028) did not claim interface 3 before use
[  162.423514][   T24] audit: type=1326 audit(1772433631.036:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9143 comm="syz.1.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fd989bf1629 code=0x7ffc0000
[  162.454140][   T24] audit: type=1326 audit(1772433631.036:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9143 comm="syz.1.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd989bf1629 code=0x7ffc0000
[  162.498774][   T24] audit: type=1326 audit(1772433631.036:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9143 comm="syz.1.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd989bf1629 code=0x7ffc0000
[  162.522941][   T24] audit: type=1400 audit(1772433631.064:874): avc:  denied  { append } for  pid=9150 comm="syz.0.4028" name="001" dev="devtmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  162.553791][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  162.601356][   T24] audit: type=1400 audit(1772433631.092:875): avc:  denied  { ioctl } for  pid=9158 comm="syz.4.4032" path="socket:[40642]" dev="sockfs" ino=40642 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  162.688913][ T9206] x_tables: unsorted entry at hook 2
[  162.725380][   T24] audit: type=1326 audit(1772433631.347:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.3.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4efd9629 code=0x7ffc0000
[  162.729100][ T9217] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  162.791774][ T9221] 9pnet: Insufficient options for proto=fd
[  162.868429][ T9235] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.875749][ T9235] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.920374][ T9235] device bridge_slave_0 left promiscuous mode
[  162.931799][ T9235] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.945120][ T9235] device bridge_slave_1 left promiscuous mode
[  162.952741][ T9235] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.979147][ T9245] device bridge3 entered promiscuous mode
[  162.986655][ T9247] device gre1 entered promiscuous mode
[  163.072971][ T9273] netlink: 'syz.0.4089': attribute type 5 has an invalid length.
[  163.265038][ T9305] FAT-fs (loop0): Directory bread(block 64) failed
[  163.271631][ T9305] FAT-fs (loop0): Directory bread(block 65) failed
[  163.278450][ T9305] FAT-fs (loop0): Directory bread(block 66) failed
[  163.286614][ T9305] FAT-fs (loop0): Directory bread(block 67) failed
[  163.293286][ T9305] FAT-fs (loop0): Directory bread(block 68) failed
[  163.299943][ T9305] FAT-fs (loop0): Directory bread(block 69) failed
[  163.306805][ T9305] FAT-fs (loop0): Directory bread(block 70) failed
[  163.315974][ T9305] FAT-fs (loop0): Directory bread(block 71) failed
[  163.325257][ T9305] FAT-fs (loop0): Directory bread(block 72) failed
[  163.332512][ T9305] FAT-fs (loop0): Directory bread(block 73) failed
[  163.362117][ T9330] __nla_validate_parse: 14 callbacks suppressed
[  163.362127][ T9330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4117'.
[  163.394018][ T9335] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  163.445183][ T9345] usb usb8: usbfs: process 9345 (syz.4.4124) did not claim interface 0 before use
[  163.460812][ T9349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4126'.
[  163.548163][ T9363] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  163.562807][ T9371] Unsupported ieee802154 address type: 0
[  163.570549][ T9363] EXT4-fs (loop4): orphan cleanup on readonly fs
[  163.577154][ T9363] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:510: comm syz.4.4133: Block bitmap for bg 0 marked uninitialized
[  163.590629][ T9363] EXT4-fs (loop4): Remounting filesystem read-only
[  163.597242][ T9363] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5661: Corrupt filesystem
[  163.606181][ T9363] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:510: comm syz.4.4133: Block bitmap for bg 0 marked uninitialized
[  163.621306][ T9376] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4138'.
[  163.627539][ T9372] FAT-fs (loop1): Directory bread(block 64) failed
[  163.636512][ T9378] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4139'.
[  163.637232][ T9372] FAT-fs (loop1): Directory bread(block 65) failed
[  163.653455][ T9372] FAT-fs (loop1): Directory bread(block 66) failed
[  163.660435][ T9372] FAT-fs (loop1): Directory bread(block 67) failed
[  163.666990][ T9372] FAT-fs (loop1): Directory bread(block 68) failed
[  163.673732][ T9372] FAT-fs (loop1): Directory bread(block 69) failed
[  163.681097][ T9372] FAT-fs (loop1): Directory bread(block 70) failed
[  163.688337][ T9372] FAT-fs (loop1): Directory bread(block 71) failed
[  163.695084][ T9372] FAT-fs (loop1): Directory bread(block 72) failed
[  163.701998][ T9363] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5661: Corrupt filesystem
[  163.702281][ T9372] FAT-fs (loop1): Directory bread(block 73) failed
[  163.759323][ T9363] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:510: comm syz.4.4133: Block bitmap for bg 0 marked uninitialized
[  163.784205][ T9363] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5661: Corrupt filesystem
[  163.793162][ T9363] EXT4-fs (loop4): 1 orphan inode deleted
[  163.798922][ T9363] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nolazytime,
[  163.812164][ T9398] syz.1.4148 (9398): /proc/9397/oom_adj is deprecated, please use /proc/9397/oom_score_adj instead.
[  163.969943][ T9427] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4165'.
[  164.002888][ T9427] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4165'.
