last executing test programs:

5m51.731440453s ago: executing program 1 (id=584):
socket$inet_udplite(0x2, 0x2, 0x88)

5m51.731352963s ago: executing program 3 (id=585):
sched_getparam(0x0, &(0x7f0000000000))

5m51.711080735s ago: executing program 1 (id=588):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/yama/ptrace_scope', 0x2, 0x0)

5m51.710914505s ago: executing program 1 (id=591):
socket$inet6_mptcp(0xa, 0x1, 0x106)

5m51.710763645s ago: executing program 3 (id=592):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/virtual_nci', 0x2, 0x0)

5m51.685819086s ago: executing program 3 (id=595):
sync()

5m51.685564596s ago: executing program 1 (id=596):
mlock2(0x0, 0x0, 0x0)

5m51.685210606s ago: executing program 1 (id=599):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse', 0x2, 0x0)

5m51.558203714s ago: executing program 1 (id=603):
mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

5m51.370713965s ago: executing program 3 (id=607):
mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

5m51.250722442s ago: executing program 3 (id=611):
set_robust_list(&(0x7f0000000000), 0x0)

5m51.194134485s ago: executing program 3 (id=614):
mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

4.712678475s ago: executing program 6 (id=12489):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20882, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5)

4.692747456s ago: executing program 6 (id=12491):
pipe(&(0x7f0000000e00)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000980)=[{&(0x7f00000004c0)="18e41dbb2ed7", 0x6}, {&(0x7f0000000080)="846c95", 0x3}, {&(0x7f00000002c0)="de", 0x1}, {&(0x7f0000000580)="36a982a2a7", 0x5}, {&(0x7f0000000e40)="d9", 0x1}], 0x5, 0xc)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000180))

4.637156079s ago: executing program 6 (id=12492):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r1, 0x1, 0x70bd2a, 0x259fdc20, {}, [@ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c891}, 0x20000000)

4.616129141s ago: executing program 6 (id=12494):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2d51, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000c40)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0)

4.45186458s ago: executing program 2 (id=12501):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000080), 0x4)

4.355379736s ago: executing program 2 (id=12502):
r0 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(r0, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000380)=@delchain={0x24, 0x65, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {0xa, 0xfff2}, {0x1d, 0xfff8}}}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x24000804)

4.342552336s ago: executing program 2 (id=12503):
socket$nl_route(0x10, 0x3, 0x0)
select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60})
close(0x3)

4.194633345s ago: executing program 2 (id=12504):
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x81, 0x1, "d6"}, 0x0, 0x0, 0x0, 0x0})
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ab99dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c41ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42cea68bef67422ecc13968a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f381ba6e0363d0a4a8a813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c60"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000140)="13ca0d813f6326f51b588bb6281d", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.634263048s ago: executing program 2 (id=12508):
syz_mount_image$f2fs(&(0x7f0000010600), &(0x7f0000010640)='./file0\x00', 0x0, &(0x7f0000010680)=ANY=[], 0x4, 0x105c5, &(0x7f0000020cc0)="$eJzs3M1rI/UfB/BP2u0+/fa3FvHgSQdEaMGETdtdXE9Vd9kV7FJ8OIiIpkkasptkSpO2cW8evIn/hTcPojev4p8heBE8eBK8CUrmO5WtD+Ca0uj29YLZ98x3Zj7zmWUu30maAE6txeynHytxOS5ExHxEXIoo1ivlUlhP8WREPB0Rcw8slXL8t4GzEXExIi5PiqealXLX29+/cPv6B7c+/PjLb5/a/uyrT2d318CsPRsR/Z20ftBPmXdS3i3HG/vdIvtr+2WmHf175Xae8qC9VVQ4aBwe1yhytZOOz3f2hpPc7jWak+x0t4vxnUG64HC/c1inOOFuY7fYbrW3iuwO8yI791Nf4zLvD0epTqus935RPkajw0zj7XE73c/OvSKbg1E5nurmrfZ4kvtllpeLZt5rFX1s/eP/5n+9V7uDvXG2394ddvNBdrVWf75Wv1at7+at9qi9Vm30W9fWsqVOb3JYddRu9Nc7ed7ptWvNvL+cLXWazWq9ni3daG91G4OsXq+t1q5Ury6Xa89lt+68mfVa2dIkX+oO9kbd3jDbznezdMZytlJbvb6cPVPPXt/YzDZfu3lzY/ONd2+8defFjVdeLg/6Q1vZ0sqVlZVq/Up1pb7s/qcxrkx3Pqec5wfgoZn/A7Ng/m/+H+a/p/7+zf+ZiucHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODU+m7hi9vFymLa/l85/v9y6PFyuxIRcxHxy5+Yj7NHas6XdRb+4viF3/XwdSWKCpNrnCuXixGxXi4/P5b2AQAAAA/vm88/eSfN1tM/i7NuiJOUXtrMXXrvmOpVImJh8YdjqBLly6Z4YvquksnzfSbGU1Y57K14gXV++q6S4pXbmeOq9rfMH4nzD0QlxdyJtgMAAJyIozOBk52FAAAAcJI+mnUDzEbxaWb5XfzyC/znUpQfCF44sgUAAAD8B/mTegAAAHj0FfN/v/8HAAAAj7b0+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+ycy85qQRRGIAPj75wX5EYJ+zGIZswcQkOXQhbcE5kyNhlOMOZSzBg6CoT22CiqaaJ5PuSpqiG/JxOmJzqBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH9FQtZ4/3d1elOZttmXaOBgAAANhnXS1n9ZtJmv/N+//nXed53ouIfkTs690H8auROcg51Sffrz7U8BBRJ+x+Y5S3PxFxmbeXs/QZAAAA8H2rxXSeuvX0Mjl2QXQpLdr0/123lNeLiGry3EJK5MWmuCivKtn9v4dxW5jyVlu9gDUuryqpl9yGbaV9yaAxjN8NvTT0Oy0HAADoRLMT6LYLAQAAoEs3xy6A46jPZuZr8fMF/KM05BOCvxszAAAA4AdySz0AAACcvrr/9/w/AAAAOG3p+X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAc0rpazlaL6bw0Z7Mt087RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Mr+vKNACIRBGOxd35nM/Q8rDZqamlSB8PE3BgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALz53V/+T0yNM8nca2PpeSRZOzW2To29c+PoD+Pr1wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/vzkgIhEARRMGf876Tvf1hJ0DOIEAENjypq0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX/S7X/5PTI0zydxpY+l4JFm7amxdNfYeNI4ejLd/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzt3EBpHFccB+M1udmsL4hpjkKhQsamCmM1uaKEXwYMQPKgHLx7TdFtjt1HbHJKSSy7evHrXm2BRyKW3evRiz4XgoT0WFqnQszKzM+lrmtQt6Mym/T54+/5ZHjPvvYWQ374hAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUBi8H44XdT19aQ3rWv7erXuby/v1qbur/am0pXVS7rQPnVfy/pNr1z6L9zCZrm5OAAAAPH3qRb4PIdxubC+mfa2V5f/ZYkya+TefH9ZFnj8o/9/otaeK/L8z8/F7uzdqDe/TCCGcX+n35ktb4Xg7EbpZ37mz82e8h3vHvTDCtSayzyf7hqaefWy1D7deGjSyXU++vXnzg2ZWHvnvVwEAPKm5os+L4u+jtO9UOTEAnloTeQtR/q+3qp0TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQBkGW+Gdok5CCDMTD+rUrXuby/v1N3rtqbur/azt/Ha9FV8zvUQjhHB+pd+bL3Et4+xE6GZ9/9eTr8V7uHfclY2rF5f6/d5lhUKh2C0q+KUFAMCh1chbmutvN7YX0/eSyRD+/v7h/P9WVIfH5P8i+6ft1fXByfhecf7vlLbC8Vbk/+3k5414D/eOa69d+qp9ZePquyuXli70LvRWO2dOnT59ZqGzMN/Ovk9p+1YFAACAgzXzFuf/2uSj5//HojqMmP8//eH1bnyvuvz/iCL/v3z2j+7j8v+DQ78KJgkAAPCMePH4/b+Sfd5Pms2wvrS2drkzfN39uTt8rWCqT+xI3uL8X5+selYAAABAGQZbyUPn/+eiOvzL+f/U+o9Zu/7N3NfxNeshhKP5+f/c8pf9c+UtZ2wV5//3P5/5fbTz//+vqGD5AAAAlORo3uLz/0b2/H/tjWJMLYTw9pvDOv83gCM9/z/bPfVTfK/4+f+F8pY4lmrTw/0o8v/Fs9/NHpT/s7HTIUxMVzRZAAAADr3n8pbm/zuN7cUvfjn2UdPz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8w/7c2yYMhHEcfn1JlLhNRkhvJTADDRWCEfiQkCx5BgZgIRoqWotFYAWQ4FzTGYrnaf6/4op7AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICXd3n44i0iikhdpkjjzc/pPSI+Im3bdvR5y2J3PjZf95ztD5Oc3zH9LSOijKKPcwAAeld1m2O1rpd/ef/zDvIO81bzpl4889MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFd24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rdPo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMYKAAD//6pThLU=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x1ce)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x6, 0x4})

2.852053603s ago: executing program 4 (id=12528):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x118, 0x24, 0x0, 0x0)

2.798409627s ago: executing program 4 (id=12530):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES8, @ANYRESHEX, @ANYRESDEC, @ANYRES64], 0x5, 0x25d, &(0x7f0000000f40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, 0x0)

2.761753549s ago: executing program 0 (id=12533):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000)

2.678721644s ago: executing program 4 (id=12534):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9})
fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x7, 0x401})

2.678398804s ago: executing program 4 (id=12535):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xeac}]}, 0x1c}}, 0x0)

2.677979804s ago: executing program 0 (id=12536):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0x6fd})

2.652763145s ago: executing program 4 (id=12537):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000180100002020001000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x7b)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e563a3", 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.643628596s ago: executing program 0 (id=12538):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r0 = io_uring_setup(0x3458, &(0x7f0000000580)={0x0, 0xffffeffa, 0x18, 0x2, 0x1})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/8, 0x8}], 0x1)

2.584763169s ago: executing program 0 (id=12539):
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000740)={0x1, {{0xa, 0x4e23, 0x0, @mcast1}}}, 0x90)

2.5843682s ago: executing program 0 (id=12540):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000600)=0x3)
ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000100)={0x21})

1.257848427s ago: executing program 5 (id=12541):
r0 = add_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$revoke(0x3, r0)
keyctl$read(0xb, r0, 0x0, 0x0)

1.249735797s ago: executing program 6 (id=12542):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)

1.21069562s ago: executing program 5 (id=12543):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x9, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x380000, @empty}, 0x1c)

1.21014946s ago: executing program 5 (id=12544):
unshare(0x20000400)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffff8, 0x0)

1.1940867s ago: executing program 5 (id=12545):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000011840)={0x1bc, r1, 0x21, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x72}}}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x194, 0x111, 0x0, 0x1, {0x190, 0x5, 0x0, 0x1, [{0x18c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x108, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x100, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x0, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0xc0}, 0x8000)

1.110742895s ago: executing program 2 (id=12546):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x19, 0x0, 0x0)

48.108198ms ago: executing program 4 (id=12547):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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")
setxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000000)={{}, {}, [{0x2, 0x1}], {0x4, 0x7}}, 0x2c, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x100)

32.100509ms ago: executing program 6 (id=12548):
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7276d8", 0x40, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "8ee5233262bfbfd04e1462a0c7cb4974"}, @md5sig={0x13, 0x12, "ffc83bee760e6591385ccf63babe1731"}, @sack_perm={0x4, 0x2}, @eol, @sack={0x5, 0x2}]}}}}}}}}, 0x0)
pidfd_send_signal(r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x785}, 0x0)

29.168059ms ago: executing program 5 (id=12549):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0), 0x181882, 0x0)
getdents64(r0, 0x0, 0x0)

390.14µs ago: executing program 5 (id=12550):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x9, 0x9}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37)

0s ago: executing program 0 (id=12551):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001700), 0x701000, 0x0)
preadv(r0, 0x0, 0x0, 0x23a5, 0x2)

kernel console output (not intermixed with test programs):

