last executing test programs:

1m38.718355947s ago: executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[], 0xff3b)
r4 = accept4(r1, 0x0, 0x0, 0x0)
splice(r2, 0x0, r4, 0x0, 0x1e8640, 0x0)
accept$packet(r4, 0x0, 0x0)

1m38.331409381s ago: executing program 4:
syz_emit_ethernet(0x3e, &(0x7f00000007c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x1, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}}}, 0x0)

1m38.144959692s ago: executing program 4:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10)
socket$l2tp6(0xa, 0x2, 0x73)

1m37.599264506s ago: executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fchdir(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_ext_remove_space\x00'}, 0x10)
open(&(0x7f0000000140)='./bus\x00', 0x147042, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='generic_add_lease\x00', r1}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2440, 0x0)
fcntl$setlease(r2, 0x400, 0x0)

1m13.498573963s ago: executing program 0:
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, 0x0, 0x0}, 0x20)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x72)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m13.123021263s ago: executing program 0:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8}]}}}]}, 0x3c}}, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8}]}, 0x34}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000500", 0x33fe0}], 0x1}, 0x0)

1m13.010100407s ago: executing program 0:
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000007c0)={[{@nls={'nls', 0x3d, 'cp874'}}, {@nobarrier}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@barrier}, {@part={'part', 0x3d, 0x2}}, {@umask={'umask', 0x3d, 0xde5}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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")
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='osx.'], 0x0, 0x0, 0x0)

1m12.661049601s ago: executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
socketpair(0x0, 0x3, 0x1, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r1)
r2 = syz_open_procfs(0x0, 0x0)
getpeername$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
pipe2$9p(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
getgroups(0x3, &(0x7f00000002c0)=[0xee00, 0xee01, <r6=>0xffffffffffffffff])
mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r6}}]}})
mount(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f00000000c0)='./file1\x00')
r7 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r8}, 0x10)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000200)='source', &(0x7f00000006c0)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/\xb0\t\x00\x00\x00\x00\x00\x00U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/\xb4\x00\x80_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a3\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1br\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\xd6\xcb\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9&\xe6\xd5\\\xb5\xec\x99@\xd2\t\n\xb1o\xc1\xfc\x85\xf5.\xa2\x17\xdd^-\xe4\xa7d`\xae\x0e\xe7\x14v\x00>7\x8aH\xd6\xd8\xbf\xe7\xc4|y\x1b\xd3\x88\x139\x8a/L;)?\x80J\x85\xf0[?\x01\xa3\x02~5*\x94`\x1a\"g\x8aV\xb6q{\xbc\x18\x99Y\x12\xd2\xc2\n>\xbb)\xf6|*\xbb\x14F\nZ\xact\xc5\x12\xdd\xda\xe4\x91\x0f\xdf\xb1\xf4\xf7\xa8?tO\xa6|\x11clY\x02\x17 \xf6\xe7\x8a\x93vr\x80A\xbc\xdd#\xd5y\v\xf5\xd6\xe7B\xf1@\xe1w\xfa[\xa4;\xf6\x99\x02\xa8\xcbu\xf1jdV<\xe4y\xf6\xb9\xadHN\a_w ?\xe7\x83\"\xf5\x1f\xb2\x04\x80\xcay\x03`\xa3\xf0+i2jQ\xea\x00um\xe1g\xa4\xd4\xec;\x87\x9c\xef\xc9\x91\xa8\xb2\xef\xee\x98\x12\xd2!\x89\x98T\xdb%R\'\x01\f\xb4\xf4a\x81\x00X\xea\x1c\x03<\xc05\x0e\xd8\xfe9\xd9\x99\xe7\xf5\xc3\x97.\xf4Y\xb7!/yy\xee\x84\xef\bw=\xab\xea\x18\xdaS\xf2\'S:\x86\xf6o\x89\xf1\xe0\xcc\x13P\xa7\x06\xc6\xe9\xfe\xed\xf7\x04\xadJ\xfd:\x9fL>=\xdbQ\xde\xb0\x1e$\xd1\x17\f\xddiN\xf5\xca\x84\xf3\xd5[\x1e\xb2\x9d6\x89\xc7w\x14\xb6\xb9G\x80\xb3\xd4C', 0x0)
ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x103be52, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x1018, <r9=>0xffffffffffffffff, {0x2}}, './file0\x00'})
semctl$SETALL(0x0, 0x0, 0x11, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x10, r9, 0x10000000)
ioctl$sock_inet_SIOCADDRT(r10, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4}, {0x2, 0x4e23, @remote}, 0x184, 0x0, 0x0, 0x0, 0x9e58, &(0x7f0000000180)='lo\x00'})

1m12.002201931s ago: executing program 0:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8}]}}}]}, 0x3c}}, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8}]}, 0x34}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000500", 0x33fe0}], 0x1}, 0x0)

1m10.489614468s ago: executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fchdir(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_ext_remove_space\x00'}, 0x10)
open(&(0x7f0000000140)='./bus\x00', 0x147042, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='generic_add_lease\x00', r1}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2440, 0x0)
fcntl$setlease(r2, 0x400, 0x0)

1m8.395511549s ago: executing program 3:
setrlimit(0x8, &(0x7f0000000080))
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendto$inet(r2, 0x0, 0x0, 0xc802, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
sendto$inet(r2, &(0x7f0000000100)="bd", 0x1, 0x2404c880, 0x0, 0x0)