[  164.170443][ T9465] FAT-fs (loop4): Directory bread(block 64) failed
[  164.178345][ T9465] FAT-fs (loop4): Directory bread(block 65) failed
[  164.180599][ T9472] device batadv_slave_0 entered promiscuous mode
[  164.184937][ T9465] FAT-fs (loop4): Directory bread(block 66) failed
[  164.198132][ T9465] FAT-fs (loop4): Directory bread(block 67) failed
[  164.204059][ T9472] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  164.205748][ T9465] FAT-fs (loop4): Directory bread(block 68) failed
[  164.227613][ T9465] FAT-fs (loop4): Directory bread(block 69) failed
[  164.234227][ T9465] FAT-fs (loop4): Directory bread(block 70) failed
[  164.240819][ T9465] FAT-fs (loop4): Directory bread(block 71) failed
[  164.248546][ T9465] FAT-fs (loop4): Directory bread(block 72) failed
[  164.255156][ T9465] FAT-fs (loop4): Directory bread(block 73) failed
[  164.356405][  T298] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  164.430465][ T9501] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check.
[  164.512362][ T9480] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  164.522728][ T9506] device sit0 entered promiscuous mode
[  164.528335][ T9480] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  164.528456][ T9506] netlink: 'syz.0.4202': attribute type 1 has an invalid length.
[  164.544869][ T9506] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4202'.
[  164.554579][ T9480] F2FS-fs (loop1): invalid crc value
[  164.560209][ T9510] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4203'.
[  164.575978][ T9480] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  164.613832][ T9480] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  164.621182][ T9480] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  164.750093][ T9530] EXT4-fs (loop4): Ignoring removed nobh option
[  164.759534][  T298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  164.771628][ T9534] futex_wake_op: syz.0.4211 tries to shift op by 36; fix this program
[  164.779878][  T298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  164.808669][ T9530] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000004,grpquota,sb=0x0000000000004957,errors=remount-ro,norecovery,nobh,noinit_itable,
[  164.838094][ T9530] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.4212: bg 0: block 2: invalid block bitmap
[  164.850708][ T9530] EXT4-fs (loop4): Remounting filesystem read-only
[  164.850722][ T9530] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5661: Corrupt filesystem
[  164.951695][ T9559] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4224'.
[  164.966927][ T9559] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4224'.
[  164.984704][  T298] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  165.019128][  T298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.045384][  T298] usb 3-1: Product: syz
[  165.055018][ T9579] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  165.071527][  T298] usb 3-1: Manufacturer: syz
[  165.076133][  T298] usb 3-1: SerialNumber: syz
[  165.091117][  T298] usb 3-1: config 0 descriptor??
[  165.136445][ T9591] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[  165.156449][ T9595] netlink: 'syz.4.4243': attribute type 4 has an invalid length.
[  165.178463][ T9595] netlink: 'syz.4.4243': attribute type 5 has an invalid length.
[  165.277196][ T9623] netlink: 'syz.0.4256': attribute type 4 has an invalid length.
[  165.393263][ T9654] netlink: 'syz.1.4271': attribute type 16 has an invalid length.
[  165.418793][ T9654] netlink: 'syz.1.4271': attribute type 17 has an invalid length.
[  165.436947][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  165.444512][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  165.462133][ T9654] device bridge2 left promiscuous mode
[  165.471872][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready
[  165.472166][ T9659] erofs: (device loop0): EXPERIMENTAL big pcluster feature in use. Use at your own risk!
[  165.479831][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready
[  165.499290][ T9659] erofs: (device loop0): z_erofs_load_lzma_config: lzma algorithm isn't enabled
[  165.509287][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready
[  165.519039][ T9654] device gre1 left promiscuous mode
[  165.525170][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  165.533221][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.540447][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.548892][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  165.557217][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  165.565613][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  165.573839][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  165.576108][   T53] usb 3-1: USB disconnect, device number 45
[  165.582684][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  165.613003][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  165.645600][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  165.666638][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  165.679863][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  165.714150][  T298] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  165.731003][  T298] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  165.745787][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  165.800828][ T9712] mip6: mip6_rthdr_init_state: state's mode is not 2: 0
[  165.811650][ T9714] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  165.844127][ T9714] overlayfs: missing 'lowerdir'
[  165.878090][ T9728] tc_dump_action: action bad kind
[  165.963364][ T9750] x_tables: duplicate underflow at hook 2
[  166.005245][ T9759] netlink: 'syz.4.4325': attribute type 5 has an invalid length.
[  166.058894][ T9764] FAT-fs (loop1): Directory bread(block 64) failed
[  166.067880][ T9764] FAT-fs (loop1): Directory bread(block 65) failed
[  166.074823][ T9764] FAT-fs (loop1): Directory bread(block 66) failed
[  166.082691][ T9764] FAT-fs (loop1): Directory bread(block 67) failed
[  166.090624][ T9764] FAT-fs (loop1): Directory bread(block 68) failed
[  166.093876][ T9775] overlayfs: './file0' not a directory
[  166.103028][ T9764] FAT-fs (loop1): Directory bread(block 69) failed
[  166.120721][ T9764] FAT-fs (loop1): Directory bread(block 70) failed
[  166.131644][ T9764] FAT-fs (loop1): Directory bread(block 71) failed
[  166.139512][ T9764] FAT-fs (loop1): Directory bread(block 72) failed
[  166.151684][ T9764] FAT-fs (loop1): Directory bread(block 73) failed
[  166.284340][ T9818] netlink: 'syz.4.4352': attribute type 3 has an invalid length.