runcate cleaned up
[  330.744832][T22161] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  330.775455][T22161] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  330.792995][  T890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  330.804090][  T890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  330.821916][  T890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  330.829526][T22161] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: writeback.
[  330.837429][  T890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  330.839594][T22161] ext4 filesystem being remounted at /2136/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  330.847160][  T890] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.863272][  T890] bridge0: port 1(bridge_slave_0) entered forwarding state
[  330.871039][  T890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  330.879784][  T890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  330.888258][  T890] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.895337][  T890] bridge0: port 2(bridge_slave_1) entered forwarding state
[  330.902837][  T890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  330.912085][  T890] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  330.920920][  T890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  330.929521][  T890] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  330.947345][  T890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  330.971415][  T890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  330.975548][   T30] audit: type=1400 audit(1769647949.787:12162): avc:  denied  { read } for  pid=22171 comm="syz.5.10832" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  330.981415][  T890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  331.026733][   T30] audit: type=1400 audit(1769647949.829:12163): avc:  denied  { open } for  pid=22171 comm="syz.5.10832" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  331.067447][  T890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  331.092699][  T890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  331.102710][  T890] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  331.113372][  T890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  331.130898][  T890] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  331.142120][  T890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  331.151334][  T890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  331.160178][  T890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  331.169136][  T890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  331.179020][  T890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  331.188033][  T890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  331.196738][  T890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  331.205279][  T890] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  331.213349][  T890] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  331.221071][  T890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  331.230002][  T890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  331.238936][  T890] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  331.247037][  T890] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready
[  331.255518][  T890] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready
[  331.263654][  T890] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready
[  331.271654][  T890] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready
[  331.294505][   T26] ip6_tunnel: K xmit: Local address not yet configured!
[  331.306240][   T26] ip6_tunnel: K xmit: Local address not yet configured!
[  331.338912][   T26] ip6_tunnel: K xmit: Local address not yet configured!
[  331.387511][   T26] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  331.418013][T22202] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10845'.
[  331.458119][   T30] audit: type=1400 audit(1769647950.301:12164): avc:  denied  { create } for  pid=22203 comm="syz.0.10848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  331.459109][T22205] device vti0 entered promiscuous mode
[  331.530880][   T30] audit: type=1326 audit(1769647950.343:12165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22209 comm="syz.5.10850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ac673eb9 code=0x7ffc0000
[  331.598085][T22225] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  331.622374][   T26] ip6_tunnel: K xmit: Local address not yet configured!
[  331.629610][   T30] audit: type=1326 audit(1769647950.343:12166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22209 comm="syz.5.10850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f85ac673eb9 code=0x7ffc0000
[  331.686009][T22239] loop6: detected capacity change from 0 to 16
[  331.707392][   T30] audit: type=1326 audit(1769647950.343:12167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22209 comm="syz.5.10850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ac673eb9 code=0x7ffc0000
[  331.757783][T22250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10868'.
[  331.767109][T22239] erofs: (device loop6): mounted with root inode @ nid 36.
[  331.791722][T22253] xt_TCPMSS: Only works on TCP SYN packets
[  331.799362][T22250] mip6: mip6_rthdr_init_state: spi is not 0: 133
[  331.832567][T22258] netlink: 'syz.6.10873': attribute type 3 has an invalid length.
[  331.986243][   T26] ip6_tunnel: K xmit: Local address not yet configured!
[  332.005478][T22293] xt_bpf: check failed: parse error
[  332.241213][T22339] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.267844][T22339] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  332.292996][   T26] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  332.643686][T22397] device sit0 entered promiscuous mode
[  332.663624][T22397] netlink: 1 bytes leftover after parsing attributes in process `syz.5.10941'.
[  332.679056][   T26] usb 7-1: new high-speed USB device number 98 using dummy_hcd
[  332.838296][T22419] x_tables: unsorted underflow at hook 3
[  332.917179][   T26] usb 7-1: Using ep0 maxpacket: 16
[  333.031611][   T26] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  333.050500][   T26] usb 7-1: config 0 has no interfaces?
[  333.122836][T22457] loop0: detected capacity change from 0 to 256
[  333.139180][T22457] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22
[  333.177623][T22457] SELinux: security_context_str_to_sid(system_u) failed for (dev loop0, type exfat) errno=-22
[  333.203596][   T26] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  333.214846][   T26] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.223372][   T26] usb 7-1: Product: syz
[  333.227838][   T26] usb 7-1: Manufacturer: syz
[  333.233283][   T26] usb 7-1: SerialNumber: syz
[  333.253429][   T26] usb 7-1: config 0 descriptor??
[  333.266794][T22316] loop4: detected capacity change from 0 to 131072
[  333.279754][ T2448] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  333.287764][ T2448] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  333.313712][T22316] F2FS-fs (loop4): invalid crc value
[  333.354017][T22316] F2FS-fs (loop4): Found nat_bits in checkpoint
[  333.385084][T22482] xt_time: invalid argument - start or stop time greater than 23:59:59
[  333.411121][T22316] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  333.442855][T22316] F2FS-fs (loop4): Corrupted max_depth of 3: 16842753
[  333.491499][ T2448] usb 7-1: USB disconnect, device number 98
[  333.554926][   T26] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  333.718823][T22527] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11004'.
[  333.750957][T22533] netlink: 'syz.5.11007': attribute type 15 has an invalid length.
[  334.016314][T22570] netlink: 'syz.6.11024': attribute type 30 has an invalid length.
[  334.079385][T22581] netlink: 'syz.5.11030': attribute type 13 has an invalid length.
[  334.136088][T22588] netlink: 68 bytes leftover after parsing attributes in process `syz.6.11032'.
[  334.151311][T22592] netlink: 'syz.5.11035': attribute type 1 has an invalid length.
[  334.185818][T22592] netlink: 'syz.5.11035': attribute type 3 has an invalid length.
[  334.209103][T22590] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  334.229525][T22590] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  334.292154][T22590] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  334.308900][T22590] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  334.327028][T22590] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  334.339207][T22590] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  334.356627][T22590] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  334.389041][T22590] bridge0: port 1(dummy0) entered blocking state
[  334.395500][T22590] bridge0: port 1(dummy0) entered listening state
[  334.434188][T22590] device veth1_macvtap left promiscuous mode
[  334.441641][T22590] device veth1_macvtap entered promiscuous mode
[  334.460472][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  334.472012][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  334.508785][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  334.534748][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  334.548554][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  334.561792][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.568938][   T10] bridge0: port 2(bridge_slave_1) entered listening state
[  334.593019][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  334.604968][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  334.623582][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  334.640629][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  334.655438][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  334.669633][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  334.683598][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  334.697662][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  334.711241][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  334.726174][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  334.742270][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  334.750896][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  334.759408][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  334.768571][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  334.776803][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  334.785177][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  334.793917][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  334.802293][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  334.811011][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  334.819603][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  334.828033][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  334.836454][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  334.870358][   T60] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  335.062695][T22678] xt_hashlimit: Unknown mode mask 100000, kernel too old?
[  335.070003][   T60] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  335.094773][T22682] device macsec0 entered promiscuous mode
[  335.144993][T22689] netlink: 'syz.2.11082': attribute type 2 has an invalid length.
[  335.183930][    C1] ip6_tunnel: K xmit: Local address not yet configured!
[  335.262043][T22703] xt_nat: multiple ranges no longer supported
[  335.487363][T22749] netlink: 'syz.5.11113': attribute type 5 has an invalid length.
[  335.525541][T22749] netlink: 144 bytes leftover after parsing attributes in process `syz.5.11113'.
[  335.550688][T22749] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11113'.
[  335.570881][   T30] kauditd_printk_skb: 27 callbacks suppressed
[  335.570897][   T30] audit: type=1326 audit(2000000002.760:12195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22757 comm="syz.4.11119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd75adfeb9 code=0x7ffc0000
[  335.680346][   T30] audit: type=1326 audit(2000000002.792:12196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22757 comm="syz.4.11119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fdd75adfeb9 code=0x7ffc0000
[  335.719676][T22775] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11124'.
[  335.725813][   T30] audit: type=1326 audit(2000000002.792:12197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22757 comm="syz.4.11119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd75adfeb9 code=0x7ffc0000
[  335.810081][   T30] audit: type=1326 audit(2000000002.792:12198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22757 comm="syz.4.11119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd75adfeb9 code=0x7ffc0000
[  335.875347][   T60] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  335.896656][   T30] audit: type=1326 audit(2000000002.834:12199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22767 comm="syz.0.11120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ebc3beb9 code=0x7ffc0000
[  335.906300][T22789] netlink: 92 bytes leftover after parsing attributes in process `syz.0.11133'.
[  335.971019][   T30] audit: type=1326 audit(2000000002.834:12200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22767 comm="syz.0.11120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ebc3beb9 code=0x7ffc0000
[  335.984409][T22789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  336.040181][T22797] tmpfs: Unknown parameter 'no'
[  336.050937][   T30] audit: type=1326 audit(2000000002.834:12201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22767 comm="syz.0.11120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f16ebc3beb9 code=0x7ffc0000
[  336.089199][T22799] loop5: detected capacity change from 0 to 256
[  336.108572][   T60] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  336.120818][T22765] loop4: detected capacity change from 0 to 40427
[  336.126912][   T60] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  336.128169][   T30] audit: type=1326 audit(2000000002.834:12202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22767 comm="syz.0.11120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ebc3beb9 code=0x7ffc0000
[  336.159370][T22801] netlink: 80 bytes leftover after parsing attributes in process `syz.6.11139'.
[  336.194025][   T30] audit: type=1326 audit(2000000002.834:12203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22767 comm="syz.0.11120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ebc3beb9 code=0x7ffc0000
[  336.228230][T22811] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  336.244204][T22765] F2FS-fs (loop4): fault_injection options not supported
[  336.255765][T22799] FAT-fs (loop5): Directory bread(block 64) failed
[  336.262604][T22765] F2FS-fs (loop4): invalid crc value
[  336.281066][T22765] F2FS-fs (loop4): Found nat_bits in checkpoint
[  336.288127][T22799] FAT-fs (loop5): Directory bread(block 65) failed
[  336.328161][T22799] FAT-fs (loop5): Directory bread(block 66) failed
[  336.337036][T22817] xt_CT: You must specify a L4 protocol and not use inversions on it
[  336.364351][T22799] FAT-fs (loop5): Directory bread(block 67) failed
[  336.376191][T22799] FAT-fs (loop5): Directory bread(block 68) failed
[  336.402007][T22799] FAT-fs (loop5): Directory bread(block 69) failed
[  336.413096][T22765] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  336.419428][T22799] FAT-fs (loop5): Directory bread(block 70) failed
[  336.447175][T22799] FAT-fs (loop5): Directory bread(block 71) failed
[  336.460439][T22799] FAT-fs (loop5): Directory bread(block 72) failed
[  336.477205][T22799] FAT-fs (loop5): Directory bread(block 73) failed
[  336.631156][   T30] audit: type=1400 audit(2000000003.873:12204): avc:  denied  { execute } for  pid=22833 comm="syz.5.11154" path="/proc/sys/fs/binfmt_misc/register" dev="binfmt_misc" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=file permissive=1
[  336.879685][T22858] netlink: 'syz.5.11165': attribute type 16 has an invalid length.
[  336.917501][T22858] netlink: 'syz.5.11165': attribute type 17 has an invalid length.
[  336.938239][T22858] bridge0: port 3(dummy0) entered disabled state
[  336.957749][T22858] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.098919][ T1012] ip6_tnl_xmit_ctl: 1 callbacks suppressed
[  337.098939][ T1012] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  337.195725][T22869] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11170'.
[  337.242153][T22869] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11170'.
[  337.289269][T22766] loop2: detected capacity change from 0 to 131072
[  337.319424][T22766] F2FS-fs (loop2): invalid crc value
[  337.381064][T22766] F2FS-fs (loop2): Found nat_bits in checkpoint
[  337.430692][T22888] loop5: detected capacity change from 0 to 4096
[  337.496048][T22888] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  337.507605][T22766] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  337.589091][T22900] loop0: detected capacity change from 0 to 1024
[  337.594609][T22766] F2FS-fs (loop2): Corrupted max_depth of 3: 16842753
[  337.639051][T22904] loop4: detected capacity change from 0 to 256
[  337.651574][T22900] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  337.674001][T22900] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  337.708615][T22904] FAT-fs (loop4): Directory bread(block 64) failed
[  337.715204][T22904] FAT-fs (loop4): Directory bread(block 65) failed
[  337.730725][T22904] FAT-fs (loop4): Directory bread(block 66) failed
[  337.740428][T22900] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  337.763450][T22904] FAT-fs (loop4): Directory bread(block 67) failed