1m8.217982243s ago: executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800260007000200060007000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1m7.218047875s ago: executing program 3:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00')
read(r1, &(0x7f0000000140)=""/220, 0xec)

1m7.099322288s ago: executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
socketpair(0x0, 0x3, 0x1, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r1)
r2 = syz_open_procfs(0x0, 0x0)
getpeername$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
pipe2$9p(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
getgroups(0x3, &(0x7f00000002c0)=[0xee00, 0xee01, <r6=>0xffffffffffffffff])
mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r6}}]}})
mount(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f00000000c0)='./file1\x00')
r7 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r8}, 0x10)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000200)='source', &(0x7f00000006c0)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/\xb0\t\x00\x00\x00\x00\x00\x00U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/\xb4\x00\x80_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a3\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1br\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\xd6\xcb\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9&\xe6\xd5\\\xb5\xec\x99@\xd2\t\n\xb1o\xc1\xfc\x85\xf5.\xa2\x17\xdd^-\xe4\xa7d`\xae\x0e\xe7\x14v\x00>7\x8aH\xd6\xd8\xbf\xe7\xc4|y\x1b\xd3\x88\x139\x8a/L;)?\x80J\x85\xf0[?\x01\xa3\x02~5*\x94`\x1a\"g\x8aV\xb6q{\xbc\x18\x99Y\x12\xd2\xc2\n>\xbb)\xf6|*\xbb\x14F\nZ\xact\xc5\x12\xdd\xda\xe4\x91\x0f\xdf\xb1\xf4\xf7\xa8?tO\xa6|\x11clY\x02\x17 \xf6\xe7\x8a\x93vr\x80A\xbc\xdd#\xd5y\v\xf5\xd6\xe7B\xf1@\xe1w\xfa[\xa4;\xf6\x99\x02\xa8\xcbu\xf1jdV<\xe4y\xf6\xb9\xadHN\a_w ?\xe7\x83\"\xf5\x1f\xb2\x04\x80\xcay\x03`\xa3\xf0+i2jQ\xea\x00um\xe1g\xa4\xd4\xec;\x87\x9c\xef\xc9\x91\xa8\xb2\xef\xee\x98\x12\xd2!\x89\x98T\xdb%R\'\x01\f\xb4\xf4a\x81\x00X\xea\x1c\x03<\xc05\x0e\xd8\xfe9\xd9\x99\xe7\xf5\xc3\x97.\xf4Y\xb7!/yy\xee\x84\xef\bw=\xab\xea\x18\xdaS\xf2\'S:\x86\xf6o\x89\xf1\xe0\xcc\x13P\xa7\x06\xc6\xe9\xfe\xed\xf7\x04\xadJ\xfd:\x9fL>=\xdbQ\xde\xb0\x1e$\xd1\x17\f\xddiN\xf5\xca\x84\xf3\xd5[\x1e\xb2\x9d6\x89\xc7w\x14\xb6\xb9G\x80\xb3\xd4C', 0x0)
ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x103be52, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x1018, <r9=>0xffffffffffffffff, {0x2}}, './file0\x00'})
semctl$SETALL(0x0, 0x0, 0x11, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x10, r9, 0x10000000)
ioctl$sock_inet_SIOCADDRT(r10, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4}, {0x2, 0x4e23, @remote}, 0x184, 0x0, 0x0, 0x0, 0x9e58, &(0x7f0000000180)='lo\x00'})

1m6.680678344s ago: executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00')
r0 = getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
kexec_load(0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdir(0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000002640)=[{&(0x7f0000000280)=""/200, 0xc8}], 0x1, 0xff, 0x0)

49.790492629s ago: executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fchdir(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_ext_remove_space\x00'}, 0x10)
open(&(0x7f0000000140)='./bus\x00', 0x147042, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='generic_add_lease\x00', r1}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2440, 0x0)
fcntl$setlease(r2, 0x400, 0x0)

46.023014507s ago: executing program 0:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400)
ioctl$TUNSETOFFLOAD(r0, 0x80047441, 0x20000015)

39.936328849s ago: executing program 3:
open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

34.013008782s ago: executing program 2:
r0 = fanotify_init(0x0, 0x0)
r1 = epoll_create1(0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
fanotify_mark(r2, 0x21, 0x8, r2, 0x0)
fanotify_mark(r0, 0x22, 0x40000011, r2, 0x0)

33.982831342s ago: executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x3c}}, 0x0)
r3 = openat$cgroup_int(r1, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040), &(0x7f00000000c0)=0x10)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x78}}, 0x0)
recvmmsg$unix(r4, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}], 0x3, 0x0, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='-', @ANYRESDEC, @ANYRESDEC], 0x27)
socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0xfffffffd}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r5, 0x0, 0xa002a0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080), &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r5}, 0x38)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x20)

33.914057894s ago: executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@private1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @mcast1}, 0x1c, 0x0}, 0x4004010)
sendto$inet6(r0, &(0x7f0000000340)="dc30a260584fe046ea702b6f0660030b9b97024e3f663740bbae6cb1fb68d5cc78d35c3c90b032623b21f7874524d3f0c21152685407e50c092c8fba337449450c1f033cd6c47a0b143baf975fa7d3dfeceff30db6e688d4a2377a777462ed3e47302a392ea0b196730c18a203ba4922c0", 0x71, 0x20000000, &(0x7f00000003c0)={0xa, 0x4e21, 0x401, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(blake2b-160-generic)\x00'}, 0x58)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500060000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0)