[  166.530664][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  166.554861][ T9883] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables
[  166.595702][ T9883] xt_CT: You must specify a L4 protocol and not use inversions on it
[  166.694053][ T9901] device batadv_slave_0 left promiscuous mode
[  166.700398][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  166.721030][ T9901] device vlan0 left promiscuous mode
[  166.731581][ T9901] device gre1 left promiscuous mode
[  166.978535][ T9952] x_tables: duplicate underflow at hook 3
[  167.187794][ T9970] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002]
[  167.209683][ T9970] System zones: 1-3, 19-19, 35-36
[  167.215226][ T9970] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,,errors=continue
[  167.266185][ T9979] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  167.285577][ T9979] ext4 filesystem being mounted at /921/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  167.338303][ T9979] EXT4-fs error (device loop3): ext4_empty_dir:3083: inode #12: block 32: comm syz.3.4430: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=12, rec_len=106, size=2048 fake=1
[  167.461442][   T24] kauditd_printk_skb: 77 callbacks suppressed
[  167.461452][   T24] audit: type=1400 audit(1772433635.807:954): avc:  denied  { read append } for  pid=10012 comm="syz.2.4445" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  167.463346][ T9979] EXT4-fs warning (device loop3): ext4_empty_dir:3085: inode #12: comm syz.3.4430: directory missing '.'
[  167.476464][   T24] audit: type=1400 audit(1772433635.835:955): avc:  denied  { open } for  pid=10012 comm="syz.2.4445" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  167.498317][T10015] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT
[  167.561328][   T24] audit: type=1400 audit(1772433635.854:956): avc:  denied  { ioctl } for  pid=10012 comm="syz.2.4445" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  167.663323][T10041] xt_hashlimit: max too large, truncated to 1048576
[  167.712746][   T24] audit: type=1400 audit(166.981:957): avc:  denied  { create } for  pid=10052 comm="syz.0.4465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  167.758864][   T24] audit: type=1400 audit(166.981:958): avc:  denied  { setopt } for  pid=10052 comm="syz.0.4465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  167.834018][   T24] audit: type=1326 audit(167.028:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10055 comm="syz.4.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef83a629 code=0x7ffc0000
[  167.860371][   T24] audit: type=1326 audit(167.028:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10055 comm="syz.4.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef83a629 code=0x7ffc0000
[  167.915736][   T24] audit: type=1326 audit(167.028:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10055 comm="syz.4.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fb1ef83a629 code=0x7ffc0000
[  167.941758][   T24] audit: type=1326 audit(167.028:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10055 comm="syz.4.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef83a629 code=0x7ffc0000
[  167.967756][   T24] audit: type=1326 audit(167.028:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10055 comm="syz.4.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef83a629 code=0x7ffc0000
[  167.992454][T10076] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  168.008071][T10076] EXT4-fs error (device loop3): ext4_acquire_dquot:6225: comm syz.3.4476: Failed to acquire dquot type 0
[  168.009851][T10089] FAT-fs (loop1): Directory bread(block 64) failed
[  168.025879][T10089] FAT-fs (loop1): Directory bread(block 65) failed
[  168.033654][T10089] FAT-fs (loop1): Directory bread(block 66) failed
[  168.040476][T10089] FAT-fs (loop1): Directory bread(block 67) failed
[  168.047205][T10089] FAT-fs (loop1): Directory bread(block 68) failed
[  168.053823][T10089] FAT-fs (loop1): Directory bread(block 69) failed
[  168.060422][T10089] FAT-fs (loop1): Directory bread(block 70) failed
[  168.067121][T10089] FAT-fs (loop1): Directory bread(block 71) failed
[  168.079337][T10089] FAT-fs (loop1): Directory bread(block 72) failed
[  168.086052][T10089] FAT-fs (loop1): Directory bread(block 73) failed
[  168.437105][T10137] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  168.484033][    T9] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  168.499943][T10155] bridge0: port 1(dummy0) entered blocking state
[  168.506291][T10155] bridge0: port 1(dummy0) entered disabled state
[  168.514828][T10155] device dummy0 entered promiscuous mode
[  168.747325][T10227] x_tables: duplicate underflow at hook 4
[  168.754844][T10229] __nla_validate_parse: 31 callbacks suppressed
[  168.754853][T10229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4544'.
[  168.999935][T10293] netlink: 'syz.4.4579': attribute type 9 has an invalid length.
[  169.219833][T10342] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4603'.
[  169.225565][   T15] usb 2-1: new full-speed USB device number 50 using dummy_hcd
[  169.236412][  T298] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  169.239962][T10342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4603'.
[  169.263055][T10347] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  169.274879][T10342] netlink: 'syz.0.4603': attribute type 2 has an invalid length.
[  169.408328][T10375] x_tables: unsorted underflow at hook 2
[  169.492696][  T298] usb 4-1: Using ep0 maxpacket: 8
[  169.511609][T10395] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4629'.