[  337.770338][T22904] FAT-fs (loop4): Directory bread(block 68) failed
[  337.777025][T22904] FAT-fs (loop4): Directory bread(block 69) failed
[  337.783592][T22904] FAT-fs (loop4): Directory bread(block 70) failed
[  337.790621][T22904] FAT-fs (loop4): Directory bread(block 71) failed
[  337.797289][T22904] FAT-fs (loop4): Directory bread(block 72) failed
[  337.797629][T22900] System zones: 
[  337.803991][T22904] FAT-fs (loop4): Directory bread(block 73) failed
[  337.842110][T22900] 0-1, 3-36
[  337.856698][T22900] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  337.987925][T22900] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  338.000662][T22900] EXT4-fs (loop0): re-mounted. Opts: . Quota mode: writeback.
[  338.064322][T22939] netlink: 224 bytes leftover after parsing attributes in process `syz.6.11202'.
[  338.095753][T22939] netlink: 224 bytes leftover after parsing attributes in process `syz.6.11202'.
[  338.118229][T22939] netlink: 38 bytes leftover after parsing attributes in process `syz.6.11202'.
[  338.219725][T22953] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11208'.
[  338.372452][T22970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  338.577585][T22998] loop2: detected capacity change from 0 to 256
[  338.623801][T22998] FAT-fs (loop2): Directory bread(block 64) failed
[  338.660235][T22998] FAT-fs (loop2): Directory bread(block 65) failed
[  338.680212][T22998] FAT-fs (loop2): Directory bread(block 66) failed
[  338.686815][T22998] FAT-fs (loop2): Directory bread(block 67) failed
[  338.713400][T22998] FAT-fs (loop2): Directory bread(block 68) failed
[  338.733829][T22998] FAT-fs (loop2): Directory bread(block 69) failed
[  338.748149][T22998] FAT-fs (loop2): Directory bread(block 70) failed
[  338.761283][T22998] FAT-fs (loop2): Directory bread(block 71) failed
[  338.771307][T23015] netlink: 'syz.4.11238': attribute type 1 has an invalid length.
[  338.779462][T22998] FAT-fs (loop2): Directory bread(block 72) failed
[  338.790478][T22998] FAT-fs (loop2): Directory bread(block 73) failed
[  338.991076][T23032] loop4: detected capacity change from 0 to 512
[  339.110221][T22925] loop5: detected capacity change from 0 to 131072
[  339.115135][T23032] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  339.137074][T23032] ext4 filesystem being mounted at /2029/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  339.151663][T22925] F2FS-fs (loop5): invalid crc value
[  339.234955][T22925] F2FS-fs (loop5): Found nat_bits in checkpoint
[  339.248499][T23070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11261'.
[  339.258729][T23070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11261'.
[  339.282581][T23073] loop4: detected capacity change from 0 to 512
[  339.316573][T23078] loop2: detected capacity change from 0 to 512
[  339.352159][T23073] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.11260: invalid indirect mapped block 10 (level 1)
[  339.392764][T23078] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #12: comm syz.2.11264: iget: bad extra_isize 1568 (inode size 256)
[  339.392969][T23078] EXT4-fs (loop2): Remounting filesystem read-only
[  339.406649][T23073] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.11260: invalid indirect mapped block 8 (level 1)
[  339.428913][T23078] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.11264: couldn't read orphan inode 12 (err -117)
[  339.429210][T23078] EXT4-fs (loop2): Remounting filesystem read-only
[  339.429231][T23078] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,minixdf,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,noauto_da_alloc,discard,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: none.
[  339.457716][T22925] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  339.514328][T23073] EXT4-fs (loop4): 1 truncate cleaned up
[  339.514354][T23073] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback.
[  339.560732][T22925] F2FS-fs (loop5): Corrupted max_depth of 3: 16842753
[  339.622706][T23101] netlink: 108 bytes leftover after parsing attributes in process `syz.0.11275'.
[  339.634161][T23101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11275'.
[  339.698955][T23110] device vlan2 entered promiscuous mode
[  339.704761][T23110] device gretap0 entered promiscuous mode
[  339.869616][T23133] loop4: detected capacity change from 0 to 1024
[  339.969365][T23146] binder: 23145:23146 ioctl c0306201 2000000004c0 returned -22
[  339.992738][T23133] EXT4-fs (loop4): Ignoring removed orlov option
[  340.019682][T23133] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback.
[  340.051914][T23153] device vlan2 entered promiscuous mode
[  340.057739][T23153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  340.080194][T23133] EXT4-fs (loop4): resizing filesystem from 512 to 0 blocks
[  340.090253][T23133] EXT4-fs warning (device loop4): ext4_resize_fs:2004: can't shrink FS - resize aborted
[  340.137265][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  340.409723][   T30] kauditd_printk_skb: 33 callbacks suppressed
[  340.409741][   T30] audit: type=1400 audit(2000000007.842:12238): avc:  denied  { ioctl } for  pid=23191 comm="syz.6.11318" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  340.466254][T23198] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  340.612044][T23207] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #12: comm syz.6.11322: iget: bad extra_isize 1568 (inode size 256)
[  340.634097][T23207] EXT4-fs (loop6): Remounting filesystem read-only
[  340.643542][T23207] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.11322: couldn't read orphan inode 12 (err -117)
[  340.657816][T23207] EXT4-fs (loop6): Remounting filesystem read-only
[  340.664530][T23207] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,minixdf,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,noauto_da_alloc,discard,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: none.
[  340.714930][   T30] audit: type=1326 audit(2000000008.156:12239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23206 comm="syz.6.11322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7349b6eb9 code=0x7ffc0000
[  340.762961][T23212] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  340.775915][T23212] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002]
[  340.789105][T23212] EXT4-fs (loop2): orphan cleanup on readonly fs
[  340.804242][   T30] audit: type=1326 audit(2000000008.188:12240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23206 comm="syz.6.11322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7349b6eb9 code=0x7ffc0000
[  340.828845][   T30] audit: type=1326 audit(2000000008.188:12241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23206 comm="syz.6.11322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fa7349b6eb9 code=0x7ffc0000
[  340.853071][   T30] audit: type=1326 audit(2000000008.188:12242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23206 comm="syz.6.11322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7349b6eb9 code=0x7ffc0000
[  340.861629][T23212] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #13: comm syz.2.11324: iget: bad i_size value: 12154761577498
[  340.877627][   T30] audit: type=1326 audit(2000000008.188:12243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23206 comm="syz.6.11322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7349b6eb9 code=0x7ffc0000
[  340.913959][T23212] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.11324: couldn't read orphan inode 13 (err -117)
[  340.926348][T23212] EXT4-fs (loop2): mounted filesystem without journal. Opts: commit=0x0000000000000000,noblock_validity,user_xattr,,errors=continue. Quota mode: none.
[  340.959510][T23212] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.11324: dx entry: limit 65535 != root limit 120
[  340.974131][T23212] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.11324: Corrupt directory, running e2fsck is recommended
[  341.102732][T23234] bridge_slave_0: default FDB implementation only supports local addresses
[  341.138757][T23241] netlink: 'syz.2.11339': attribute type 1 has an invalid length.
[  341.166417][T23241] netlink: 'syz.2.11339': attribute type 2 has an invalid length.
[  341.194861][T23251] netlink: 'syz.6.11344': attribute type 25 has an invalid length.
[  341.284571][   T30] audit: type=1326 audit(2000000008.755:12244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23266 comm="syz.0.11352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ebc3beb9 code=0x7ffc0000
[  341.323436][   T30] audit: type=1326 audit(2000000008.755:12245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23266 comm="syz.0.11352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ebc3beb9 code=0x7ffc0000
[  341.367661][   T30] audit: type=1326 audit(2000000008.755:12246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23266 comm="syz.0.11352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f16ebc3beb9 code=0x7ffc0000
[  341.395883][   T30] audit: type=1326 audit(2000000008.755:12247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23266 comm="syz.0.11352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ebc3beb9 code=0x7ffc0000
[  341.576003][ T2448] usb 5-1: new full-speed USB device number 94 using dummy_hcd
[  341.616976][   T60] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[  341.674860][T23307] overlayfs: unrecognized mount option "\']*=°¢°©æ[\1\Ãåý07†ðÿ$Áܲ¹" or missing value
[  341.744594][T23313] EXT4-fs (loop6): Ignoring removed nobh option
[  341.753368][T23313] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,abort,,errors=continue. Quota mode: none.
[  341.765590][T23313] ext4 filesystem being mounted at /2154/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  341.851822][   T60] usb 1-1: Using ep0 maxpacket: 32
[  341.928076][ T2448] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  341.939371][ T2448] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  341.949222][ T2448] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  341.958361][ T2448] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.967209][ T2448] usb 5-1: config 0 descriptor??
[  341.975731][   T60] usb 1-1: config 2 has an invalid interface number: 88 but max is 0
[  341.984001][   T60] usb 1-1: config 2 has no interface number 0
[  341.991076][   T60] usb 1-1: config 2 interface 88 has no altsetting 0
[  342.096965][T23340] futex_wake_op: syz.5.11385 tries to shift op by -1; fix this program
[  342.176146][   T60] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  342.192289][   T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.211624][   T60] usb 1-1: Product: syz
[  342.223006][   T60] usb 1-1: Manufacturer: syz
[  342.233240][   T60] usb 1-1: SerialNumber: syz
[  342.425347][ T2448] isku 0003:1E7D:319C.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0
[  342.642526][ T2448] isku 0003:1E7D:319C.0001: couldn't init struct isku_device
[  342.651625][ T2448] isku 0003:1E7D:319C.0001: couldn't install keyboard
[  342.670946][ T2448] isku: probe of 0003:1E7D:319C.0001 failed with error -71
[  342.688801][T23378] set_capacity_and_notify: 3 callbacks suppressed
[  342.688836][T23378] loop6: detected capacity change from 0 to 512
[  342.693169][ T2448] usb 5-1: USB disconnect, device number 94
[  342.742459][T23378] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  342.771663][T23383] fido_id[23383]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  342.797916][T23378] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #16: comm syz.6.11402: invalid indirect mapped block 4294967295 (level 0)
[  342.830402][T23378] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #16: comm syz.6.11402: invalid indirect mapped block 4294967295 (level 1)
[  342.851467][T23378] EXT4-fs (loop6): 1 orphan inode deleted
[  342.857542][T23378] EXT4-fs (loop6): 1 truncate cleaned up
[  342.863320][T23378] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  342.918284][T23395] __nla_validate_parse: 5 callbacks suppressed
[  342.918305][T23395] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11410'.
[  342.935343][   T60] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  342.954587][   T60] asix: probe of 1-1:2.88 failed with error -71
[  342.962527][   T60] usb 1-1: USB disconnect, device number 94
[  343.118842][    C1] ip6_tunnel: K xmit: Local address not yet configured!
[  343.191900][T23418] device ip6gretap0 entered promiscuous mode
[  343.198334][T23418] device macsec1 entered promiscuous mode
[  343.206272][T23418] device ip6gretap0 left promiscuous mode
[  343.389312][T23421] loop2: detected capacity change from 0 to 32768
[  343.631728][T23424] loop4: detected capacity change from 0 to 40427
[  343.646445][T23448] loop2: detected capacity change from 0 to 256
[  343.662093][T23424] F2FS-fs (loop4): invalid crc value
[  343.669282][T23424] F2FS-fs (loop4): Found nat_bits in checkpoint
[  343.701204][T23448] FAT-fs (loop2): Directory bread(block 64) failed
[  343.708504][T23448] FAT-fs (loop2): Directory bread(block 65) failed
[  343.717288][T23448] FAT-fs (loop2): Directory bread(block 66) failed
[  343.726000][T23448] FAT-fs (loop2): Directory bread(block 67) failed
[  343.733012][T23424] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  343.766954][T23448] FAT-fs (loop2): Directory bread(block 68) failed
[  343.773543][T23448] FAT-fs (loop2): Directory bread(block 69) failed
[  343.799045][T23448] FAT-fs (loop2): Directory bread(block 70) failed
[  343.806279][T23448] FAT-fs (loop2): Directory bread(block 71) failed
[  343.806525][T23449] attempt to access beyond end of device
[  343.806525][T23449] loop4: rw=2049, want=45104, limit=40427
[  343.813728][T23448] FAT-fs (loop2): Directory bread(block 72) failed
[  343.831820][T23448] FAT-fs (loop2): Directory bread(block 73) failed
[  343.835982][T23438] loop5: detected capacity change from 0 to 40427
[  343.871212][ T1012] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[  343.898481][T23438] F2FS-fs (loop5): invalid crc value
[  343.904254][T23438] F2FS-fs (loop5): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root and reserve_node
[  343.955955][T23438] F2FS-fs (loop5): Found nat_bits in checkpoint
[  344.006537][T23438] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0
[  344.013196][T23438] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1
[  344.026670][T23438] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  344.066262][T23454] loop6: detected capacity change from 0 to 32768
[  344.129293][T23465] xt_time: unknown flags 0xc
[  344.216020][T23473] loop4: detected capacity change from 0 to 2048
[  344.271733][ T1012] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  344.287961][ T1012] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  344.312449][ T1012] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  344.327643][ T1012] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.329144][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  344.343150][ T1012] usb 1-1: config 0 descriptor??
[  344.350922][T23473] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  344.449077][T23504] loop6: detected capacity change from 0 to 512
[  344.464959][T23504] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  344.530221][T23504] EXT4-fs (loop6): 1 truncate cleaned up
[  344.536001][T23504] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none.
[  344.587742][T23520] device gretap0 entered promiscuous mode
[  344.816104][ T1012] hid-steam 0003:28DE:1142.0002: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0
[  344.835139][ T1012] hid-steam 0003:28DE:1142.0003: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0
[  344.919015][ T1012] hid-steam 0003:28DE:1142.0002: Steam wireless receiver connected
[  345.013680][ T1012] usb 1-1: USB disconnect, device number 95
[  345.022561][ T1012] hid-steam 0003:28DE:1142.0002: Steam wireless receiver disconnected
[  345.177055][T23580] loop2: detected capacity change from 0 to 512
[  345.201648][   T30] kauditd_printk_skb: 23 callbacks suppressed
[  345.201665][   T30] audit: type=1326 audit(2000000012.926:12271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23584 comm="syz.6.11494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7349b6eb9 code=0x7ffc0000
[  345.229711][T23587] netlink: 'syz.5.11495': attribute type 7 has an invalid length.
[  345.240738][T23587] netlink: 'syz.5.11495': attribute type 8 has an invalid length.
[  345.251840][   T30] audit: type=1326 audit(2000000012.947:12272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23584 comm="syz.6.11494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7349b6eb9 code=0x7ffc0000
[  345.276563][   T30] audit: type=1326 audit(2000000012.978:12273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23584 comm="syz.6.11494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7349b6eb9 code=0x7ffc0000
[  345.303464][   T30] audit: type=1326 audit(2000000012.978:12274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23584 comm="syz.6.11494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7349b6eb9 code=0x7ffc0000
[  345.320317][T23580] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback.
[  345.336036][   T30] audit: type=1326 audit(2000000012.978:12275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23584 comm="syz.6.11494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fa7349b6eb9 code=0x7ffc0000
[  345.367160][T23580] ext4 filesystem being mounted at /2274/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  345.386888][   T30] audit: type=1326 audit(2000000012.978:12276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23584 comm="syz.6.11494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7349b6eb9 code=0x7ffc0000