33.638611055s ago: executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x13, r0, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0x19, 0x0, <r2=>0x0})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r2, 0x0, <r5=>0xffffffffffffffff, 0x1})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x0, 0x4000, 0x1de6b9})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f00000004c0)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23b3b6})

33.373737743s ago: executing program 2:
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000340)='./file1\x00', 0x4000, &(0x7f0000000e00)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRESDEC=0x0, @ANYBLOB="303030304e303030303030303030303030462ca0179058936d6561737572652c00"], 0x1, 0xc34, &(0x7f0000000f40)="$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")
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x72000}], 0x10, 0x31200, 0x0, 0x3)

32.959534341s ago: executing program 1:
timer_create(0x7, 0x0, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000680)={{}, {0x0, 0x3938700}}, &(0x7f00000006c0))

32.86881109s ago: executing program 1:
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x82, &(0x7f0000000700)=ANY=[@ANYRES8, @ANYRES64=0x0, @ANYBLOB="2c616e63686f723d30303030000088be0900303030303030303030312c7569643d666f726765742c00215e8c2e42462f3ab5e1f7c0527abbb422be9178aa60681964adb069ae876c4a599d560075ac47c0de1a9bb9146af6433efdcdac853a8e8f16d6bad90ecce0a1fab46f48331e6b3c325c08df3c334e4da28067a30b3b1dc64bf692c712fc273bc1702008f563765c6f3e67d97e1369973c2a87f0ecca7320819863179fb85e394a8cf1d62c70d8306633b6958ebf998a0685bc5cdd1f97291328743add4c867115fae1082f8faf482e15eb939968"], 0x0, 0xc34, &(0x7f0000001080)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x0, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f00000001c0))
ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet(0x2, 0x0, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x3a}, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCVHANGUP(r3, 0x80045432, 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00')
execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff})
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xf, 0x8, 0x0, 0x2, 0xd, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x48)

31.78060691s ago: executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_ethernet(0x42, 0x0, 0x0)
syz_mount_image$reiserfs(&(0x7f0000010000), &(0x7f0000010040)='./file0\x00', 0x0, &(0x7f0000010080), 0x1, 0xffdb, &(0x7f00000100c0)="$eJzs1jFKA1EYBODZrL3yp18DeoEYD6CFQhoLbyCSylTZSrH0eOIVvIAWnkAJZAV7cQu/rxymeK8Z/gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDWWfJ2mExnSQ3ZLMle0nUvy6c26Yb84LmdpMn1atlfbE4u+yRtkm022VWaJDU/qlrUouZ1Oj0/rv7+4e5mvV5tvjtdXj8eb3P1/qtfaXbvAQAAAH76BP6x/bEnCBjJ2OsDAPy9se8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhz45NGwaiMAD/J6kXZACRMkUQWiFldkiXNVJmlMyTKn0mcGHwAEa2JWyjxhis5vtAvKcf7rgrHwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrepqa5yRN0nW/79910q17LAAAAOBOJVU+2qU8qS6S1/y1Zc7HuitjP+RnYT0AAABwm3I2j7+kmefycniqb9L3x/9TyeYtqZMMV/v8b78+p6888gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADs2YEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN+6J4wNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAFQAA//+11BhO")

30.714455735s ago: executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0)

30.029659092s ago: executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x3c}}, 0x0)

673.140318ms ago: executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x44, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote={0xac, 0x3}}}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev}}}]}]}, 0x44}}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00 \x00', @ANYRES16=r1, @ANYBLOB="01"], 0x24}}, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000003"], 0x24d8}], 0x1}, 0x0)

0s ago: executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@setlink={0x48, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_to_batadv\x00'}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x5}, @IFLA_XDP_FD={0x8}]}]}, 0x48}}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000003ac0)={0x0, [[0x3], [0x7f7f], [0x1]], '\x00', [{}, {0x0, 0x1ff}, {0x0, 0x1000}]})
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401, 0x0, 0x0, {0xa}}], {0x14}}, 0x3c}}, 0x0)

kernel console output (not intermixed with test programs):