[  169.621035][  T298] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  169.632616][  T298] usb 4-1: config 179 has no interface number 0
[  169.642648][  T298] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  169.667131][  T298] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  169.678641][   T15] usb 2-1: unable to get BOS descriptor or descriptor too short
[  169.695804][  T298] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  169.727800][   T15] usb 2-1: not running at top speed; connect to a high speed hub
[  169.736037][  T298] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  169.759795][  T298] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  169.781192][  T298] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  169.801025][  T298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.813256][   T15] usb 2-1: config 17 has an invalid interface number: 8 but max is 1
[  169.824555][   T15] usb 2-1: config 17 has 1 interface, different from the descriptor's value: 2
[  169.845921][T10282] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  169.856074][   T15] usb 2-1: config 17 has no interface number 0
[  169.862270][   T15] usb 2-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0
[  169.871325][T10455] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4658'.
[  169.898712][   T15] usb 2-1: config 17 interface 8 has no altsetting 0
[  169.972022][T10469] netlink: 'syz.2.4665': attribute type 2 has an invalid length.
[  170.069765][   T15] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[  170.101763][   T15] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.122139][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4673'.
[  170.123934][   T15] usb 2-1: Product: syz
[  170.157669][   T15] usb 2-1: Manufacturer: syz
[  170.162348][   T15] usb 2-1: SerialNumber: syz
[  170.328981][  T298] usb 4-1: USB disconnect, device number 45
[  170.336776][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  170.454339][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  170.518937][   T15] usb 2-1: selecting invalid altsetting 0
[  170.550576][   T15] usb 2-1: USB disconnect, device number 50
[  170.651867][T10550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4705'.
[  171.227581][T10653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  171.269369][T10663] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  171.316617][T10663] incfs: Can't find or create .index dir in ./file0
[  171.335725][T10663] incfs: mount failed -5
[  171.408350][T10687] netlink: 'syz.0.4773': attribute type 13 has an invalid length.
[  171.432845][T10687] netlink: 504 bytes leftover after parsing attributes in process `syz.0.4773'.
[  171.757445][T10737] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  171.774260][T10737] EXT4-fs error (device loop4): ext4_get_journal_inode:5242: comm syz.4.4798: inode #1: comm syz.4.4798: iget: illegal inode #
[  171.774668][T10750] netlink: 'syz.3.4801': attribute type 16 has an invalid length.
[  171.787781][T10737] EXT4-fs (loop4): no journal found
[  171.800711][T10737] EXT4-fs (loop4): can't get journal size
[  171.806742][T10737] EXT4-fs (loop4): failed to initialize system zone (-22)
[  171.813973][T10737] EXT4-fs (loop4): mount failed
[  171.819247][T10750] netlink: 'syz.3.4801': attribute type 17 has an invalid length.
[  171.827330][T10750] device lo entered promiscuous mode
[  171.833168][T10750] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  171.840568][T10750] device tunl0 entered promiscuous mode
[  171.846390][T10750] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  171.853758][T10750] device gre0 entered promiscuous mode
[  171.859473][T10750] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  171.867022][T10750] device gretap0 entered promiscuous mode
[  171.872899][T10750] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  171.880524][T10750] device erspan0 entered promiscuous mode
[  171.886559][T10750] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  171.894443][T10750] device ip_vti0 entered promiscuous mode
[  171.900501][T10750] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  171.908015][T10750] device ip6_vti0 entered promiscuous mode
[  171.913983][T10750] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  171.921954][T10750] device sit0 entered promiscuous mode
[  171.929704][T10750] device ip6tnl0 entered promiscuous mode
[  171.950731][T10750] device ip6gre0 entered promiscuous mode
[  171.957771][T10750] device syz_tun entered promiscuous mode
[  171.965840][T10763] netlink: 'syz.2.4808': attribute type 4 has an invalid length.
[  171.966040][T10750] device ip6gretap0 entered promiscuous mode
[  171.982650][T10750] device bridge0 entered promiscuous mode
[  171.988886][T10750] device dummy0 entered promiscuous mode
[  171.990508][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4808'.