[  345.391907][T23592] netlink: 'syz.6.11496': attribute type 2 has an invalid length.
[  345.421366][   T30] audit: type=1326 audit(2000000012.978:12277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23584 comm="syz.6.11494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa7349b6eb9 code=0x7ffc0000
[  345.445265][   T30] audit: type=1326 audit(2000000012.978:12278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23584 comm="syz.6.11494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa7349b6eb9 code=0x7ffc0000
[  345.479333][   T30] audit: type=1400 audit(2000000013.220:12279): avc:  denied  { read write } for  pid=23595 comm="syz.6.11499" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  345.506325][   T30] audit: type=1400 audit(2000000013.220:12280): avc:  denied  { open } for  pid=23595 comm="syz.6.11499" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  345.561219][T23603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11498'.
[  345.618670][T23612] loop5: detected capacity change from 0 to 1024
[  345.647167][T23617] sock: sock_set_timeout: `syz.4.11510' (pid 23617) tries to set negative timeout
[  345.710803][T23612] EXT4-fs (loop5): Unrecognized mount option "subj_type=" or missing value
[  346.441885][T23674] FAT-fs (loop5): Directory bread(block 64) failed
[  346.452470][T23674] FAT-fs (loop5): Directory bread(block 65) failed
[  346.459795][T23674] FAT-fs (loop5): Directory bread(block 66) failed
[  346.500571][T23674] FAT-fs (loop5): Directory bread(block 67) failed
[  346.520607][T23674] FAT-fs (loop5): Directory bread(block 68) failed
[  346.538457][T23674] FAT-fs (loop5): Directory bread(block 69) failed
[  346.545940][T23674] FAT-fs (loop5): Directory bread(block 70) failed
[  346.561489][T23674] FAT-fs (loop5): Directory bread(block 71) failed
[  346.568319][T23674] FAT-fs (loop5): Directory bread(block 72) failed
[  346.576013][T23674] FAT-fs (loop5): Directory bread(block 73) failed
[  346.824138][ T1012] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[  346.884739][T23716] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback.
[  347.224290][ T1012] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  347.239081][   T60] usb 6-1: new high-speed USB device number 99 using dummy_hcd
[  347.246809][ T1012] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  347.259867][ T1012] usb 5-1: config 0 interface 0 has no altsetting 0
[  347.266693][ T1012] usb 5-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00
[  347.276261][ T1012] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.285471][ T1012] usb 5-1: config 0 descriptor??
[  347.348090][ T2181] usb 1-1: new full-speed USB device number 96 using dummy_hcd
[  347.509996][   T60] usb 6-1: Using ep0 maxpacket: 32
[  347.681745][   T60] usb 6-1: unable to get BOS descriptor or descriptor too short
[  347.729127][ T2181] usb 1-1: config 8 has an invalid interface number: 223 but max is 0
[  347.737538][ T2181] usb 1-1: config 8 contains an unexpected descriptor of type 0x2, skipping
[  347.746812][ T2181] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  347.758853][ T1012] hid-generic 0003:0079:1843.0004: item fetching failed at offset 4/5
[  347.767279][ T1012] hid-generic: probe of 0003:0079:1843.0004 failed with error -22
[  347.767523][   T60] usb 6-1: config 128 has an invalid interface number: 127 but max is 3
[  347.784551][ T2181] usb 1-1: config 8 has no interface number 0
[  347.802055][ T2181] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  347.813755][   T60] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  347.824678][ T2181] usb 1-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  347.838106][   T60] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4
[  347.846201][T23789] set_capacity_and_notify: 4 callbacks suppressed
[  347.846251][T23789] loop6: detected capacity change from 0 to 40427
[  347.849266][   T60] usb 6-1: config 128 has no interface number 0
[  347.864394][T23789] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  347.867815][   T60] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024
[  347.874884][T23789] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  347.886824][   T60] usb 6-1: config 128 interface 127 has no altsetting 0
[  347.902675][T23789] F2FS-fs (loop6): invalid crc value
[  347.909480][T23789] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597)
[  347.934131][T23789] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  347.941515][T23789] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  347.954879][ T2790] usb 5-1: USB disconnect, device number 95
[  347.967104][T23789] fscrypt (loop6, inode 3): Error -61 getting encryption context
[  348.024468][ T2181] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  348.033966][ T2181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.041975][ T2181] usb 1-1: Product: syz
[  348.046208][ T2181] usb 1-1: Manufacturer: syz
[  348.050821][ T2181] usb 1-1: SerialNumber: syz
[  348.081672][   T60] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  348.091109][   T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.099351][   T60] usb 6-1: Product: syz
[  348.104121][   T60] usb 6-1: Manufacturer: syz
[  348.108799][   T60] usb 6-1: SerialNumber: syz
[  348.129317][T23727] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  348.330618][ T2181] usb 1-1: USB disconnect, device number 96
[  348.398460][T23808] loop6: detected capacity change from 0 to 128
[  348.492920][   T60] usb 6-1: USB disconnect, device number 99
[  348.596308][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  348.675957][T23825] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  348.701974][ T2448] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  348.740200][T23827] loop6: detected capacity change from 0 to 4096
[  348.763212][T23827] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  348.812432][T23827] EXT4-fs error (device loop6): ext4_do_update_inode:5248: inode #15: comm syz.6.11604: corrupted inode contents
[  348.845230][T23835] loop0: detected capacity change from 0 to 1024
[  348.857760][T23827] EXT4-fs error (device loop6): ext4_dirty_inode:6084: inode #15: comm syz.6.11604: mark_inode_dirty error
[  348.881982][T23827] EXT4-fs error (device loop6): ext4_do_update_inode:5248: inode #15: comm syz.6.11604: corrupted inode contents
[  348.901246][T23835] EXT4-fs (loop0): Ignoring removed bh option
[  348.911504][T23827] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #15: comm syz.6.11604: mark_inode_dirty error
[  348.927917][T23827] EXT4-fs error (device loop6): ext4_do_update_inode:5248: inode #15: comm syz.6.11604: corrupted inode contents
[  348.933250][T23835] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  348.948390][T23827] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #15: comm syz.6.11604: mark_inode_dirty error
[  348.988924][T23827] EXT4-fs error (device loop6): ext4_do_update_inode:5248: inode #15: comm syz.6.11604: corrupted inode contents
[  349.002372][T23827] EXT4-fs error (device loop6): ext4_truncate:4310: inode #15: comm syz.6.11604: mark_inode_dirty error
[  349.014118][T23827] EXT4-fs error (device loop6) in ext4_setattr:5652: Corrupt filesystem
[  349.023538][T23838] EXT4-fs error (device loop6): ext4_do_update_inode:5248: inode #15: comm syz.6.11604: corrupted inode contents
[  349.206120][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[  349.213403][    C1] bridge0: port 1(dummy0) entered learning state
[  349.225119][ T2448] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  349.286069][T23860] netlink: 264 bytes leftover after parsing attributes in process `syz.6.11617'.
[  349.969248][   T30] kauditd_printk_skb: 4136 callbacks suppressed
[  349.969265][   T30] audit: type=1326 audit(2000000017.933:16417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23849 comm="syz.0.11612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ebc3beb9 code=0x50000
[  350.009558][T23885] netlink: 25 bytes leftover after parsing attributes in process `syz.4.11626'.
[  350.028417][   T30] audit: type=1326 audit(2000000017.965:16418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23849 comm="syz.0.11612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ebc3beb9 code=0x50000
[  350.058779][T23885] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.11626'.
[  350.079418][T23885] 0ªX¹¦Dö»: renamed from gretap0
[  350.082596][   T30] audit: type=1326 audit(2000000017.965:16419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23849 comm="syz.0.11612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ebc3beb9 code=0x50000
[  350.108645][T23885] device 
00ªX¹¦Dö» left promiscuous mode
[  350.129013][   T30] audit: type=1326 audit(2000000017.965:16420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23849 comm="syz.0.11612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ebc3beb9 code=0x50000
[  350.133126][T23885] IPv6: ADDRCONF(NETDEV_CHANGE): 
00ªX¹¦Dö»: link becomes ready
[  350.163713][T23885] IPv6: ADDRCONF(NETDEV_CHANGE): 
00ªX¹¦Dö»: link becomes ready
[  350.182049][   T30] audit: type=1326 audit(2000000017.965:16421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23849 comm="syz.0.11612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ebc3beb9 code=0x50000
[  350.215220][   T30] audit: type=1326 audit(2000000017.965:16422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23849 comm="syz.0.11612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ebc3beb9 code=0x50000
[  350.282840][   T30] audit: type=1326 audit(2000000017.965:16423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23849 comm="syz.0.11612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ebc3beb9 code=0x50000
[  350.329704][   T30] audit: type=1326 audit(2000000017.965:16424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23849 comm="syz.0.11612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ebc3beb9 code=0x50000
[  350.373085][   T30] audit: type=1326 audit(2000000017.965:16425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23849 comm="syz.0.11612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ebc3beb9 code=0x50000
[  350.398877][   T30] audit: type=1326 audit(2000000017.965:16426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23849 comm="syz.0.11612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ebc3beb9 code=0x50000
[  350.756980][T23927] netlink: 'syz.5.11645': attribute type 10 has an invalid length.
[  350.766607][T23925] loop6: detected capacity change from 0 to 256
[  350.780116][T23911] loop4: detected capacity change from 0 to 40427
[  350.833283][T23911] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[  350.852850][T23911] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  350.884109][T23911] F2FS-fs (loop4): Found nat_bits in checkpoint
[  350.941203][T23911] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  350.948639][T23911] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  351.030627][  T972] attempt to access beyond end of device
[  351.030627][  T972] loop4: rw=2049, want=45104, limit=40427
[  351.556568][T23951] loop4: detected capacity change from 0 to 40427
[  351.572423][T23964] loop6: detected capacity change from 0 to 1024
[  351.582481][T23951] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  351.606595][T23951] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  351.621109][T23964] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option
[  351.632980][T23951] F2FS-fs (loop4): invalid crc value
[  351.666443][T23964] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  351.679731][T23951] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  351.741249][T23951] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  351.748351][T23951] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  351.789941][T23964] EXT4-fs (loop6): mounted filesystem without journal. Opts: nomblk_io_submit,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,norecovery,dioread_nolock,grpquota,discard,user_xattr,mb_optimize_scan=0x0000000000000001,errors=remount-ro,lazytime,. Quota mode: writeback.
[  351.807897][T23951] F2FS-fs (loop4): Can't enable fs-verity on inode 10: the verity feature is not enabled on this filesystem
[  351.841175][  T972] attempt to access beyond end of device
[  351.841175][  T972] loop4: rw=2049, want=45104, limit=40427
[  352.106070][T23986] loop0: detected capacity change from 0 to 1024
[  352.181741][T23986] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,grpquota,. Quota mode: writeback.
[  352.196818][T23997] netlink: 112 bytes leftover after parsing attributes in process `syz.2.11672'.
[  352.254077][T24007] netlink: 'syz.0.11677': attribute type 1 has an invalid length.
[  352.300329][T24011] loop2: detected capacity change from 0 to 512
[  352.384315][T24011] EXT4-fs (loop2): 1 truncate cleaned up
[  352.397307][T24011] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  352.410154][T24011] ext4 filesystem being mounted at /2313/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  352.463509][ T2448] usb 5-1: new full-speed USB device number 96 using dummy_hcd
[  352.613883][T24041] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11694'.
[  352.650428][T24049] loop6: detected capacity change from 0 to 16
[  352.661173][T24049] erofs: (device loop6): mounted with root inode @ nid 36.
[  352.673186][T24049] erofs: (device loop6): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36
[  352.683211][T24049] attempt to access beyond end of device
[  352.683211][T24049] loop6: rw=0, want=16400, limit=16
[  352.694789][T24049] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117]
[  352.703365][T24049] erofs: (device loop6): erofs_readdir: fail to readdir of logical block 0 of nid 36
[  352.815764][T24069] xt_hashlimit: size too large, truncated to 1048576
[  352.822721][ T2448] usb 5-1: config 0 has an invalid interface number: 251 but max is 0
[  352.837671][T24070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11700'.
[  352.845787][ T2448] usb 5-1: config 0 has no interface number 0
[  352.875302][T24075] loop5: detected capacity change from 0 to 512
[  352.922147][T24075] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.11709: inode #1: comm syz.5.11709: iget: illegal inode #
[  352.959087][T24075] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.11709: error while reading EA inode 1 err=-117
[  352.974139][T24075] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.11709: inode #1: comm syz.5.11709: iget: illegal inode #
[  352.995090][T24075] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.11709: error while reading EA inode 1 err=-117
[  353.007593][ T2448] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  353.013744][T24084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11713'.
[  353.024615][ T2448] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.028804][T24075] EXT4-fs (loop5): 1 orphan inode deleted
[  353.035478][ T2448] usb 5-1: Product: syz
[  353.042334][T24075] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none.
[  353.047239][ T2448] usb 5-1: Manufacturer: syz
[  353.077196][ T2448] usb 5-1: SerialNumber: syz
[  353.082692][ T2448] usb 5-1: config 0 descriptor??
[  353.177693][T24090] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  353.196895][   T60] usb 1-1: new high-speed USB device number 97 using dummy_hcd
[  353.444728][   T60] usb 1-1: Using ep0 maxpacket: 8
[  353.478597][T24097] loop5: detected capacity change from 0 to 40427
[  353.490678][T24097] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  353.499365][T24097] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  353.523417][T24097] F2FS-fs (loop5): invalid crc value
[  353.530380][ T2448] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  353.543750][ T2448] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71
[  353.553866][ T2448] asix: probe of 5-1:0.251 failed with error -5
[  353.561684][ T2448] usb 5-1: USB disconnect, device number 96
[  353.568746][   T60] usb 1-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  353.569615][T24097] F2FS-fs (loop5): Found nat_bits in checkpoint
[  353.604331][   T60] usb 1-1: config 0 interface 0 has no altsetting 0
[  353.645648][   T60] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  353.655009][   T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.668128][T24111] loop2: detected capacity change from 0 to 40427
[  353.678807][   T60] usb 1-1: config 0 descriptor??
[  353.695609][T24111] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  353.703978][T24111] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  353.712693][T24097] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  353.715796][T24111] F2FS-fs (loop2): invalid crc value
[  353.719764][T24097] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  353.754382][T24111] F2FS-fs (loop2): Found nat_bits in checkpoint
[  353.836712][T24111] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  353.843812][T24111] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  353.883867][  T890] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  353.893300][  T890] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  353.912946][T24143] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11740'.
[  354.000402][T24151] tipc: Started in network mode
[  354.005342][T24151] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711
[  354.016419][T24151] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  354.142580][   T60] logitech-hidpp-device 0003:046D:C086.0005: hidraw0: USB HID v0.09 Device [HID 046d:c086] on usb-dummy_hcd.0-1/input0