1645.980029][   T29] kauditd_printk_skb: 25 callbacks suppressed
[ 1645.980058][   T29] audit: type=1326 audit(1717964788.362:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22655 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe634a7cf69 code=0x0
[ 1646.188535][T10996] Bluetooth: hci2: command 0x0406 tx timeout
[ 1646.501080][T22282] 8021q: adding VLAN 0 to HW filter on device team0
[ 1646.894592][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1646.901953][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1646.974409][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1646.981670][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1647.023063][   T29] audit: type=1400 audit(1717964789.402:1937): avc:  denied  { read } for  pid=22664 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1647.138350][T22673] netlink: 'syz-executor.3': attribute type 5 has an invalid length.
[ 1647.262410][   T29] audit: type=1804 audit(1717964789.642:1938): pid=22677 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3656790577/syzkaller.sD4JjQ/71/.log" dev="sda1" ino=1966 res=1 errno=0
[ 1647.288694][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1647.300838][T22677] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[ 1647.452425][T22679] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[ 1647.683062][T19958] hsr_slave_0: left promiscuous mode
[ 1647.702921][T22681] loop0: detected capacity change from 0 to 1024
[ 1647.750138][T19958] hsr_slave_1: left promiscuous mode
[ 1647.825951][T19958] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1647.844497][T19958] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1647.874152][T22681] ext4: Unknown parameter '5ñÕ5•·èmug_want_extra_isize'
[ 1647.882524][T19958] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1647.892336][T19958] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1648.025485][T19958] veth1_macvtap: left promiscuous mode
[ 1648.031372][T19958] veth0_macvtap: left promiscuous mode
[ 1648.037461][T19958] veth1_vlan: left promiscuous mode
[ 1648.154222][T19958] infiniband syz2: set down
[ 1648.234477][   T29] audit: type=1400 audit(1717964790.592:1939): avc:  denied  { setattr } for  pid=22689 comm="syz-executor.2" name="ptmx" dev="devtmpfs" ino=617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1
[ 1648.330460][T22692] loop3: detected capacity change from 0 to 256
[ 1648.355825][T22692] exfat: Unknown parameter 'fma'
[ 1648.838522][T19958] team0 (unregistering): Port device virt_wifi0 removed
[ 1649.337332][ T5660] smc: removing ib device syz2
[ 1649.380718][T19958] team0 (unregistering): Port device team_slave_1 removed
[ 1649.473423][T19958] team0 (unregistering): Port device team_slave_0 removed
[ 1650.230290][T22685] netlink: 'syz-executor.1': attribute type 5 has an invalid length.
[ 1650.249859][T22685] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1650.290469][T12623] infiniband syz2: ib_query_port failed (-19)
[ 1650.586777][T22282] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1651.203162][T22708] loop2: detected capacity change from 0 to 1024
[ 1651.445080][T22708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1651.611590][T22282] veth0_vlan: entered promiscuous mode
[ 1651.653812][T22719] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1651.683897][T22282] veth1_vlan: entered promiscuous mode
[ 1652.043459][T22282] veth0_macvtap: entered promiscuous mode
[ 1652.160191][T22282] veth1_macvtap: entered promiscuous mode
[ 1652.181144][T21666] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1652.285820][T22282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1652.300874][T22725] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1652.326987][T22724] loop0: detected capacity change from 0 to 512
[ 1652.347428][T22282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1652.364065][T22727] loop3: detected capacity change from 0 to 128
[ 1652.365362][T22282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1652.394317][T22724] EXT4-fs (loop0): corrupt root inode, run e2fsck
[ 1652.415840][T22282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1652.426278][T22724] EXT4-fs (loop0): mount failed
[ 1652.441683][T22282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1652.445918][T22727] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1652.465641][T22282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1652.481522][T22282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1652.495924][T22727] ext4 filesystem being mounted at /root/syzkaller-testdir745598748/syzkaller.zksXS9/94/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1652.512152][T22282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1652.554518][T22282] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1652.749125][T22282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1652.794813][T22282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1652.907572][   T29] audit: type=1400 audit(1717964795.192:1940): avc:  denied  { read } for  pid=22734 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[ 1652.959544][T22282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1653.023376][T22282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1653.077299][T22282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1653.123060][T22282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1654.545798][T22282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1655.076866][T22282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1655.126455][T22742] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1655.127397][T22282] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1655.204370][T21282] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1655.432808][T22282] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1655.454829][T22751] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1655.488825][T22282] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1655.499544][   T29] audit: type=1400 audit(1717964797.882:1941): avc:  denied  { nlmsg_read } for  pid=22753 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1655.514261][T22282] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1655.540232][T22282] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1655.624045][T19958] IPVS: stop unused estimator thread 0...
[ 1655.854268][T19958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1655.854296][T19958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1655.947454][T22757] loop2: detected capacity change from 0 to 1024
[ 1655.984237][T22757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1656.099870][T19958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1656.099897][T19958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1656.148574][T22761] loop3: detected capacity change from 0 to 2048