[  171.995651][T10750] device veth0 entered promiscuous mode
[  172.010002][T10750] device veth1 entered promiscuous mode
[  172.016975][T10750] device wg0 entered promiscuous mode
[  172.023632][T10750] device wg1 entered promiscuous mode
[  172.030547][T10750] device wg2 entered promiscuous mode
[  172.059912][T10750] device veth0_to_bridge entered promiscuous mode
[  172.067577][T10750] device bridge_slave_0 entered promiscuous mode
[  172.086914][T10750] device veth1_to_bridge entered promiscuous mode
[  172.096445][T10750] device bridge_slave_1 entered promiscuous mode
[  172.121399][T10750] device veth0_to_bond entered promiscuous mode
[  172.130052][T10750] device bond_slave_0 entered promiscuous mode
[  172.136597][T10750] device veth1_to_bond entered promiscuous mode
[  172.143952][T10750] device bond_slave_1 entered promiscuous mode
[  172.150515][T10750] device veth0_to_team entered promiscuous mode
[  172.157558][T10750] device team_slave_0 entered promiscuous mode
[  172.164268][T10750] device veth1_to_team entered promiscuous mode
[  172.171548][T10750] device team_slave_1 entered promiscuous mode
[  172.178181][T10750] device veth0_to_batadv entered promiscuous mode
[  172.185712][T10750] device batadv_slave_0 entered promiscuous mode
[  172.192652][T10750] device veth1_to_batadv entered promiscuous mode
[  172.200187][T10750] device batadv_slave_1 entered promiscuous mode
[  172.207219][T10750] device xfrm0 entered promiscuous mode
[  172.213474][T10750] device veth0_to_hsr entered promiscuous mode
[  172.220349][T10750] device hsr_slave_0 entered promiscuous mode
[  172.226594][T10750] device veth1_to_hsr entered promiscuous mode
[  172.233168][T10750] device hsr_slave_1 entered promiscuous mode
[  172.239465][T10750] device veth1_virt_wifi entered promiscuous mode
[  172.246200][T10750] device veth0_virt_wifi entered promiscuous mode
[  172.253010][T10750] device veth1_vlan entered promiscuous mode
[  172.259263][T10750] device veth0_vlan left promiscuous mode
[  172.265139][T10750] device veth0_vlan entered promiscuous mode
[  172.271975][T10750] device vlan0 entered promiscuous mode
[  172.278003][T10750] device vlan1 entered promiscuous mode
[  172.283802][T10750] device veth1_macvtap left promiscuous mode
[  172.289770][T10750] device veth1_macvtap entered promiscuous mode
[  172.296433][T10750] device veth0_macvtap entered promiscuous mode
[  172.303055][T10750] device macsec0 entered promiscuous mode
[  172.309076][T10750] device vti0 entered promiscuous mode
[  172.314921][T10750] device gretap1 entered promiscuous mode
[  172.320938][T10750] device erspan0.1 entered promiscuous mode
[  172.327044][T10750] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0.1: link becomes ready
[  172.334706][T10750] device ip6tnl1 entered promiscuous mode
[  172.340874][T10750] device ip6tnl2 entered promiscuous mode
[  172.346998][T10750] device syztnl2 entered promiscuous mode
[  172.353140][T10750] device bridge1 entered promiscuous mode
[  172.359657][T10750] device gre1 entered promiscuous mode
[  172.365739][T10750] device syztnl0 entered promiscuous mode
[  172.371852][T10750] device syztnl1 entered promiscuous mode
[  172.378092][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  172.385630][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  172.393591][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  172.402035][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  172.412945][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  172.429038][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  172.437405][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  172.445494][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  172.453639][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  172.461597][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  172.469762][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  172.478170][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  172.486463][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  172.494453][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  172.502708][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  172.511033][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  172.519363][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  172.527678][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  172.535942][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  172.544060][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  172.552154][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  172.560094][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  172.568080][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  172.576616][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  172.584907][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  172.593054][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  172.600901][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  172.608393][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  172.616513][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  172.624694][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  172.633740][  T692] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  172.668818][T10799] netlink: 'syz.1.4827': attribute type 12 has an invalid length.
[  172.704065][T10810] netlink: 'syz.1.4833': attribute type 2 has an invalid length.
[  172.752318][T10822] device bridge_slave_0 entered promiscuous mode
[  172.758978][T10822] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  172.781967][T10828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4839'.
[  172.866045][   T24] kauditd_printk_skb: 955 callbacks suppressed