[  354.278271][T24180] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11739'.
[  354.339952][   T60] usb 1-1: USB disconnect, device number 97
[  354.358266][T24190] loop2: detected capacity change from 0 to 512
[  354.370802][T24193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11762'.
[  354.447518][T24190] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  354.477097][T24190] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  354.485031][T24208] loop4: detected capacity change from 0 to 512
[  354.493417][T24190] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  354.501484][T24190] System zones: 0-2, 18-18, 34-35
[  354.507477][T24190] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  354.520554][T24190] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  354.530716][T24190] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  354.544699][T24190] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: none.
[  354.562353][T24208] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  354.603101][T24179] loop6: detected capacity change from 0 to 40427
[  354.610086][T24190] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none.
[  354.619498][T24208] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  354.630410][T24179] F2FS-fs (loop6): fault_injection options not supported
[  354.640486][T24179] F2FS-fs (loop6): fault_type options not supported
[  354.647718][T24208] EXT4-fs (loop4): orphan cleanup on readonly fs
[  354.654288][T24208] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.11770: bad orphan inode 3
[  354.664652][T24208] EXT4-fs (loop4): Remounting filesystem read-only
[  354.671259][T24208] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,data=writeback. Quota mode: none.
[  354.690451][T24208] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.11770: dx entry: limit 0 != root limit 125
[  354.703392][T24208] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.11770: Corrupt directory, running e2fsck is recommended
[  354.716516][T24208] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 5: comm syz.4.11770: path /2108/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  354.721359][T24179] F2FS-fs (loop6): invalid crc value
[  354.775251][T24179] F2FS-fs (loop6): Found nat_bits in checkpoint
[  354.833378][T24179] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  354.845450][T24231] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  354.875215][T24235] loop2: detected capacity change from 0 to 128
[  354.883090][T24233] loop5: detected capacity change from 0 to 512
[  354.900942][   T30] kauditd_printk_skb: 4967 callbacks suppressed
[  354.900960][   T30] audit: type=1326 audit(2000000023.109:21394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24237 comm="syz.0.11783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ebc3beb9 code=0x7ffc0000
[  354.954180][   T30] audit: type=1326 audit(2000000023.151:21395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24237 comm="syz.0.11783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ebc3beb9 code=0x7ffc0000
[  355.013702][T24233] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  355.035478][T24233] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  355.047478][   T30] audit: type=1326 audit(2000000023.151:21396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24237 comm="syz.0.11783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f16ebc3beb9 code=0x7ffc0000
[  355.082933][T24233] System zones: 0-1, 15-15, 18-18, 34-34
[  355.101332][T24233] EXT4-fs (loop5): orphan cleanup on readonly fs
[  355.140735][T24233] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0
[  355.163706][   T30] audit: type=1326 audit(2000000023.151:21397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24237 comm="syz.0.11783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ebc3beb9 code=0x7ffc0000
[  355.197174][T24233] EXT4-fs warning (device loop5): ext4_enable_quotas:6453: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  355.230938][T24238] loop4: detected capacity change from 0 to 40427
[  355.247393][T24233] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  355.262072][   T30] audit: type=1326 audit(2000000023.151:21398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24237 comm="syz.0.11783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ebc3beb9 code=0x7ffc0000
[  355.295960][T24238] F2FS-fs (loop4): Invalid log_blocksize (64), supports only 12
[  355.304963][T24233] EXT4-fs (loop5): 1 truncate cleaned up
[  355.308251][T24238] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  355.321128][T24233] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: writeback.
[  355.345603][T24238] F2FS-fs (loop4): invalid crc value
[  355.361655][T24233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11781'.
[  355.371042][   T30] audit: type=1326 audit(2000000023.151:21399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24237 comm="syz.0.11783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f16ebc3beb9 code=0x7ffc0000
[  355.397172][T24238] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  355.454497][   T30] audit: type=1326 audit(2000000023.151:21400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24237 comm="syz.0.11783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ebc3beb9 code=0x7ffc0000
[  355.516611][   T30] audit: type=1326 audit(2000000023.151:21401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24237 comm="syz.0.11783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ebc3beb9 code=0x7ffc0000
[  355.549348][T24238] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1
[  355.602828][T24238] F2FS-fs (loop4): Start checkpoint disabled!
[  355.616664][   T30] audit: type=1400 audit(2000000023.539:21402): avc:  denied  { write } for  pid=24252 comm="syz.2.11789" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  355.640163][T24271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11796'.
[  355.654584][T24238] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  355.673152][T24238] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  355.682542][T24271] device veth0_to_bond entered promiscuous mode
[  355.721495][T24273] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier=0x0000000000000000,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,usrjquota=,,errors=continue. Quota mode: none.
[  355.746042][T24273] EXT4-fs error (device loop5): ext4_find_extent:929: inode #2: comm syz.5.11797: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  355.767204][T24271] device veth0_to_bond left promiscuous mode
[  355.776552][T24276] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodelalloc,nobarrier,errors=remount-ro,. Quota mode: none.
[  355.800174][T24276] EXT4-fs warning (device loop6): ext4_empty_dir:3147: inode #11: comm syz.6.11799: directory missing '.'
[  355.876820][T24288] device bridge0 entered promiscuous mode
[  355.903541][T24288] bridge0: port 4(vlan3) entered blocking state
[  355.914261][T24288] bridge0: port 4(vlan3) entered disabled state
[  355.946946][T24288] device bridge0 left promiscuous mode
[  355.999014][T24300] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11808'.
[  356.256928][T24325] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  356.295906][T24339] netlink: 72 bytes leftover after parsing attributes in process `syz.4.11827'.
[  356.683212][ T2448] usb 6-1: new high-speed USB device number 100 using dummy_hcd
[  356.822016][T24377] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  356.921792][ T2448] usb 6-1: Using ep0 maxpacket: 32
[  356.999668][T24385] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  357.010958][T24385] ext4 filesystem being mounted at /2352/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  357.045748][ T2448] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  357.065000][ T2448] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  357.088977][ T2448] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  357.105039][ T2448] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.140864][ T2448] usb 6-1: config 0 descriptor??
[  357.371648][T24403] F2FS-fs (loop6): fault_injection options not supported
[  357.396021][T24403] F2FS-fs (loop6): invalid crc value
[  357.453250][T24403] F2FS-fs (loop6): Found nat_bits in checkpoint
[  357.560533][T24403] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  357.594464][  T971] attempt to access beyond end of device
[  357.594464][  T971] loop6: rw=2049, want=45104, limit=40427
[  357.612991][ T2448] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0
[  357.620762][ T2448] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0
[  357.620802][ T2448] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0
[  357.636499][ T2448] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0
[  357.643692][ T2448] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0
[  357.668528][ T2448] koneplus 0003:1E7D:2D51.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0
[  357.740817][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  357.809350][ T2448] koneplus 0003:1E7D:2D51.0006: couldn't init struct koneplus_device
[  357.821285][ T2448] koneplus 0003:1E7D:2D51.0006: couldn't install mouse
[  357.829372][ T2448] koneplus: probe of 0003:1E7D:2D51.0006 failed with error -71
[  357.865369][ T2448] usb 6-1: USB disconnect, device number 100
[  357.891047][T24467] fido_id[24467]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[  358.000201][T24480] usb usb8: usbfs: process 24480 (syz.6.11891) did not claim interface 0 before use
[  358.051194][T24484] set_capacity_and_notify: 9 callbacks suppressed
[  358.051212][T24484] loop6: detected capacity change from 0 to 2048
[  358.105779][T24484] EXT4-fs (loop6): Ignoring removed mblk_io_submit option
[  358.132915][T24484] EXT4-fs (loop6): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none.
[  358.170661][T24484] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.11893: bg 0: block 234: padding at end of block bitmap is not set
[  358.185429][T24484] EXT4-fs (loop6): Remounting filesystem read-only
[  358.226334][   T26] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[  358.301029][T24460] loop0: detected capacity change from 0 to 131072
[  358.321272][T24492] loop5: detected capacity change from 0 to 256
[  358.333114][T24460] F2FS-fs (loop0): invalid crc value
[  358.352417][T24460] F2FS-fs (loop0): Found nat_bits in checkpoint
[  358.370292][T24499] xt_hashlimit: size too large, truncated to 1048576
[  358.464493][T24460] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  358.517885][T24507] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11901'.
[  358.597886][   T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  358.618655][   T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  358.633299][T24521] netlink: 'syz.2.11908': attribute type 2 has an invalid length.
[  358.641920][   T26] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[  358.662536][   T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.686367][   T26] usb 5-1: config 0 descriptor??
[  358.969455][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  358.977485][    C1] ip6_tunnel: K xmit: Local address not yet configured!
[  359.036012][   T39] usb 3-1: new full-speed USB device number 94 using dummy_hcd
[  359.085184][T24565] loop5: detected capacity change from 0 to 1024
[  359.126800][T24565] EXT4-fs (loop5): Ignoring removed bh option
[  359.140460][T24565] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  359.156019][   T26] elo 0003:04E7:0030.0007: unknown main item tag 0xd
[  359.164673][T24565] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,nodelalloc,bh,data_err=ignore,barrier=0x000000000000007f,dioread_nolock,grpquota,dioread_nolock,nobarrier,resuid=0x0000000000000000,min_batch_time=0x0000000000000400,,errors=continue. Quota mode: writeback.
[  359.170671][   T26] elo 0003:04E7:0030.0007: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.4-1/input0
[  359.219659][T24565] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.11928: bg 0: block 376: padding at end of block bitmap is not set
[  359.359928][   T60] usb 5-1: USB disconnect, device number 97
[  359.392919][T24599] loop5: detected capacity change from 0 to 256
[  359.419382][T24599] exfat: Deprecated parameter 'utf8'
[  359.424944][T24599] exfat: Deprecated parameter 'utf8'
[  359.440529][   T39] usb 3-1: config 0 interface 0 altsetting 69 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  359.451596][   T39] usb 3-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  359.471069][T24599] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d)
[  359.488192][   T39] usb 3-1: config 0 interface 0 has no altsetting 0
[  359.500312][   T39] usb 3-1: New USB device found, idVendor=056a, idProduct=00d5, bcdDevice= 0.00
[  359.510035][   T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.542590][   T39] usb 3-1: config 0 descriptor??
[  359.559759][T24536] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  359.739782][T24588] loop6: detected capacity change from 0 to 131072
[  359.749797][T24588] F2FS-fs (loop6): fault_injection options not supported
[  359.757311][T24588] F2FS-fs (loop6): fault_type options not supported
[  359.777003][T24588] F2FS-fs (loop6): QUOTA feature is enabled, so ignore qf_name
[  359.797314][T24588] F2FS-fs (loop6): invalid crc value
[  359.843728][   T30] kauditd_printk_skb: 22 callbacks suppressed
[  359.843744][   T30] audit: type=1400 audit(2000000028.200:21425): avc:  denied  { bind } for  pid=24623 comm="syz.5.11955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  359.850825][T24588] F2FS-fs (loop6): Found nat_bits in checkpoint
[  359.904507][T24588] F2FS-fs (loop6): sanity_check_inode: corrupted inode ino=3, run fsck to fix.
[  359.914032][T24588] F2FS-fs (loop6): Failed to read root inode
[  359.984286][T24632] loop4: detected capacity change from 0 to 128
[  360.005456][   T30] audit: type=1400 audit(2000000028.328:21426): avc:  denied  { mount } for  pid=24633 comm="syz.5.11960" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  360.007738][T24634] cgroup: Need name or subsystem set
[  360.041869][T24632] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  360.051642][   T30] audit: type=1400 audit(2000000028.328:21427): avc:  denied  { remount } for  pid=24633 comm="syz.5.11960" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  360.090400][T24632] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  360.102595][T24632] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:510: comm syz.4.11959: Block bitmap for bg 0 marked uninitialized
[  360.103845][   T30] audit: type=1400 audit(2000000028.392:21428): avc:  denied  { unmount } for  pid=968 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  360.144323][   T39] wacom 0003:056A:00D5.0008: Unknown device_type for 'HID 056a:00d5'. Assuming pen.
[  360.174180][   T39] wacom 0003:056A:00D5.0008: hidraw0: USB HID v0.04 Device [HID 056a:00d5] on usb-dummy_hcd.2-1/input0
[  360.202744][   T39] input: Wacom Bamboo Pen 6x8 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00D5.0008/input/input27
[  360.228765][   T30] audit: type=1400 audit(2000000028.495:21429): avc:  denied  { read } for  pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=4072 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  360.288125][   T30] audit: type=1400 audit(2000000028.495:21430): avc:  denied  { open } for  pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=4072 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  360.374732][   T30] audit: type=1400 audit(2000000028.567:21431): avc:  denied  { ioctl } for  pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=4072 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  360.399863][   T39] usb 3-1: USB disconnect, device number 94
[  360.522149][T24664] loop6: detected capacity change from 0 to 512
[  360.558441][T24664] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.11974: iget: bad i_size value: 140737488355338
[  360.574045][T24645] loop4: detected capacity change from 0 to 40427
[  360.586103][T24664] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.11974: couldn't read orphan inode 15 (err -117)
[  360.606976][T24664] EXT4-fs (loop6): mounted filesystem without journal. Opts: nouid32,grpid,,errors=continue. Quota mode: writeback.
[  360.619469][T24645] F2FS-fs (loop4): invalid crc value
[  360.640249][T24645] F2FS-fs (loop4): Found nat_bits in checkpoint
[  360.704091][T24645] F2FS-fs (loop4): Start checkpoint disabled!
[  360.711520][T24645] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  360.759500][    T8] attempt to access beyond end of device
[  360.759500][    T8] loop4: rw=2049, want=40976, limit=40427
[  361.014023][ T2448] usb 6-1: new full-speed USB device number 101 using dummy_hcd
[  361.083260][   T30] audit: type=1400 audit(2000000029.188:21432): avc:  denied  { map } for  pid=24727 comm="syz.4.12005" path="socket:[92635]" dev="sockfs" ino=92635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  361.155975][   T30] audit: type=1400 audit(2000000029.213:21433): avc:  denied  { read } for  pid=24727 comm="syz.4.12005" path="socket:[92635]" dev="sockfs" ino=92635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  361.205759][T24748] xt_CT: You must specify a L4 protocol and not use inversions on it
[  361.240107][   T30] audit: type=1326 audit(2000000029.321:21434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24752 comm="syz.2.12017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83de6deb9 code=0x7ffc0000
[  361.328990][T24768] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12024'.