[ 1656.176102][T22762] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1656.229736][   T29] audit: type=1804 audit(1717964798.612:1942): pid=22761 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir745598748/syzkaller.zksXS9/96/file2/file2" dev="loop3" ino=16 res=1 errno=0
[ 1656.257170][T22761] NILFS (loop3): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3)
[ 1656.257358][T22761] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=16)
[ 1656.275144][T22761] Remounting filesystem read-only
[ 1656.346474][T21282] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[ 1656.346649][T21282] NILFS (loop3): discard dirty page: offset=0, ino=16
[ 1656.346674][T21282] NILFS (loop3): discard dirty block: blocknr=23, size=1024
[ 1656.346695][T21282] NILFS (loop3): discard dirty block: blocknr=24, size=1024
[ 1656.346715][T21282] NILFS (loop3): discard dirty block: blocknr=25, size=1024
[ 1656.346734][T21282] NILFS (loop3): discard dirty block: blocknr=26, size=1024
[ 1656.346769][T21282] NILFS (loop3): discard dirty page: offset=4096, ino=16
[ 1656.346790][T21282] NILFS (loop3): discard dirty block: blocknr=27, size=1024
[ 1656.346810][T21282] NILFS (loop3): discard dirty block: blocknr=28, size=1024
[ 1656.346830][T21282] NILFS (loop3): discard dirty block: blocknr=29, size=1024
[ 1656.346851][T21282] NILFS (loop3): discard dirty block: blocknr=30, size=1024
[ 1656.346877][T21282] NILFS (loop3): discard dirty page: offset=8192, ino=16
[ 1656.346899][T21282] NILFS (loop3): discard dirty block: blocknr=31, size=1024
[ 1656.346920][T21282] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1656.346943][T21282] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1656.346965][T21282] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1656.348093][T21282] NILFS (loop3): discard dirty page: offset=4096, ino=6
[ 1656.348118][T21282] NILFS (loop3): discard dirty block: blocknr=39, size=1024
[ 1656.348140][T21282] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1656.348161][T21282] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1656.348183][T21282] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1656.349938][T21282] NILFS (loop3): discard dirty page: offset=0, ino=5
[ 1656.349964][T21282] NILFS (loop3): discard dirty block: blocknr=41, size=1024
[ 1656.349986][T21282] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1656.350006][T21282] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1656.350027][T21282] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1656.350515][T21282] NILFS (loop3): discard dirty page: offset=0, ino=3
[ 1656.350540][T21282] NILFS (loop3): discard dirty block: blocknr=42, size=1024
[ 1656.350563][T21282] NILFS (loop3): discard dirty block: blocknr=43, size=1024
[ 1656.350585][T21282] NILFS (loop3): discard dirty block: blocknr=44, size=1024
[ 1656.350607][T21282] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1656.469383][T21666] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1656.594398][T22766] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1656.793503][   T53] block nbd4: Receive control failed (result -32)
[ 1656.847092][T22764] block nbd4: shutting down sockets
[ 1657.198960][T13770] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1657.400801][   T29] audit: type=1400 audit(1717964799.782:1943): avc:  denied  { read } for  pid=22773 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1657.739068][T22786] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1658.609325][   T29] audit: type=1800 audit(1717964800.542:1944): pid=22800 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="sda1" ino=1953 res=0 errno=0
[ 1658.631544][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1659.005892][T22794] loop1: detected capacity change from 0 to 1024
[ 1659.043951][T22804] loop0: detected capacity change from 0 to 512
[ 1659.153020][T22804] EXT4-fs (loop0): revision level too high, forcing read-only mode
[ 1659.218946][   T53] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1659.279418][T22804] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[ 1659.324454][T22804] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 1659.373487][T22804] EXT4-fs warning (device loop0): ext4_block_to_path:105: block 3279949761 > max in inode 13
[ 1659.404543][T22804] EXT4-fs warning (device loop0): ext4_block_to_path:105: block 3279949762 > max in inode 13
[ 1659.481993][T22804] EXT4-fs (loop0): 1 truncate cleaned up
[ 1659.503531][T22804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[ 1659.687834][T22804] EXT4-fs warning (device loop0): dx_probe:890: inode #2: comm syz-executor.0: dx entry: limit 65535 != root limit 120
[ 1659.706398][T22804] EXT4-fs warning (device loop0): dx_probe:964: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended
[ 1659.739602][T22804] EXT4-fs warning (device loop0): dx_probe:890: inode #2: comm syz-executor.0: dx entry: limit 65535 != root limit 120
[ 1659.772638][T22804] EXT4-fs warning (device loop0): dx_probe:964: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended
[ 1659.855527][T22813] EXT4-fs warning (device loop0): dx_probe:890: inode #2: comm syz-executor.0: dx entry: limit 65535 != root limit 120
[ 1659.871735][T22813] EXT4-fs warning (device loop0): dx_probe:964: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended
[ 1659.942413][T22816] netlink: 'syz-executor.3': attribute type 5 has an invalid length.
[ 1659.959497][T22815] loop2: detected capacity change from 0 to 512
[ 1660.000114][T22816] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1660.017017][T22804] EXT4-fs warning (device loop0): dx_probe:890: inode #2: comm syz-executor.0: dx entry: limit 65535 != root limit 120
[ 1660.036045][T22804] EXT4-fs warning (device loop0): dx_probe:964: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended
[ 1660.120852][T22815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1660.146333][T22815] ext4 filesystem being mounted at /root/syzkaller-testdir4143288020/syzkaller.WI9tGF/63/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1660.161117][T22804] EXT4-fs warning (device loop0): dx_probe:890: inode #2: comm syz-executor.0: dx entry: limit 65535 != root limit 120
[ 1660.161241][T22804] EXT4-fs warning (device loop0): dx_probe:964: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended
[ 1660.387642][T21634] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1660.798909][T22834] loop0: detected capacity change from 0 to 256
[ 1660.910694][T21666] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1661.068329][T22844] loop3: detected capacity change from 0 to 256
[ 1661.135287][T22844] FAT-fs (loop3): bogus sectors per cluster 0
[ 1661.141423][T22844] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 1661.377213][T22853] loop4: detected capacity change from 0 to 512
[ 1661.420958][T22853] EXT4-fs (loop4): corrupt root inode, run e2fsck
[ 1661.432932][T22853] EXT4-fs (loop4): mount failed