[  172.866057][   T24] audit: type=1326 audit(171.801:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10850 comm="syz.0.4853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6eaf0629 code=0x7ffc0000
[  172.974206][   T24] audit: type=1326 audit(171.801:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10850 comm="syz.0.4853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6eaf0629 code=0x7ffc0000
[  173.069141][   T24] audit: type=1326 audit(171.838:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10850 comm="syz.0.4853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fda6eaf0629 code=0x7ffc0000
[  173.165776][   T24] audit: type=1326 audit(171.838:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10850 comm="syz.0.4853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6eaf0629 code=0x7ffc0000
[  173.225867][   T24] audit: type=1326 audit(171.838:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10850 comm="syz.0.4853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6eaf0629 code=0x7ffc0000
[  173.294971][   T24] audit: type=1400 audit(171.885:1922): avc:  denied  { setopt } for  pid=10868 comm="syz.4.4861" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  173.337515][   T24] audit: type=1400 audit(171.960:1923): avc:  denied  { connect } for  pid=10887 comm="syz.2.4871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  173.364978][   T24] audit: type=1400 audit(171.969:1924): avc:  denied  { read } for  pid=10884 comm="syz.3.4870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  173.392653][   T20] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  173.412768][   T24] audit: type=1400 audit(172.063:1925): avc:  denied  { checkpoint_restore } for  pid=10919 comm="syz.2.4887" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  173.445226][   T24] audit: type=1326 audit(172.297:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10965 comm="syz.3.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4efd9629 code=0x7ffc0000
[  173.454929][T10985] usb usb5: usbfs: process 10985 (syz.3.4917) did not claim interface 0 before use
[  173.545474][T10999] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  173.616244][T11020] device lo entered promiscuous mode
[  173.632038][T11020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  173.665986][T11022] device gretap0 entered promiscuous mode
[  173.681252][   T20] usb 1-1: Using ep0 maxpacket: 32
[  173.760874][T11027] ==================================================================
[  173.768996][T11027] BUG: KASAN: use-after-free in __ext4_iget+0x381/0x44c0
[  173.776038][T11027] Read of size 8 at addr ffff88811cbfc588 by task syz.1.4940/11027
[  173.783920][T11027] 
[  173.786249][T11027] CPU: 1 PID: 11027 Comm: syz.1.4940 Tainted: G        W         syzkaller #0
[  173.795085][T11027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  173.805145][T11027] Call Trace:
[  173.808438][T11027]  __dump_stack+0x21/0x24
[  173.812758][T11027]  dump_stack_lvl+0x1a7/0x208
[  173.817429][T11027]  ? show_regs_print_info+0x18/0x18
[  173.822977][T11027]  ? thaw_kernel_threads+0x220/0x220
[  173.828349][T11027]  ? _raw_spin_lock+0x94/0xf0
[  173.833022][T11027]  print_address_description+0x7f/0x2c0
[  173.838559][T11027]  ? __ext4_iget+0x381/0x44c0
[  173.843222][T11027]  kasan_report+0xe2/0x130
[  173.847626][T11027]  ? __ext4_iget+0x381/0x44c0
[  173.852313][T11027]  __asan_report_load8_noabort+0x14/0x20
[  173.857939][T11027]  __ext4_iget+0x381/0x44c0
[  173.862438][T11027]  ? __kasan_check_write+0x14/0x20
[  173.867539][T11027]  ? _raw_write_lock+0x94/0xf0
[  173.872291][T11027]  ? _raw_write_trylock+0x150/0x150
[  173.877484][T11027]  ? __proc_create+0x570/0x8e0
[  173.882249][T11027]  ? __kasan_check_write+0x14/0x20
[  173.887363][T11027]  ? ext4_get_projid+0x140/0x140
[  173.892304][T11027]  ? _raw_write_unlock+0x2b/0x60
[  173.897239][T11027]  ? proc_register+0x34d/0x4e0
[  173.901999][T11027]  ext4_enable_quotas+0x33c/0x6d0
[  173.907022][T11027]  ext4_fill_super+0x84ad/0x8d70
[  173.911960][T11027]  ? ext4_mount+0x40/0x40
[  173.916284][T11027]  ? vscnprintf+0x80/0x80
[  173.920604][T11027]  ? set_blocksize+0x1ed/0x3b0
[  173.925346][T11027]  ? sb_set_blocksize+0xaa/0xf0
[  173.930176][T11027]  mount_bdev+0x28b/0x3a0
[  173.934479][T11027]  ? ext4_mount+0x40/0x40
[  173.938792][T11027]  ext4_mount+0x34/0x40
[  173.942926][T11027]  legacy_get_tree+0xed/0x190
[  173.947579][T11027]  ? ext4_chksum+0x180/0x180
[  173.952159][T11027]  vfs_get_tree+0x89/0x260
[  173.956559][T11027]  do_new_mount+0x25a/0xa20
[  173.961213][T11027]  path_mount+0x585/0xc90
[  173.965537][T11027]  __se_sys_mount+0x320/0x390
[  173.970191][T11027]  ? __x64_sys_mount+0xd0/0xd0
[  173.974929][T11027]  __x64_sys_mount+0xbf/0xd0
[  173.979494][T11027]  do_syscall_64+0x31/0x40
[  173.983890][T11027]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  173.989755][T11027] RIP: 0033:0x7fd989bf28ca
[  173.994150][T11027] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  174.013736][T11027] RSP: 002b:00007fd98864be58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  174.022149][T11027] RAX: ffffffffffffffda RBX: 00007fd98864bee0 RCX: 00007fd989bf28ca
[  174.030119][T11027] RDX: 0000200000000200 RSI: 0000200000000bc0 RDI: 00007fd98864bea0
[  174.038214][T11027] RBP: 0000200000000200 R08: 00007fd98864bee0 R09: 0000000000200000
[  174.046172][T11027] R10: 0000000000200000 R11: 0000000000000246 R12: 0000200000000bc0
[  174.054213][T11027] R13: 00007fd98864bea0 R14: 0000000000000baf R15: 0000200000000040
[  174.062163][T11027] 
[  174.064477][T11027] Allocated by task 4892:
[  174.068787][T11027]  __kasan_slab_alloc+0xbd/0xf0
[  174.073615][T11027]  slab_post_alloc_hook+0x5d/0x2f0
[  174.078703][T11027]  kmem_cache_alloc+0x162/0x2d0
[  174.083545][T11027]  f2fs_alloc_inode+0x26/0x410