[  361.353379][T24770] loop6: detected capacity change from 0 to 512
[  361.421919][T24770] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback.
[  361.438312][T24770] ext4 filesystem being mounted at /2338/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  361.462308][ T2181] usb 1-1: new low-speed USB device number 98 using dummy_hcd
[  361.472531][T24784] netlink: 208 bytes leftover after parsing attributes in process `syz.4.12031'.
[  361.482143][T24784] netlink: 208 bytes leftover after parsing attributes in process `syz.4.12031'.
[  361.492289][T24784] netlink: 208 bytes leftover after parsing attributes in process `syz.4.12031'.
[  361.508764][ T2448] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  361.522856][ T2448] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  361.713747][ T2448] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  361.723199][ T2448] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.732364][ T2448] usb 6-1: Product: syz
[  361.736604][ T2448] usb 6-1: Manufacturer: syz
[  361.741535][ T2448] usb 6-1: SerialNumber: syz
[  361.906791][ T2181] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  361.917940][ T2181] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  361.918860][   T26] usb 7-1: new high-speed USB device number 99 using dummy_hcd
[  361.927912][ T2181] usb 1-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[  361.944400][ T2181] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.953123][ T2181] usb 1-1: config 0 descriptor??
[  362.215711][   T26] usb 7-1: Using ep0 maxpacket: 32
[  362.321416][ T2448] usb 6-1: cannot find UAC_HEADER
[  362.326571][ T2448] snd-usb-audio: probe of 6-1:1.0 failed with error -22
[  362.356654][   T26] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  362.367673][   T26] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  362.377530][   T26] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  362.386618][   T26] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.395665][   T26] usb 7-1: config 0 descriptor??
[  362.439678][   T26] hub 7-1:0.0: USB hub found
[  362.498911][ T2181] hid-rmi 0003:1532:011D.0009: hidraw0: USB HID v0.08 Device [HID 1532:011d] on usb-dummy_hcd.0-1/input0
[  362.557464][ T2181] usb 6-1: USB disconnect, device number 101
[  362.696783][   T26] hub 7-1:0.0: 1 port detected
[  362.732005][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  362.739861][ T1012] usb 1-1: USB disconnect, device number 98
[  362.954897][   T26] hub 7-1:0.0: hub_hub_status failed (err = -71)
[  362.961311][   T26] hub 7-1:0.0: config failed, can't get hub status (err -71)
[  363.045765][T24853] FAT-fs (loop4): Directory bread(block 64) failed
[  363.052494][T24853] FAT-fs (loop4): Directory bread(block 65) failed
[  363.059127][T24853] FAT-fs (loop4): Directory bread(block 66) failed
[  363.065901][T24853] FAT-fs (loop4): Directory bread(block 67) failed
[  363.073066][T24853] FAT-fs (loop4): Directory bread(block 68) failed
[  363.079618][T24853] FAT-fs (loop4): Directory bread(block 69) failed
[  363.084243][   T26] usbhid 7-1:0.0: can't add hid device: -71
[  363.086620][T24853] FAT-fs (loop4): Directory bread(block 70) failed
[  363.092380][   T26] usbhid: probe of 7-1:0.0 failed with error -71
[  363.099366][T24853] FAT-fs (loop4): Directory bread(block 71) failed
[  363.112995][T24853] FAT-fs (loop4): Directory bread(block 72) failed
[  363.119807][T24853] FAT-fs (loop4): Directory bread(block 73) failed
[  363.143004][   T26] usb 7-1: USB disconnect, device number 99
[  363.489269][ T1012] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[  363.490032][   T39] usb 6-1: new high-speed USB device number 102 using dummy_hcd
[  363.731682][T24888] usb usb8: usbfs: process 24888 (syz.0.12079) did not claim interface 0 before use
[  363.764508][T24892] usb usb1: check_ctrlrecip: process 24892 (syz.0.12081) requesting ep 01 but needs 81
[  363.774368][T24892] usb usb1: usbfs: process 24892 (syz.0.12081) did not claim interface 0 before use
[  363.870514][T24905] set_capacity_and_notify: 2 callbacks suppressed
[  363.870527][T24905] loop0: detected capacity change from 0 to 512
[  363.903114][ T1012] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  363.903142][   T26] usb 7-1: new high-speed USB device number 100 using dummy_hcd
[  363.922068][ T1012] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  363.934284][ T1012] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  363.948189][ T1012] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  363.949319][   T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  363.986102][   T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  363.996114][   T39] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  364.010212][   T39] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  364.019323][   T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.033146][T24914] loop2: detected capacity change from 0 to 128
[  364.041999][   T39] usb 6-1: config 0 descriptor??
[  364.075672][ T1012] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  364.099300][ T1012] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  364.116475][ T1012] usb 5-1: Manufacturer: syz
[  364.126183][ T1012] usb 5-1: config 0 descriptor??
[  364.163596][T24922] loop0: detected capacity change from 0 to 512
[  364.187110][T24926] netlink: 'syz.2.12097': attribute type 1 has an invalid length.
[  364.209460][T24922] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  364.230900][T24922] ext4 filesystem being mounted at /2379/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  364.246569][T24922] EXT4-fs error (device loop0): ext4_acquire_dquot:6201: comm syz.0.12096: Failed to acquire dquot type 0
[  364.259488][   T26] usb 7-1: Using ep0 maxpacket: 8
[  364.269745][T24932] loop2: detected capacity change from 0 to 256
[  364.383141][T24932] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d)
[  364.414168][   T26] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  364.457395][   T26] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0a18, bcdDevice= 0.00
[  364.467250][   T26] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.481208][T24950] netlink: 'syz.0.12108': attribute type 2 has an invalid length.
[  364.497316][   T26] usb 7-1: config 0 descriptor??
[  364.579370][   T39] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x2
[  364.586953][   T39] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x1
[  364.595644][   T39] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving
[  364.607697][   T39] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  364.670152][ T1012] appleir 0003:05AC:8243.000B: No inputs registered, leaving
[  364.682849][ T1012] appleir 0003:05AC:8243.000B: hiddev97,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  364.813170][   T39] usb 6-1: USB disconnect, device number 102
[  364.833836][T24981] loop0: detected capacity change from 0 to 512
[  364.901568][ T1020] usb 5-1: USB disconnect, device number 98
[  364.915851][T24981] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  364.923984][T24981] EXT4-fs (loop0): Test dummy encryption mode enabled
[  364.932742][T24981] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.12121: inode #1: comm syz.0.12121: iget: illegal inode #
[  364.940934][    C1] bridge0: port 1(dummy0) entered forwarding state
[  364.950407][T24981] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.12121: error while reading EA inode 1 err=-117
[  364.952455][    C1] bridge0: topology change detected, propagating
[  364.952634][    C1] bridge0: port 2(bridge_slave_1) entered forwarding state
[  364.965355][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  364.971376][    C1] bridge0: topology change detected, propagating
[  364.981310][T24981] EXT4-fs (loop0): 1 orphan inode deleted
[  364.998546][T24981] EXT4-fs (loop0): mounted filesystem without journal. Opts: noinit_itable,nomblk_io_submit,debug_want_extra_isize=0x0000000000000004,grpid,usrjquota=,grpquota,test_dummy_encryption=v1,journal_dev=0x0000000000000dcc,nodioread_nolock,,errors=continue. Quota mode: writeback.
[  365.028568][T24981] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.12121: invalid indirect mapped block 234881024 (level 0)
[  365.037219][   T26] hid-generic 0003:1B1C:0A18.000C: unknown main item tag 0x0
[  365.054427][   T26] hid-generic 0003:1B1C:0A18.000C: unknown main item tag 0x0
[  365.063204][   T26] hid-generic 0003:1B1C:0A18.000C: hidraw0: USB HID v0.07 Device [HID 1b1c:0a18] on usb-dummy_hcd.6-1/input0
[  365.261710][T24995] loop0: detected capacity change from 0 to 40427
[  365.263411][ T1020] usb 7-1: USB disconnect, device number 100
[  365.354892][T24995] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  365.362869][T24995] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  365.372871][T24995] F2FS-fs (loop0): invalid crc value
[  365.379820][T24995] F2FS-fs (loop0): Found nat_bits in checkpoint
[  365.439704][T24995] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  365.446946][T24995] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  365.628386][T25019] loop4: detected capacity change from 0 to 4096
[  365.674895][T24995] attempt to access beyond end of device
[  365.674895][T24995] loop0: rw=2049, want=79872, limit=40427
[  365.702104][T24995] attempt to access beyond end of device
[  365.702104][T24995] loop0: rw=2049, want=81920, limit=40427
[  365.712966][T25019] EXT4-fs (loop4): Test dummy encryption mode enabled
[  365.746115][T24995] attempt to access beyond end of device
[  365.746115][T24995] loop0: rw=2049, want=51200, limit=40427
[  365.759759][T25019] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback.
[  365.773630][T24995] attempt to access beyond end of device
[  365.773630][T24995] loop0: rw=2049, want=53248, limit=40427
[  365.791112][T24995] attempt to access beyond end of device
[  365.791112][T24995] loop0: rw=2049, want=59392, limit=40427
[  365.808101][T24995] attempt to access beyond end of device
[  365.808101][T24995] loop0: rw=2049, want=61440, limit=40427
[  365.825211][T24995] attempt to access beyond end of device
[  365.825211][T24995] loop0: rw=2049, want=63488, limit=40427
[  365.844724][   T30] kauditd_printk_skb: 27 callbacks suppressed
[  365.844741][   T30] audit: type=1400 audit(2000000033.299:21460): avc:  denied  { view } for  pid=25018 comm="syz.4.12135" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  365.877594][T24995] attempt to access beyond end of device
[  365.877594][T24995] loop0: rw=2049, want=65960, limit=40427
[  365.897584][T24995] attempt to access beyond end of device
[  365.897584][T24995] loop0: rw=2049, want=68008, limit=40427
[  365.916215][T24995] attempt to access beyond end of device
[  365.916215][T24995] loop0: rw=2049, want=70056, limit=40427
[  365.970456][T25041] xt_hashlimit: size too large, truncated to 1048576
[  366.101838][T25056] loop2: detected capacity change from 0 to 512
[  366.111406][T25058] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12155'.
[  366.201863][T25056] EXT4-fs (loop2): Ignoring removed oldalloc option
[  366.238268][T25056] EXT4-fs (loop2): 1 truncate cleaned up
[  366.244173][T25056] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,bsdgroups,lazytime,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback.
[  366.263648][T25056] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.12156: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  366.291401][T25056] EXT4-fs (loop2): Remounting filesystem read-only
[  366.380622][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  366.464195][T25081] loop2: detected capacity change from 0 to 1024
[  366.548311][T25065] loop4: detected capacity change from 0 to 40427
[  366.577545][T25095] netlink: 'syz.5.12170': attribute type 1 has an invalid length.
[  366.593593][T25081] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,grpquota,. Quota mode: writeback.
[  366.613672][T25065] F2FS-fs (loop4): invalid crc value
[  366.662190][T25065] F2FS-fs (loop4): Found nat_bits in checkpoint
[  366.717304][T25065] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  366.728373][T25110] EXT4-fs (loop0): 1 truncate cleaned up
[  366.736402][T25110] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  366.750048][T25110] ext4 filesystem being mounted at /2412/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  366.865106][T25131] netlink: 'syz.6.12196': attribute type 6 has an invalid length.
[  366.934104][T25140] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12188'.
[  366.952790][T25143] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  366.999047][T25143] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  367.072311][   T30] audit: type=1400 audit(2000000034.400:21461): avc:  denied  { ioctl } for  pid=25157 comm="syz.0.12199" path="mnt:[4026532424]" dev="nsfs" ino=4026532424 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  367.110748][  T971] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  367.169290][T25167] tipc: Invalid UDP bearer configuration
[  367.169306][T25167] tipc: Enabling of bearer <udp:™> rejected, failed to enable media
[  367.208026][T25169] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12201'.
[  367.271114][   T39] usb 6-1: new high-speed USB device number 103 using dummy_hcd
[  367.286468][T25177] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[  367.300073][T25177] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  367.334779][T25177] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,jqfmt=vfsv0,quota,,errors=continue. Quota mode: writeback.
[  367.356261][T25192] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12213'.
[  367.387143][T25177] ext4 filesystem being mounted at /2429/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  367.463046][T25208] FAT-fs (loop6): Directory bread(block 64) failed
[  367.469643][T25208] FAT-fs (loop6): Directory bread(block 65) failed
[  367.477125][T25208] FAT-fs (loop6): Directory bread(block 66) failed
[  367.483992][T25208] FAT-fs (loop6): Directory bread(block 67) failed
[  367.490684][T25208] FAT-fs (loop6): Directory bread(block 68) failed
[  367.497566][T25208] FAT-fs (loop6): Directory bread(block 69) failed
[  367.504475][T25208] FAT-fs (loop6): Directory bread(block 70) failed
[  367.511034][T25208] FAT-fs (loop6): Directory bread(block 71) failed
[  367.520034][T25208] FAT-fs (loop6): Directory bread(block 72) failed
[  367.526866][T25208] FAT-fs (loop6): Directory bread(block 73) failed
[  367.548878][   T39] usb 6-1: Using ep0 maxpacket: 16
[  367.666763][T25222] EXT4-fs (loop4): Test dummy encryption mode enabled
[  367.679640][T25222] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback.
[  367.706977][   T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  367.714130][   T30] audit: type=1400 audit(2000000034.968:21462): avc:  denied  { setattr } for  pid=25221 comm="syz.4.12230" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  367.722963][   T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  367.750922][   T39] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  367.765146][   T39] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  367.774719][T25227] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.12231: inode has both inline data and extents flags
[  367.788119][   T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.793948][T25227] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.12231: couldn't read orphan inode 15 (err -117)
[  367.804931][   T39] usb 6-1: config 0 descriptor??
[  367.818181][T25227] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  367.914637][ T2181] usb 1-1: new full-speed USB device number 99 using dummy_hcd
[  367.952088][T25243] FAT-fs (loop4): Directory bread(block 64) failed
[  367.958940][T25243] FAT-fs (loop4): Directory bread(block 65) failed
[  367.965663][T25243] FAT-fs (loop4): Directory bread(block 66) failed
[  367.974777][T25243] FAT-fs (loop4): Directory bread(block 67) failed
[  367.981898][T25243] FAT-fs (loop4): Directory bread(block 68) failed
[  367.988732][T25243] FAT-fs (loop4): Directory bread(block 69) failed
[  367.995613][T25243] FAT-fs (loop4): Directory bread(block 70) failed
[  367.995637][   T30] audit: type=1326 audit(2000000035.230:21463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25246 comm="syz.6.12240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7349b6eb9 code=0x7ffc0000
[  368.003126][T25243] FAT-fs (loop4): Directory bread(block 71) failed
[  368.032740][T25243] FAT-fs (loop4): Directory bread(block 72) failed
[  368.039773][T25243] FAT-fs (loop4): Directory bread(block 73) failed
[  368.048784][   T30] audit: type=1326 audit(2000000035.257:21464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25246 comm="syz.6.12240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7349b6eb9 code=0x7ffc0000
[  368.081918][T25249] exfat: Deprecated parameter 'utf8'
[  368.088277][   T30] audit: type=1326 audit(2000000035.257:21465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25246 comm="syz.6.12240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7349b6eb9 code=0x7ffc0000
[  368.112481][   T30] audit: type=1326 audit(2000000035.257:21466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25246 comm="syz.6.12240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fa7349b6eb9 code=0x7ffc0000
[  368.139890][   T30] audit: type=1326 audit(2000000035.257:21467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25246 comm="syz.6.12240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7349b6eb9 code=0x7ffc0000