[ 1661.443559][   T29] audit: type=1800 audit(1717964803.822:1945): pid=22857 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="/" dev="fuse" ino=1 res=0 errno=0
[ 1661.548060][   T29] audit: type=1400 audit(1717964803.922:1946): avc:  denied  { execute } for  pid=22856 comm="syz-executor.3" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[ 1661.835058][T22863] loop4: detected capacity change from 0 to 512
[ 1661.881836][T22863] EXT4-fs (loop4): revision level too high, forcing read-only mode
[ 1661.920666][T22863] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[ 1661.955717][T22863] EXT4-fs (loop4): orphan cleanup on readonly fs
[ 1661.963288][T22863] EXT4-fs warning (device loop4): ext4_block_to_path:105: block 3279949761 > max in inode 13
[ 1661.980742][T22863] EXT4-fs warning (device loop4): ext4_block_to_path:105: block 3279949762 > max in inode 13
[ 1662.024552][T22863] EXT4-fs (loop4): 1 truncate cleaned up
[ 1662.077094][T22863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[ 1662.081017][T22838] loop1: detected capacity change from 0 to 32768
[ 1662.192941][T22838] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[ 1662.403250][T22863] EXT4-fs warning (device loop4): dx_probe:890: inode #2: comm syz-executor.4: dx entry: limit 65535 != root limit 120
[ 1662.472161][T22876] loop2: detected capacity change from 0 to 256
[ 1662.682988][T22876] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d)
[ 1663.102600][T22863] EXT4-fs warning (device loop4): dx_probe:964: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended
[ 1663.143661][T22863] EXT4-fs warning (device loop4): dx_probe:890: inode #2: comm syz-executor.4: dx entry: limit 65535 != root limit 120
[ 1663.176658][T22838] XFS (loop1): Ending clean mount
[ 1663.192254][T22863] EXT4-fs warning (device loop4): dx_probe:964: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended
[ 1663.384136][T22878] EXT4-fs warning (device loop4): dx_probe:890: inode #2: comm syz-executor.4: dx entry: limit 65535 != root limit 120
[ 1663.384313][T22877] EXT4-fs warning (device loop4): dx_probe:890: inode #2: comm syz-executor.4: dx entry: limit 65535 != root limit 120
[ 1663.458414][T22878] EXT4-fs warning (device loop4): dx_probe:964: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended
[ 1663.597395][T22877] EXT4-fs warning (device loop4): dx_probe:964: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended
[ 1663.641591][T22863] EXT4-fs warning (device loop4): dx_probe:890: inode #2: comm syz-executor.4: dx entry: limit 65535 != root limit 120
[ 1663.682996][T22863] EXT4-fs warning (device loop4): dx_probe:964: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended
[ 1663.718769][T21656] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[ 1663.774005][T22886] loop3: detected capacity change from 0 to 512
[ 1663.927662][T22282] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1664.000489][T22886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1664.011494][T22893] loop2: detected capacity change from 0 to 256
[ 1664.013368][T22886] ext4 filesystem being mounted at /root/syzkaller-testdir745598748/syzkaller.zksXS9/107/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1664.407619][T22901] loop1: detected capacity change from 0 to 64
[ 1664.420813][T22901] BFS-fs: bfs_fill_super(): Impossible last inode number 18874527 > 513 on loop1
[ 1664.797330][T21282] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1665.531848][T22909] loop1: detected capacity change from 0 to 8192
[ 1665.810968][T22909] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1665.960314][T22908] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[ 1665.969549][T22908] FAT-fs (loop1): Filesystem has been set read-only
[ 1665.977016][T22908] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[ 1665.986079][T22908] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[ 1666.236613][T21656] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[ 1666.330712][T22915] netlink: 'syz-executor.3': attribute type 7 has an invalid length.
[ 1666.505094][   T29] audit: type=1800 audit(1717964808.882:1947): pid=22924 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="/" dev="fuse" ino=1 res=0 errno=0
[ 1666.714383][   T29] audit: type=1800 audit(1717964809.092:1948): pid=22929 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1965 res=0 errno=0
[ 1666.790177][T22931] loop1: detected capacity change from 0 to 512
[ 1666.895133][T22931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1667.394967][T22931] ext4 filesystem being mounted at /root/syzkaller-testdir1072928409/syzkaller.zeOb5B/77/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1667.609014][T22931] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz-executor.1: corrupted inode contents
[ 1667.667646][T22931] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz-executor.1: mark_inode_dirty error
[ 1667.766735][T22931] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz-executor.1: corrupted inode contents
[ 1667.838193][T22931] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz-executor.1: mark_inode_dirty error
[ 1668.035824][   T29] audit: type=1400 audit(1717964810.412:1949): avc:  denied  { rename } for  pid=22930 comm="syz-executor.1" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[ 1668.089067][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1668.131234][T21656] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1668.555274][   T29] audit: type=1800 audit(1717964810.902:1950): pid=22959 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1948 res=0 errno=0
[ 1668.597654][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1669.600469][ T1250] ieee802154 phy0 wpan0: encryption failed: -22
[ 1669.600555][ T1250] ieee802154 phy1 wpan1: encryption failed: -22
[ 1669.832754][T10996] Bluetooth: hci5: sending frame failed (-49)
[ 1669.835582][   T53] Bluetooth: hci5: Opcode 0x1003 failed: -49
[ 1670.184975][T22976] loop4: detected capacity change from 0 to 256
[ 1670.210541][T22976] FAT-fs (loop4): bogus sectors per cluster 0
[ 1670.210575][T22976] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1671.673972][T22990] loop4: detected capacity change from 0 to 1024
[ 1671.720762][T22990] hfsplus: request for non-existent node 3 in B*Tree
[ 1671.720943][T22990] hfsplus: request for non-existent node 3 in B*Tree
[ 1672.256536][   T29] audit: type=1326 audit(1717964814.582:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22999 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe634a7cf69 code=0x7ffc0000
[ 1672.763023][   T29] audit: type=1326 audit(1717964814.582:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22999 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe634a7cf69 code=0x7ffc0000
[ 1672.804968][T23007] netlink: 'syz-executor.1': attribute type 7 has an invalid length.
[ 1672.866479][   T29] audit: type=1326 audit(1717964814.582:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22999 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe634a7cf69 code=0x7ffc0000