[  174.088303][T11027]  iget_locked+0x146/0x7d0
[  174.092702][T11027]  f2fs_iget+0x55/0x4b60
[  174.096921][T11027]  f2fs_fill_super+0x40f7/0x73f0
[  174.101857][T11027]  mount_bdev+0x28b/0x3a0
[  174.106173][T11027]  f2fs_mount+0x34/0x40
[  174.110317][T11027]  legacy_get_tree+0xed/0x190
[  174.114969][T11027]  vfs_get_tree+0x89/0x260
[  174.119360][T11027]  do_new_mount+0x25a/0xa20
[  174.123835][T11027]  path_mount+0x585/0xc90
[  174.128162][T11027]  __se_sys_mount+0x320/0x390
[  174.132823][T11027]  __x64_sys_mount+0xbf/0xd0
[  174.137386][T11027]  do_syscall_64+0x31/0x40
[  174.141779][T11027]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  174.147642][T11027] 
[  174.149946][T11027] Last potentially related work creation:
[  174.155641][T11027]  kasan_save_stack+0x3a/0x60
[  174.160296][T11027]  __kasan_record_aux_stack+0xd2/0x100
[  174.165733][T11027]  kasan_record_aux_stack_noalloc+0xb/0x10
[  174.171535][T11027]  call_rcu+0x11a/0x10b0
[  174.175754][T11027]  evict+0x881/0x930
[  174.179625][T11027]  iput+0x638/0x7c0
[  174.183415][T11027]  f2fs_put_super+0x6a8/0xc20
[  174.188070][T11027]  generic_shutdown_super+0x149/0x320
[  174.193417][T11027]  kill_block_super+0x7f/0xf0
[  174.198072][T11027]  kill_f2fs_super+0x303/0x3b0
[  174.202820][T11027]  deactivate_locked_super+0xa0/0x100
[  174.208263][T11027]  deactivate_super+0xaf/0xe0
[  174.212922][T11027]  cleanup_mnt+0x45b/0x510
[  174.217403][T11027]  __cleanup_mnt+0x19/0x20
[  174.221795][T11027]  task_work_run+0x127/0x190
[  174.226357][T11027]  exit_to_user_mode_loop+0xcb/0xe0
[  174.231526][T11027]  exit_to_user_mode_prepare+0x76/0xa0
[  174.236958][T11027]  syscall_exit_to_user_mode+0x1d/0x40
[  174.242390][T11027]  do_syscall_64+0x3d/0x40
[  174.246784][T11027]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  174.252644][T11027] 
[  174.255034][T11027] Second to last potentially related work creation:
[  174.261600][T11027]  kasan_save_stack+0x3a/0x60
[  174.266340][T11027]  __kasan_record_aux_stack+0xd2/0x100
[  174.272209][T11027]  kasan_record_aux_stack_noalloc+0xb/0x10
[  174.277988][T11027]  call_rcu+0x11a/0x10b0
[  174.282226][T11027]  evict+0x881/0x930
[  174.286098][T11027]  iput+0x638/0x7c0
[  174.289887][T11027]  f2fs_put_super+0x667/0xc20
[  174.294536][T11027]  generic_shutdown_super+0x149/0x320
[  174.299971][T11027]  kill_block_super+0x7f/0xf0
[  174.304654][T11027]  kill_f2fs_super+0x303/0x3b0
[  174.309421][T11027]  deactivate_locked_super+0xa0/0x100
[  174.314764][T11027]  fc_drop_locked+0x7f/0x90
[  174.319242][T11027]  vfs_get_tree+0x1c1/0x260
[  174.323716][T11027]  do_new_mount+0x25a/0xa20
[  174.328189][T11027]  path_mount+0x585/0xc90
[  174.332492][T11027]  __se_sys_mount+0x320/0x390
[  174.337153][T11027]  __x64_sys_mount+0xbf/0xd0
[  174.341716][T11027]  do_syscall_64+0x31/0x40
[  174.346133][T11027]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  174.351992][T11027] 
[  174.354383][T11027] The buggy address belongs to the object at ffff88811cbfc060
[  174.354383][T11027]  which belongs to the cache f2fs_inode_cache of size 1520
[  174.368929][T11027] The buggy address is located 1320 bytes inside of
[  174.368929][T11027]  1520-byte region [ffff88811cbfc060, ffff88811cbfc650)
[  174.382343][T11027] The buggy address belongs to the page:
[  174.387969][T11027] page:ffffea000472fe00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88811cbfed70 pfn:0x11cbf8
[  174.399476][T11027] head:ffffea000472fe00 order:3 compound_mapcount:0 compound_pincount:0
[  174.407774][T11027] flags: 0x4000000000010200(slab|head)
[  174.413209][T11027] raw: 4000000000010200 dead000000000100 dead000000000122 ffff8881029c7980
[  174.421857][T11027] raw: ffff88811cbfed70 0000000080130006 00000001ffffffff 0000000000000000
[  174.430407][T11027] page dumped because: kasan: bad access detected
[  174.436791][T11027] page_owner tracks the page as allocated
[  174.442490][T11027] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 450, ts 34565615280, free_ts 0
[  174.462944][T11027]  prep_new_page+0x179/0x180
[  174.467508][T11027]  get_page_from_freelist+0x223b/0x23d0
[  174.473027][T11027]  __alloc_pages_nodemask+0x290/0x620
[  174.478378][T11027]  new_slab+0x84/0x3f0
[  174.482448][T11027]  ___slab_alloc+0x2a6/0x450
[  174.487017][T11027]  __slab_alloc+0x63/0xa0
[  174.491325][T11027]  kmem_cache_alloc+0x1ac/0x2d0
[  174.496152][T11027]  f2fs_alloc_inode+0x26/0x410
[  174.500905][T11027]  iget_locked+0x146/0x7d0
[  174.505297][T11027]  f2fs_iget+0x55/0x4b60
[  174.509513][T11027]  f2fs_fill_super+0x4d6f/0x73f0
[  174.514442][T11027]  mount_bdev+0x28b/0x3a0
[  174.518746][T11027]  f2fs_mount+0x34/0x40
[  174.522875][T11027]  legacy_get_tree+0xed/0x190
[  174.527527][T11027]  vfs_get_tree+0x89/0x260
[  174.531950][T11027]  do_new_mount+0x25a/0xa20
[  174.536439][T11027] page_owner free stack trace missing
[  174.541791][T11027] 
[  174.544098][T11027] Memory state around the buggy address:
[  174.549706][T11027]  ffff88811cbfc480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  174.557758][T11027]  ffff88811cbfc500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  174.565794][T11027] >ffff88811cbfc580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  174.573838][T11027]                       ^
[  174.578228][T11027]  ffff88811cbfc600: fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc
[  174.586261][T11027]  ffff88811cbfc680: fc fc fc fc fc fc fc fc fc fc 00 00 00 00 00 00
[  174.594312][T11027] ==================================================================
[  174.602344][T11027] Disabling lock debugging due to kernel taint
[  174.630124][T11027] EXT4-fs warning (device loop1): ext4_enable_quotas:6490: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix.