[  368.164189][   T30] audit: type=1326 audit(2000000035.257:21468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25246 comm="syz.6.12240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7349b6eb9 code=0x7ffc0000
[  368.170055][T25249] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  368.191156][   T30] audit: type=1326 audit(2000000035.257:21469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25246 comm="syz.6.12240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa7349b6eb9 code=0x7ffc0000
[  368.324589][   T39] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000D/input/input30
[  368.334120][ T2181] usb 1-1: config 0 has an invalid interface number: 251 but max is 0
[  368.341583][   T39] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  368.344357][ T2181] usb 1-1: config 0 has no interface number 0
[  368.386472][T25259] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  368.401950][T25259] EXT4-fs (loop6): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none.
[  368.450474][T25263] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12247'.
[  368.459766][T25263] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12247'.
[  368.523835][T25268] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  368.544021][T25268] EXT4-fs (loop6): orphan cleanup on readonly fs
[  368.550433][T25268] EXT4-fs error (device loop6): ext4_quota_enable:6409: inode #3: comm syz.6.12249: iget: bad i_size value: 1407374883559424
[  368.553508][   T39] usb 6-1: USB disconnect, device number 103
[  368.564404][ T2181] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  368.587684][T25268] EXT4-fs (loop6): Remounting filesystem read-only
[  368.587693][ T2181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.599044][T25268] EXT4-fs error (device loop6): ext4_quota_enable:6412: comm syz.6.12249: Bad quota inode: 3, type: 0
[  368.613385][ T2181] usb 1-1: Product: syz
[  368.613404][ T2181] usb 1-1: Manufacturer: syz
[  368.613419][ T2181] usb 1-1: SerialNumber: syz
[  368.616510][ T2181] usb 1-1: config 0 descriptor??
[  368.626725][T25268] EXT4-fs (loop6): Remounting filesystem read-only
[  368.626746][T25268] EXT4-fs warning (device loop6): ext4_enable_quotas:6453: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  368.626774][T25268] EXT4-fs (loop6): Cannot turn on quotas: error -117
[  368.626792][T25268] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000008,data_err=abort,grpid,errors=remount-ro,abort,stripe=0x0000000000000007,barrier,min_batch_time=0x0000000000000577,. Quota mode: writeback.
[  368.755180][T25253] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  368.766854][T25253] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  368.776546][T25253] F2FS-fs (loop4): invalid crc value
[  368.783535][T25253] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  368.805496][T25276] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  368.831716][T25253] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  368.838808][T25253] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  368.995103][ T1012] usb 7-1: new full-speed USB device number 101 using dummy_hcd
[  369.067633][T25282] F2FS-fs (loop2): invalid crc value
[  369.075526][T25282] F2FS-fs (loop2): Found nat_bits in checkpoint
[  369.105133][T25306] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12263'.
[  369.126977][ T2181] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  369.137190][ T2181] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71
[  369.137274][ T2181] asix: probe of 1-1:0.251 failed with error -5
[  369.151955][ T2181] usb 1-1: USB disconnect, device number 99
[  369.177516][T25282] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1
[  369.204578][T25282] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  369.214682][T25315] sch_tbf: burst 0 is lower than device ip6gre0 mtu (39785) !
[  369.401684][ T1012] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  369.420589][ T1012] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  369.431301][ T1012] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  369.444386][ T1012] usb 7-1: New USB device found, idVendor=045e, idProduct=789d, bcdDevice= 0.4f
[  369.454852][T25337] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  369.465044][ T1012] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.474309][T25337] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  369.483065][T25337] EXT4-fs (loop2): orphan cleanup on readonly fs
[  369.488116][ T1012] usb 7-1: config 0 descriptor??
[  369.494581][T25337] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.12267: bad orphan inode 3
[  369.507228][T25337] EXT4-fs (loop2): Remounting filesystem read-only
[  369.514308][T25337] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,data=writeback. Quota mode: none.
[  369.533050][T25341] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12278'.
[  369.542723][T25337] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.12267: dx entry: limit 0 != root limit 125
[  369.555132][T25341] device veth0_to_bond entered promiscuous mode
[  369.562314][T25337] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.12267: Corrupt directory, running e2fsck is recommended
[  369.575464][T25337] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 5: comm syz.2.12267: path /2422/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  369.596220][T25341] device veth0_to_bond left promiscuous mode
[  369.667234][T25343] set_capacity_and_notify: 16 callbacks suppressed
[  369.667255][T25343] loop2: detected capacity change from 0 to 1024
[  369.744167][T25343] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,nobarrier,errors=remount-ro,. Quota mode: none.
[  369.781856][T25343] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #11: comm syz.2.12279: directory missing '.'
[  369.907394][T25376] device bridge0 entered promiscuous mode
[  369.913649][T25376] bridge0: port 3(vlan2) entered blocking state
[  369.920588][T25376] bridge0: port 3(vlan2) entered disabled state
[  369.940944][T25376] device bridge0 left promiscuous mode
[  370.017966][ T1012] hid-generic 0003:045E:789D.000E: unknown main item tag 0x0
[  370.030851][ T1012] hid-generic 0003:045E:789D.000E: unknown main item tag 0x0
[  370.038348][ T1012] hid-generic 0003:045E:789D.000E: unknown main item tag 0x0
[  370.057668][T25366] loop5: detected capacity change from 0 to 40427
[  370.064247][ T1012] hid-generic 0003:045E:789D.000E: unknown main item tag 0x0
[  370.067254][T25386] loop2: detected capacity change from 0 to 512
[  370.079157][ T1012] hid-generic 0003:045E:789D.000E: unknown main item tag 0x0
[  370.087673][T25366] F2FS-fs (loop5): fault_injection options not supported
[  370.104788][T25366] F2FS-fs (loop5): fault_type options not supported
[  370.106214][ T1012] hid-generic 0003:045E:789D.000E: unbalanced collection at end of report description
[  370.122660][T25366] F2FS-fs (loop5): invalid crc value
[  370.130061][T25366] F2FS-fs (loop5): Found nat_bits in checkpoint
[  370.137318][T25386] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  370.145314][T25386] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  370.159142][ T1012] hid-generic: probe of 0003:045E:789D.000E failed with error -22
[  370.180915][T25386] System zones: 0-1, 15-15, 18-18, 34-34
[  370.192640][T25386] EXT4-fs (loop2): orphan cleanup on readonly fs
[  370.205437][T25386] EXT4-fs warning (device loop2): ext4_enable_quotas:6453: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  370.220399][T25366] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  370.238460][ T1012] usb 7-1: USB disconnect, device number 101
[  370.255649][T25386] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  370.275110][T25386] EXT4-fs (loop2): 1 truncate cleaned up
[  370.287812][T25393] bridge_slave_0: default FDB implementation only supports local addresses
[  370.307663][T25386] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: writeback.
[  370.345208][T25385] loop0: detected capacity change from 0 to 40427
[  370.362827][T25386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12299'.
[  370.373738][T25395] loop4: detected capacity change from 0 to 2048
[  370.384796][T25385] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  370.391372][T25385] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  370.401616][T25385] F2FS-fs (loop0): invalid crc value
[  370.410134][T25385] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  370.455831][T25395] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000000,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,usrjquota=,,errors=continue. Quota mode: none.
[  370.497668][T25385] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  370.506920][T25385] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  370.526155][T25395] EXT4-fs error (device loop4): ext4_find_extent:929: inode #2: comm syz.4.12302: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  370.719830][T25431] tipc: Started in network mode
[  370.724820][T25431] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711
[  370.734068][T25431] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  370.817232][T25443] netlink: 72 bytes leftover after parsing attributes in process `syz.5.12322'.
[  370.933721][T25466] loop0: detected capacity change from 0 to 256
[  370.945980][T25468] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12334'.
[  370.964688][T25466] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  370.977119][T25470] loop2: detected capacity change from 0 to 256
[  371.006987][T25470] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  371.241941][T25512] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12356'.
[  371.272886][T25517] loop0: detected capacity change from 0 to 512
[  371.286343][ T1012] usb 7-1: new high-speed USB device number 102 using dummy_hcd
[  371.317625][T25523] loop2: detected capacity change from 0 to 256
[  371.327207][T25525] loop5: detected capacity change from 0 to 512
[  371.351019][T25523] incfs: Can't find or create .incomplete dir in ./file0
[  371.358683][T25523] incfs: mount failed -28
[  371.363242][T25517] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  371.374388][T25517] ext4 filesystem being mounted at /2459/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  371.385182][T25525] EXT4-fs (loop5): Ignoring removed bh option
[  371.414053][T25525] EXT4-fs (loop5): mounted filesystem without journal. Opts: nouid32,nogrpid,bh,,errors=continue. Quota mode: writeback.
[  371.427208][T25525] ext4 filesystem being mounted at /2215/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  371.548189][ T1012] usb 7-1: Using ep0 maxpacket: 8
[  371.679315][ T1012] usb 7-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  371.703246][ T1012] usb 7-1: config 0 interface 0 has no altsetting 0
[  371.714654][ T1012] usb 7-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  371.730869][ T1012] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.736069][T25576] EXT4-fs (loop4): Ignoring removed bh option
[  371.753493][T25576] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  371.765811][ T1012] usb 7-1: config 0 descriptor??
[  371.803964][T25576] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2233: inode #15: comm syz.4.12384: corrupted in-inode xattr
[  371.832615][T25576] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.12384: couldn't read orphan inode 15 (err -117)
[  371.877157][T25576] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none.
[  372.015476][T25611] usb usb8: usbfs: process 25611 (syz.0.12401) did not claim interface 0 before use
[  372.041542][T25574] F2FS-fs (loop5): fault_injection options not supported
[  372.066714][T25574] F2FS-fs (loop5): invalid crc value
[  372.106265][T25574] F2FS-fs (loop5): Found nat_bits in checkpoint
[  372.167664][T25574] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  372.219261][  T968] handle_bad_sector: 11 callbacks suppressed
[  372.219283][  T968] attempt to access beyond end of device
[  372.219283][  T968] loop5: rw=2049, want=45104, limit=40427
[  372.314444][ T1012] logitech-hidpp-device 0003:046D:C086.000F: hidraw0: USB HID v0.09 Device [HID 046d:c086] on usb-dummy_hcd.6-1/input0
[  372.355232][T25641] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  372.528041][T25613] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  372.552124][T25613] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  372.558519][   T39] usb 7-1: USB disconnect, device number 102
[  372.567226][T25613] F2FS-fs (loop2): invalid crc value
[  372.595764][T25613] F2FS-fs (loop2): Found nat_bits in checkpoint
[  372.648072][T25613] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  372.655295][T25613] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  372.979456][T25674] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[  373.011606][T25674] EXT4-fs (loop5): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none.
[  373.045610][T25674] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.12424: bg 0: block 234: padding at end of block bitmap is not set
[  373.064851][T25674] EXT4-fs (loop5): Remounting filesystem read-only
[  373.099887][T25682] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12427'.
[  373.165559][T25686] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  373.173002][T25686] EXT4-fs (loop4): Ignoring removed nobh option
[  373.182014][T25696] tipc: New replicast peer: 213.197.255.255
[  373.202446][T25696] tipc: Enabled bearer <udp:sy>, priority 10
[  373.226517][T25686] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,errors=remount-ro,nomblk_io_submit,bsdgroups,norecovery,minixdf,nobh,. Quota mode: none.
[  373.248808][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  373.248825][   T30] audit: type=1400 audit(2000000040.013:21479): avc:  denied  { name_bind } for  pid=25705 comm="syz.5.12441" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  373.258065][T25686] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.12429: bg 0: block 2: invalid block bitmap
[  373.294359][T25701] erofs: (device loop6): mounted with root inode @ nid 36.
[  373.302721][T25701] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=86
[  373.315367][   T30] audit: type=1400 audit(2000000040.050:21480): avc:  denied  { node_bind } for  pid=25705 comm="syz.5.12441" saddr=fe80:: src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  373.340075][T25701] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=86
[  373.350008][   T30] audit: type=1400 audit(2000000040.114:21481): avc:  denied  { execute } for  pid=25700 comm="syz.6.12438" name="file1" dev="loop6" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  373.364152][T25701] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=86
[  373.373835][T25686] EXT4-fs (loop4): Remounting filesystem read-only
[  373.388618][T25701] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=86
[  373.397939][   T30] audit: type=1400 audit(2000000040.160:21482): avc:  denied  { execute_no_trans } for  pid=25700 comm="syz.6.12438" path="/2391/file0/file1" dev="loop6" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  373.433617][T25701] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=86
[  373.517587][T25724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12448'.
[  373.662709][   T30] audit: type=1400 audit(2000000040.399:21483): avc:  denied  { create } for  pid=25746 comm="syz.6.12461" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=socket permissive=1
[  373.716631][T25738] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  373.727237][T25738] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  373.803456][T25738] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,norecovery,dioread_nolock,grpquota,discard,user_xattr,mb_optimize_scan=0x0000000000000001,errors=remount-ro,lazytime,. Quota mode: writeback.
[  373.857535][T25762] EXT4-fs (loop4): Ignoring removed bh option
[  373.876702][T25762] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  373.883405][T25768] xt_hashlimit: size too large, truncated to 1048576
[  373.923983][T25762] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,nodelalloc,bh,data_err=ignore,barrier=0x000000000000007f,dioread_nolock,grpquota,dioread_nolock,nobarrier,resuid=0x0000000000000000,min_batch_time=0x0000000000000400,,errors=continue. Quota mode: writeback.
[  373.952820][T25775] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12470'.
[  374.001904][T25762] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.12466: bg 0: block 376: padding at end of block bitmap is not set
[  374.003685][T25775] device ip6gre1 entered promiscuous mode
[  374.150221][T25801] netlink: 'syz.0.12485': attribute type 1 has an invalid length.
[  374.186974][T25797] exfat: Deprecated parameter 'utf8'
[  374.192547][T25797] exfat: Deprecated parameter 'utf8'
[  374.210947][T25811] netlink: 'syz.0.12490': attribute type 28 has an invalid length.
[  374.239049][T25816] netlink: 'syz.6.12492': attribute type 3 has an invalid length.
[  374.262861][T25797] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d)
[  374.283881][   T39] tipc: Node number set to 4278321153
[  374.571097][T25835] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  374.598908][T25835] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  374.613968][T25835] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:510: comm syz.0.12500: Block bitmap for bg 0 marked uninitialized
[  374.621233][   T39] usb 7-1: new high-speed USB device number 103 using dummy_hcd
[  374.835238][T25847] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c801e018, mo2=0000]