[ 1672.996997][   T29] audit: type=1326 audit(1717964814.582:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22999 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe634a7cf69 code=0x7ffc0000
[ 1673.094773][   T29] audit: type=1326 audit(1717964814.612:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22999 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe634a7cf69 code=0x7ffc0000
[ 1673.151255][   T29] audit: type=1326 audit(1717964814.612:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22999 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe634a7cf69 code=0x7ffc0000
[ 1673.218656][   T29] audit: type=1326 audit(1717964814.612:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22999 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe634a7cf69 code=0x7ffc0000
[ 1673.351033][   T29] audit: type=1326 audit(1717964814.632:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22999 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe634a7cf69 code=0x7ffc0000
[ 1673.389162][   T29] audit: type=1326 audit(1717964814.632:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22999 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe634a7cf69 code=0x7ffc0000
[ 1673.415244][   T29] audit: type=1326 audit(1717964814.632:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22999 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe634a7cf69 code=0x7ffc0000
[ 1673.664762][T23028] loop0: detected capacity change from 0 to 256
[ 1674.211604][T23034] loop1: detected capacity change from 0 to 256
[ 1674.767448][T23034] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d)
[ 1676.232114][T23044] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1676.585870][T23062] loop1: detected capacity change from 0 to 1024
[ 1676.625524][T23062] hfsplus: request for non-existent node 3 in B*Tree
[ 1676.625540][T23062] hfsplus: request for non-existent node 3 in B*Tree
[ 1676.973547][T23071] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1678.124021][T23071] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1678.124131][T23071] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1678.124155][T23071] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1678.124179][T23071] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1678.124262][T23071] vxlan0: entered promiscuous mode
[ 1678.442350][T23079] loop3: detected capacity change from 0 to 64
[ 1678.450153][T23079] BFS-fs: bfs_fill_super(): Impossible last inode number 18874527 > 513 on loop3
[ 1679.465543][T23090] loop3: detected capacity change from 0 to 8192
[ 1681.486527][T23090] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1681.721495][T23094] loop1: detected capacity change from 0 to 64
[ 1681.790896][T23098] loop4: detected capacity change from 0 to 64
[ 1681.871716][T23098] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop4
[ 1681.915648][T23094] hfs: request for non-existent node 16777216 in B*Tree
[ 1681.923763][T23094] hfs: request for non-existent node 16777216 in B*Tree
[ 1682.032889][   T29] kauditd_printk_skb: 7 callbacks suppressed
[ 1682.032908][   T29] audit: type=1400 audit(1717964824.412:1968): avc:  denied  { setattr } for  pid=23104 comm="syz-executor.3" name="net" dev="proc" ino=3017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=dir permissive=1
[ 1682.318940][T23113] loop1: detected capacity change from 0 to 64
[ 1682.885980][T23122] loop4: detected capacity change from 0 to 256
[ 1682.928910][T23122] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d)
[ 1683.045943][T10996] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1683.062937][T10996] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1683.074515][T10996] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1683.084559][T10996] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1683.095450][T10996] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1683.103052][T10996] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1683.577312][ T5660] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1685.195794][T10996] Bluetooth: hci0: command tx timeout
[ 1685.317221][T23131] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1685.515820][T23144] loop1: detected capacity change from 0 to 64
[ 1685.581867][T23144] hfs: request for non-existent node 16777216 in B*Tree
[ 1685.581975][T23144] hfs: request for non-existent node 16777216 in B*Tree
[ 1685.743351][ T5660] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1685.842077][T23152] loop4: detected capacity change from 0 to 1024
[ 1686.102535][ T5660] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1686.140328][T23159] loop1: detected capacity change from 0 to 2048
[ 1686.148269][T23158] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[ 1686.165547][T23159] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1686.245118][T23162] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1686.395038][T22756] IPVS: starting estimator thread 0...
[ 1686.412083][ T5660] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1686.435511][T23166] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1686.499259][T23169] IPVS: using max 20 ests per chain, 48000 per kthread
[ 1686.978087][T23186] Bluetooth: MGMT ver 1.22
[ 1687.123926][T23190] netlink: 1304 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1687.285363][T10996] Bluetooth: hci0: command tx timeout
[ 1688.013946][ T5660] bridge_slave_1: left allmulticast mode
[ 1688.037525][ T5660] bridge_slave_1: left promiscuous mode
[ 1688.043365][ T5660] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1688.090666][ T5660] bridge_slave_0: left allmulticast mode
[ 1688.110681][ T5660] bridge_slave_0: left promiscuous mode
[ 1688.130621][ T5660] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1688.385894][T23202] loop2: detected capacity change from 0 to 4096
[ 1688.399935][T23202] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[ 1688.437080][T23202] ntfs3: loop2: mft corrupted
[ 1688.443536][T23202] ntfs3: loop2: Failed to load $Volume (-22).
[ 1688.558136][T23202] loop2: detected capacity change from 0 to 256
[ 1688.565911][T23202] exfat: Unknown parameter ''
[ 1688.701483][T23205] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1689.279407][   T29] audit: type=1326 audit(1717964831.662:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23206 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96f847cf69 code=0x0
[ 1689.363950][T10996] Bluetooth: hci0: command tx timeout
[ 1689.465496][T23208] loop2: detected capacity change from 0 to 2048
[ 1689.520034][T23208] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1689.894883][ T5660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1689.917946][ T5660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1689.935454][ T5660] bond0 (unregistering): Released all slaves