[  174.645071][   T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  174.656963][T11027] EXT4-fs (loop1): mount failed
[  174.661903][   T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  174.671815][   T20] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  174.681638][   T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.692966][   T20] usb 1-1: config 0 descriptor??
[  174.739848][   T20] hub 1-1:0.0: USB hub found
[  174.812576][T11034] F2FS-fs (loop4): Found nat_bits in checkpoint
[  174.836893][T11034] F2FS-fs (loop4): recover fsync data on readonly fs
[  174.843797][T11034] F2FS-fs (loop4): Mounted with checkpoint version = 1b41e955
[  174.870525][T11034] F2FS-fs (loop4): Inconsistent error blkaddr:5633, sit bitmap:0
[  174.878283][T11034] CPU: 0 PID: 11034 Comm: syz.4.4942 Tainted: G    B   W         syzkaller #0
[  174.887112][T11034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  174.897147][T11034] Call Trace:
[  174.900422][T11034]  __dump_stack+0x21/0x24
[  174.904749][T11034]  dump_stack_lvl+0x1a7/0x208
[  174.909404][T11034]  ? f2fs_get_next_page_offset+0x760/0x760
[  174.915193][T11034]  ? show_regs_print_info+0x18/0x18
[  174.920377][T11034]  dump_stack+0x15/0x1c
[  174.924546][T11034]  f2fs_is_valid_blkaddr+0xc49/0x1360
[  174.929900][T11034]  f2fs_get_read_data_page+0x3e7/0x7a0
[  174.935336][T11034]  ? f2fs_get_block+0x140/0x140
[  174.940166][T11034]  f2fs_find_data_page+0x18f/0x3f0
[  174.945437][T11034]  ? __f2fs_find_entry+0x6b7/0xda0
[  174.950543][T11034]  __f2fs_find_entry+0x6d4/0xda0
[  174.955468][T11034]  f2fs_lookup+0x27d/0xd30
[  174.959868][T11034]  ? f2fs_encrypted_symlink_getattr+0x40/0x40
[  174.965913][T11034]  ? d_hash_and_lookup+0x1f0/0x1f0
[  174.971006][T11034]  ? preempt_count_add+0x90/0x1b0
[  174.974095][   T20] hub 1-1:0.0: config failed, hub has too many ports! (err -19)
[  174.976016][T11034]  ? f2fs_encrypted_symlink_getattr+0x40/0x40
[  174.976035][T11034]  path_openat+0x1140/0x31c0
[  174.994250][T11034]  ? do_filp_open+0x410/0x410
[  174.998906][T11034]  do_filp_open+0x1e2/0x410
[  175.003386][T11034]  ? vfs_tmpfile+0x2c0/0x2c0
[  175.007954][T11034]  ? get_unused_fd_flags+0x92/0xa0
[  175.013041][T11034]  do_sys_openat2+0x19f/0x750
[  175.017694][T11034]  ? do_sys_open+0xe0/0xe0
[  175.022089][T11034]  ? __kasan_check_write+0x14/0x20
[  175.027266][T11034]  ? switch_fpu_return+0x19c/0x330
[  175.032360][T11034]  ? fpu__clear_all+0x20/0x20
[  175.037012][T11034]  ? ____fput+0x15/0x20
[  175.041146][T11034]  __x64_sys_openat+0x136/0x160
[  175.045971][T11034]  do_syscall_64+0x31/0x40
[  175.050368][T11034]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  175.056234][T11034] RIP: 0033:0x7fb1ef83a629
[  175.060629][T11034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  175.080216][T11034] RSP: 002b:00007fb1ee295028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  175.088825][T11034] RAX: ffffffffffffffda RBX: 00007fb1efab3fa0 RCX: 00007fb1ef83a629
[  175.096861][T11034] RDX: 0000000000000040 RSI: 0000200000000180 RDI: ffffffffffffff9c
[  175.104819][T11034] RBP: 00007fb1ef8d0b39 R08: 0000000000000000 R09: 0000000000000000
[  175.112781][T11034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  175.120738][T11034] R13: 00007fb1efab4038 R14: 00007fb1efab3fa0 R15: 00007ffdbb4d7098
[  175.294671][   T20] usbhid 1-1:0.0: can't add hid device: -71
[  175.300646][   T20] usbhid: probe of 1-1:0.0 failed with error -71
[  175.337834][   T20] usb 1-1: USB disconnect, device number 46
[  176.779959][    C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  179.515253][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!