[  374.860297][T25847] EXT4-fs error (device loop0): ext4_map_blocks:630: inode #3: block 2: comm syz.0.12505: lblock 2 mapped to illegal pblock 2 (length 1)
[  374.874656][T25847] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  374.882945][T25847] EXT4-fs error (device loop0): ext4_map_blocks:630: inode #3: block 48: comm syz.0.12505: lblock 0 mapped to illegal pblock 48 (length 1)
[  374.897417][T25847] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  374.906323][T25847] EXT4-fs error (device loop0): ext4_acquire_dquot:6201: comm syz.0.12505: Failed to acquire dquot type 0
[  374.914802][   T39] usb 7-1: Using ep0 maxpacket: 32
[  374.922788][T25847] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5880: Corrupt filesystem
[  374.932567][T25847] EXT4-fs error (device loop0): ext4_evict_inode:283: inode #11: comm syz.0.12505: mark_inode_dirty error
[  374.944233][T25847] EXT4-fs warning (device loop0): ext4_evict_inode:286: couldn't mark inode dirty (err -117)
[  374.954664][T25847] EXT4-fs (loop0): 1 orphan inode deleted
[  374.960592][T25847] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,debug,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[  374.982978][   T10] EXT4-fs error (device loop0): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  375.002181][   T30] audit: type=1400 audit(2000000041.631:21484): avc:  denied  { create } for  pid=25846 comm="syz.0.12505" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  375.045177][   T10] Quota error (device loop0): remove_tree: Can't read quota data block 1
[  375.055189][   T10] EXT4-fs error (device loop0): ext4_release_dquot:6237: comm kworker/u4:1: Failed to release dquot type 0
[  375.071927][   T10] EXT4-fs error (device loop0): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  375.088572][   T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  375.100423][T25829] F2FS-fs (loop5): invalid crc value
[  375.108693][   T10] Quota error (device loop0): remove_tree: Can't read quota data block 1
[  375.118831][   T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  375.130405][   T10] EXT4-fs error (device loop0): ext4_release_dquot:6237: comm kworker/u4:1: Failed to release dquot type 0
[  375.143537][   T39] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  375.154516][T25829] F2FS-fs (loop5): Found nat_bits in checkpoint
[  375.186365][   T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.194592][  T969] EXT4-fs error (device loop0): __ext4_get_inode_loc:4358: comm syz-executor: Invalid inode table block 1 in block_group 0
[  375.217401][  T969] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5880: Corrupt filesystem
[  375.219523][   T39] usb 7-1: config 0 descriptor??
[  375.237080][T25829] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2
[  375.238351][  T969] EXT4-fs error (device loop0): ext4_quota_off:6507: inode #3: comm syz-executor: mark_inode_dirty error
[  375.256093][T25829] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  375.348453][T25851] set_capacity_and_notify: 16 callbacks suppressed
[  375.348474][T25851] loop4: detected capacity change from 0 to 40427
[  375.395669][T25851] F2FS-fs (loop4): invalid crc value
[  375.407523][T25851] F2FS-fs (loop4): Found nat_bits in checkpoint
[  375.428458][T25866] loop0: detected capacity change from 0 to 256
[  375.478909][T25866] FAT-fs (loop0): Directory bread(block 64) failed
[  375.486150][T25866] FAT-fs (loop0): Directory bread(block 65) failed
[  375.501919][T25866] FAT-fs (loop0): Directory bread(block 66) failed
[  375.508515][T25866] FAT-fs (loop0): Directory bread(block 67) failed
[  375.515427][T25866] FAT-fs (loop0): Directory bread(block 68) failed
[  375.521977][T25866] FAT-fs (loop0): Directory bread(block 69) failed
[  375.528885][T25866] FAT-fs (loop0): Directory bread(block 70) failed
[  375.535880][T25866] FAT-fs (loop0): Directory bread(block 71) failed
[  375.542520][T25866] FAT-fs (loop0): Directory bread(block 72) failed
[  375.549413][T25866] FAT-fs (loop0): Directory bread(block 73) failed
[  375.557352][T25851] F2FS-fs (loop4): Start checkpoint disabled!
[  375.582092][T25851] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  375.741594][   T39] koneplus 0003:1E7D:2D51.0010: unknown main item tag 0x0
[  375.748802][   T39] koneplus 0003:1E7D:2D51.0010: unknown main item tag 0x0
[  375.776795][   T39] koneplus 0003:1E7D:2D51.0010: unknown main item tag 0x0
[  375.787121][   T39] koneplus 0003:1E7D:2D51.0010: unknown main item tag 0x0
[  375.794315][   T39] koneplus 0003:1E7D:2D51.0010: unknown main item tag 0x0
[  375.803312][   T39] koneplus 0003:1E7D:2D51.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.6-1/input0
[  375.889154][T25882] loop0: detected capacity change from 0 to 256
[  375.913170][T25885] netlink: 'syz.5.12520': attribute type 30 has an invalid length.
[  375.954066][T25892] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12525'.
[  375.966073][T25882] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  375.968884][   T39] koneplus 0003:1E7D:2D51.0010: couldn't init struct koneplus_device
[  375.977316][T25892] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  376.003948][   T39] koneplus 0003:1E7D:2D51.0010: couldn't install mouse
[  376.020883][   T39] koneplus: probe of 0003:1E7D:2D51.0010 failed with error -71
[  376.051662][   T39] usb 7-1: USB disconnect, device number 103
[  376.123794][T25903] loop4: detected capacity change from 0 to 128
[  376.158078][T25909] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  376.165689][T25909] bridge0: port 3(vlan2) entered blocking state
[  376.172063][T25909] bridge0: port 3(vlan2) entered disabled state
[  377.646744][T25859] loop2: detected capacity change from 0 to 131072
[  377.684662][T25859] F2FS-fs (loop2): Found nat_bits in checkpoint
[  377.731727][T25859] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  378.873244][T25941] loop4: detected capacity change from 0 to 512
[  378.945200][T25941] ==================================================================
[  378.953356][T25941] BUG: KASAN: slab-out-of-bounds in __ext4_iget+0x2bb/0x3e50
[  378.960774][T25941] Read of size 8 at addr ffff88812126fef8 by task syz.4.12547/25941
[  378.968793][T25941] 
[  378.971148][T25941] CPU: 1 PID: 25941 Comm: syz.4.12547 Tainted: G        W         syzkaller #0
[  378.980171][T25941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  378.990449][T25941] Call Trace:
[  378.993754][T25941]  <TASK>
[  378.996708][T25941]  __dump_stack+0x21/0x30
[  379.001086][T25941]  dump_stack_lvl+0x110/0x170
[  379.005805][T25941]  ? show_regs_print_info+0x20/0x20
[  379.011200][T25941]  ? load_image+0x3e0/0x3e0
[  379.015743][T25941]  ? _raw_spin_lock+0x94/0xf0
[  379.020460][T25941]  print_address_description+0x7f/0x2c0
[  379.026046][T25941]  ? __ext4_iget+0x2bb/0x3e50
[  379.030760][T25941]  kasan_report+0xf1/0x140
[  379.035214][T25941]  ? __ext4_iget+0x2bb/0x3e50
[  379.039932][T25941]  __asan_report_load8_noabort+0x14/0x20
[  379.045646][T25941]  __ext4_iget+0x2bb/0x3e50
[  379.050190][T25941]  ? ext4_init_orphan_info+0x162/0x11e0
[  379.055761][T25941]  ? __kasan_check_write+0x14/0x20
[  379.060916][T25941]  ? _raw_write_trylock+0x150/0x150
[  379.066158][T25941]  ? __proc_create+0x570/0x8e0
[  379.070965][T25941]  ? ext4_get_projid+0x140/0x140
[  379.075933][T25941]  ? _raw_write_unlock+0x2b/0x60
[  379.080909][T25941]  ? ext4_orphan_file_block_trigger+0x460/0x460
[  379.087182][T25941]  ext4_enable_quotas+0x33c/0x6d0
[  379.092234][T25941]  ext4_fill_super+0x87a6/0x9080
[  379.097207][T25941]  ? ext4_mount+0x40/0x40
[  379.101556][T25941]  ? set_blocksize+0x1eb/0x370
[  379.106334][T25941]  ? sb_set_blocksize+0xaa/0xf0
[  379.111225][T25941]  ? ext4_mount+0x40/0x40
[  379.115575][T25941]  mount_bdev+0x2ae/0x3e0
[  379.119922][T25941]  ? ext4_mount+0x40/0x40
[  379.124262][T25941]  ext4_mount+0x34/0x40
[  379.128437][T25941]  legacy_get_tree+0xed/0x190
[  379.133131][T25941]  ? ext4_errno_to_code+0x160/0x160
[  379.138377][T25941]  vfs_get_tree+0x89/0x260
[  379.142817][T25941]  do_new_mount+0x25a/0xa20
[  379.147337][T25941]  path_mount+0x659/0xff0
[  379.151679][T25941]  ? user_path_at_empty+0x161/0x1c0
[  379.156910][T25941]  __se_sys_mount+0x320/0x390
[  379.161601][T25941]  ? __x64_sys_mount+0xd0/0xd0
[  379.166380][T25941]  __x64_sys_mount+0xbf/0xd0
[  379.170987][T25941]  x64_sys_call+0x6bf/0x9a0
[  379.175506][T25941]  do_syscall_64+0x4c/0xa0
[  379.179937][T25941]  ? clear_bhb_loop+0x50/0xa0
[  379.184632][T25941]  ? clear_bhb_loop+0x50/0xa0
[  379.189332][T25941]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  379.195240][T25941] RIP: 0033:0x7fdd75ae114a
[  379.199671][T25941] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  379.219554][T25941] RSP: 002b:00007fdd7453be58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  379.228002][T25941] RAX: ffffffffffffffda RBX: 00007fdd7453bee0 RCX: 00007fdd75ae114a
[  379.235994][T25941] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 00007fdd7453bea0
[  379.244010][T25941] RBP: 0000200000000080 R08: 00007fdd7453bee0 R09: 0000000002008042
[  379.251998][T25941] R10: 0000000002008042 R11: 0000000000000246 R12: 0000200000000040
[  379.259995][T25941] R13: 00007fdd7453bea0 R14: 0000000000000571 R15: 00002000000000c0
[  379.268114][T25941]  </TASK>
[  379.271151][T25941] 
[  379.273488][T25941] Allocated by task 25762:
[  379.277990][T25941]  __kasan_slab_alloc+0xbd/0xf0
[  379.282862][T25941]  slab_post_alloc_hook+0x4f/0x2b0
[  379.287989][T25941]  kmem_cache_alloc+0xf7/0x260
[  379.292800][T25941]  ext4_alloc_inode+0x21/0x640
[  379.297587][T25941]  new_inode_pseudo+0x62/0x210
[  379.302388][T25941]  new_inode+0x28/0x1e0
[  379.306555][T25941]  ext4_mb_init+0x12a9/0x2100
[  379.311252][T25941]  ext4_fill_super+0x793c/0x9080
[  379.316202][T25941]  mount_bdev+0x2ae/0x3e0
[  379.320548][T25941]  ext4_mount+0x34/0x40
[  379.324738][T25941]  legacy_get_tree+0xed/0x190
[  379.329431][T25941]  vfs_get_tree+0x89/0x260
[  379.333871][T25941]  do_new_mount+0x25a/0xa20
[  379.338390][T25941]  path_mount+0x659/0xff0
[  379.342729][T25941]  __se_sys_mount+0x320/0x390
[  379.347417][T25941]  __x64_sys_mount+0xbf/0xd0
[  379.352019][T25941]  x64_sys_call+0x6bf/0x9a0
[  379.356535][T25941]  do_syscall_64+0x4c/0xa0
[  379.360966][T25941]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  379.366874][T25941] 
[  379.369204][T25941] Freed by task 25:
[  379.373029][T25941]  kasan_set_track+0x4a/0x70
[  379.377628][T25941]  kasan_set_free_info+0x23/0x40
[  379.382579][T25941]  ____kasan_slab_free+0x125/0x160
[  379.387706][T25941]  __kasan_slab_free+0x11/0x20
[  379.392511][T25941]  slab_free_freelist_hook+0xc2/0x190
[  379.397895][T25941]  kmem_cache_free+0x100/0x320
[  379.402673][T25941]  ext4_free_in_core_inode+0x63/0xb0
[  379.408000][T25941]  i_callback+0x4c/0x70
[  379.412169][T25941]  rcu_do_batch+0x532/0xbe0
[  379.416687][T25941]  rcu_core+0x5ee/0xf80
[  379.420858][T25941]  rcu_core_si+0x9/0x10
[  379.425023][T25941]  handle_softirqs+0x250/0x560
[  379.429797][T25941]  run_ksoftirqd+0x28/0x40
[  379.434225][T25941]  smpboot_thread_fn+0x45a/0x8c0
[  379.439178][T25941]  kthread+0x411/0x500
[  379.443254][T25941]  ret_from_fork+0x1f/0x30
[  379.447692][T25941] 
[  379.450042][T25941] Last potentially related work creation:
[  379.455760][T25941]  kasan_save_stack+0x3a/0x60
[  379.460451][T25941]  __kasan_record_aux_stack+0xd2/0x100
[  379.465917][T25941]  kasan_record_aux_stack_noalloc+0xb/0x10
[  379.471742][T25941]  call_rcu+0x10b/0xf80
[  379.475907][T25941]  evict+0x834/0x8d0
[  379.479820][T25941]  iput+0x635/0x7c0
[  379.483649][T25941]  ext4_mb_release+0x786/0xd20
[  379.488434][T25941]  ext4_put_super+0x1eb/0xa70
[  379.493124][T25941]  generic_shutdown_super+0x151/0x330
[  379.498512][T25941]  kill_block_super+0x7f/0xf0
[  379.503200][T25941]  deactivate_locked_super+0xa0/0x100
[  379.508581][T25941]  deactivate_super+0xaf/0xe0
[  379.513271][T25941]  cleanup_mnt+0x45b/0x510
[  379.517797][T25941]  __cleanup_mnt+0x19/0x20
[  379.522260][T25941]  task_work_run+0x127/0x190
[  379.526878][T25941]  exit_to_user_mode_loop+0xd0/0xe0
[  379.532461][T25941]  exit_to_user_mode_prepare+0x87/0xd0
[  379.537942][T25941]  syscall_exit_to_user_mode+0x1a/0x30
[  379.543556][T25941]  do_syscall_64+0x58/0xa0
[  379.547988][T25941]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  379.553898][T25941] 
[  379.556229][T25941] Second to last potentially related work creation:
[  379.562820][T25941]  kasan_save_stack+0x3a/0x60
[  379.567550][T25941]  __kasan_record_aux_stack+0xd2/0x100
[  379.573027][T25941]  kasan_record_aux_stack_noalloc+0xb/0x10
[  379.578854][T25941]  call_rcu+0x10b/0xf80
[  379.583044][T25941]  evict+0x834/0x8d0
[  379.586945][T25941]  iput+0x635/0x7c0
[  379.590765][T25941]  ext4_xattr_inode_array_free+0x8e/0x110
[  379.596496][T25941]  ext4_evict_inode+0xf68/0x1460
[  379.601442][T25941]  evict+0x4c9/0x8d0
[  379.605350][T25941]  iput+0x635/0x7c0
[  379.609167][T25941]  ext4_process_orphan+0x2b1/0x320
[  379.614292][T25941]  ext4_orphan_cleanup+0x9ee/0x10f0
[  379.619499][T25941]  ext4_fill_super+0x8957/0x9080
[  379.624564][T25941]  mount_bdev+0x2ae/0x3e0
[  379.628912][T25941]  ext4_mount+0x34/0x40
[  379.633084][T25941]  legacy_get_tree+0xed/0x190
[  379.637786][T25941]  vfs_get_tree+0x89/0x260
[  379.642226][T25941]  do_new_mount+0x25a/0xa20
[  379.646739][T25941]  path_mount+0x659/0xff0
[  379.651082][T25941]  __se_sys_mount+0x320/0x390
[  379.655805][T25941]  __x64_sys_mount+0xbf/0xd0
[  379.660498][T25941]  x64_sys_call+0x6bf/0x9a0
[  379.665010][T25941]  do_syscall_64+0x4c/0xa0
[  379.669440][T25941]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  379.675351][T25941] 
[  379.677687][T25941] The buggy address belongs to the object at ffff88812126f4e0
[  379.677687][T25941]  which belongs to the cache ext4_inode_cache of size 1368
[  379.692277][T25941] The buggy address is located 1216 bytes to the right of
[  379.692277][T25941]  1368-byte region [ffff88812126f4e0, ffff88812126fa38)
[  379.706260][T25941] The buggy address belongs to the page:
[  379.712171][T25941] page:ffffea0004849a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888121268bb0 pfn:0x121268
[  379.723776][T25941] head:ffffea0004849a00 order:3 compound_mapcount:0 compound_pincount:0
[  379.732121][T25941] flags: 0x4000000000010200(slab|head|zone=1)
[  379.738222][T25941] raw: 4000000000010200 ffffea0004849e00 0000000300000003 ffff8881003db200
[  379.747001][T25941] raw: ffff888121268bb0 0000000080150014 00000001ffffffff 0000000000000000
[  379.755597][T25941] page dumped because: kasan: bad access detected
[  379.762024][T25941] page_owner tracks the page as allocated
[  379.767776][T25941] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 918, ts 27751245862, free_ts 0
[  379.788283][T25941]  post_alloc_hook+0x192/0x1b0
[  379.793098][T25941]  prep_new_page+0x1c/0x110
[  379.797614][T25941]  get_page_from_freelist+0x2d3a/0x2dc0
[  379.803170][T25941]  __alloc_pages+0x1a2/0x460
[  379.807779][T25941]  new_slab+0xa1/0x4d0
[  379.811871][T25941]  ___slab_alloc+0x381/0x810
[  379.816484][T25941]  __slab_alloc+0x49/0x90
[  379.820834][T25941]  kmem_cache_alloc+0x138/0x260
[  379.825695][T25941]  ext4_alloc_inode+0x21/0x640
[  379.830468][T25941]  new_inode_pseudo+0x62/0x210
[  379.835245][T25941]  new_inode+0x28/0x1e0
[  379.839411][T25941]  __ext4_new_inode+0x215/0x3730
[  379.844380][T25941]  ext4_mkdir+0x43f/0xce0
[  379.848743][T25941]  vfs_mkdir+0x387/0x580
[  379.853003][T25941]  do_mkdirat+0x171/0x4c0
[  379.857350][T25941]  __x64_sys_mkdirat+0x89/0xa0
[  379.862128][T25941] page_owner free stack trace missing
[  379.867515][T25941] 
[  379.869863][T25941] Memory state around the buggy address:
[  379.875499][T25941]  ffff88812126fd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  379.883570][T25941]  ffff88812126fe00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  379.891641][T25941] >ffff88812126fe80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  379.899716][T25941]                                                                 ^
[  379.907702][T25941]  ffff88812126ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  379.915774][T25941]  ffff88812126ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  379.923841][T25941] ==================================================================
[  379.931913][T25941] Disabling lock debugging due to kernel taint
[  379.952795][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  379.952810][   T30] audit: type=1400 audit(2000000046.200:21486): avc:  denied  { read } for  pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  379.984370][T25941] EXT4-fs warning (device loop4): ext4_enable_quotas:6453: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix.
[  380.000341][T25941] EXT4-fs (loop4): mount failed
[  380.010740][   T30] audit: type=1400 audit(2000000046.218:21487): avc:  denied  { search } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  380.041195][   T30] audit: type=1400 audit(2000000046.218:21488): avc:  denied  { write } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  380.062724][   T30] audit: type=1400 audit(2000000046.218:21489): avc:  denied  { add_name } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  380.083724][   T30] audit: type=1400 audit(2000000046.218:21490): avc:  denied  { create } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  380.104855][   T30] audit: type=1400 audit(2000000046.218:21491): avc:  denied  { append open } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  380.128237][   T30] audit: type=1400 audit(2000000046.218:21492): avc:  denied  { getattr } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1