[ 1689.978806][T23123] chnl_net:caif_netlink_parms(): no params data found
[ 1692.046748][T23211] Bluetooth: hci0: command tx timeout
[ 1692.255418][T23211] Bluetooth: hci1: command 0x0406 tx timeout
[ 1692.261763][T23211] Bluetooth: hci4: command 0x0406 tx timeout
[ 1692.590399][T23231] loop4: detected capacity change from 0 to 1024
[ 1692.933942][T23236] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1693.017792][ T5660] hsr_slave_0: left promiscuous mode
[ 1693.024347][ T5660] hsr_slave_1: left promiscuous mode
[ 1693.032796][ T5660] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1693.044670][ T5660] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1693.056998][ T5660] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1693.064594][ T5660] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1693.109563][ T5660] veth1_macvtap: left promiscuous mode
[ 1693.124084][ T5660] veth0_macvtap: left promiscuous mode
[ 1693.129936][ T5660] veth1_vlan: left promiscuous mode
[ 1693.135424][ T5660] veth0_vlan: left promiscuous mode
[ 1693.320570][T23243] loop3: detected capacity change from 0 to 4096
[ 1693.354959][T23243] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512).
[ 1693.376406][T23243] ntfs3: loop3: mft corrupted
[ 1693.381270][T23243] ntfs3: loop3: Failed to load $Volume (-22).
[ 1693.403856][T23242] loop2: detected capacity change from 0 to 8192
[ 1693.443251][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1693.620207][T23243] loop3: detected capacity change from 0 to 256
[ 1693.627469][T23243] exfat: Unknown parameter ''
[ 1693.700372][T23253] loop4: detected capacity change from 0 to 47
[ 1693.868441][T23258] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1693.893057][   T29] audit: type=1800 audit(1717964836.262:1970): pid=23253 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=8 res=0 errno=0
[ 1693.931131][T23260] Invalid architecture in ELF header: 0
[ 1693.977112][   T29] audit: type=1400 audit(1717964836.312:1971): avc:  denied  { module_load } for  pid=23259 comm="syz-executor.2" path=2F6D656D66643A21202864656C6574656429 dev="tmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1
[ 1694.166728][T23262] loop2: detected capacity change from 0 to 1024
[ 1695.378670][   T29] audit: type=1400 audit(1717964837.762:1972): avc:  denied  { create } for  pid=23268 comm="syz-executor.3" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1695.424840][   T29] audit: type=1400 audit(1717964837.792:1973): avc:  denied  { map } for  pid=23268 comm="syz-executor.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=107287 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1695.449651][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1695.464740][   T29] audit: type=1400 audit(1717964837.792:1974): avc:  denied  { read write } for  pid=23268 comm="syz-executor.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=107287 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1695.526994][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1695.577419][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1695.727157][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1695.876780][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1696.026746][T23288] loop2: detected capacity change from 0 to 1764
[ 1696.603030][   T29] audit: type=1400 audit(1717964838.682:1975): avc:  denied  { ioctl } for  pid=23285 comm="syz-executor.3" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=107311 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1696.864212][T23288] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 1697.020260][ T5660] team0 (unregistering): Port device team_slave_1 removed
[ 1697.101021][   T29] audit: type=1400 audit(1717964839.472:1976): avc:  denied  { create } for  pid=23294 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1697.184260][ T5660] team0 (unregistering): Port device team_slave_0 removed
[ 1697.248539][T23295] loop2: detected capacity change from 0 to 4096
[ 1697.259655][T23295] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[ 1697.270121][T23295] ntfs3: loop2: mft corrupted
[ 1697.275076][T23295] ntfs3: loop2: Failed to load $Volume (-22).
[ 1697.402950][T23295] loop2: detected capacity change from 0 to 256
[ 1697.410020][T23295] exfat: Unknown parameter ''
[ 1697.580835][T23300] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1699.258224][T23123] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1699.311051][T23123] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1699.342112][T23123] bridge_slave_0: entered allmulticast mode
[ 1699.357242][T23123] bridge_slave_0: entered promiscuous mode
[ 1699.398081][T23306] loop2: detected capacity change from 0 to 4096
[ 1699.455861][T23306] ntfs3: loop2: Failed to load $Extend (-22).
[ 1699.475629][T23306] ntfs3: loop2: Failed to initialize $Extend.
[ 1699.516147][T23123] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1699.535100][T23123] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1699.555582][T23123] bridge_slave_1: entered allmulticast mode
[ 1699.604004][T23123] bridge_slave_1: entered promiscuous mode
[ 1699.672193][T23312] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[ 1699.707989][T23314] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1699.842380][T23316] loop3: detected capacity change from 0 to 1764
[ 1699.859243][T23123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1699.899733][T23316] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 1699.911523][T23123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1700.102450][T23123] team0: Port device team_slave_0 added
[ 1700.133684][T23123] team0: Port device team_slave_1 added
[ 1700.149671][   T29] audit: type=1326 audit(1717964842.532:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23323 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d21e7cf69 code=0x0
[ 1700.262425][T23123] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1700.302575][T23123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1700.365810][   T29] audit: type=1400 audit(1717964842.732:1978): avc:  denied  { relabelfrom } for  pid=23330 comm="syz-executor.2" name="" dev="pipefs" ino=108147 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[ 1700.378352][T23123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1700.400398][T23329] loop4: detected capacity change from 0 to 2048
[ 1700.484550][T23329] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1700.520337][T23123] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1700.551224][T23123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1700.604867][T23123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1700.818484][T23337] loop2: detected capacity change from 0 to 2048
[ 1700.924960][T23336] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1700.956352][T23123] hsr_slave_0: entered promiscuous mode
[ 1701.033741][T23123] hsr_slave_1: entered promiscuous mode
[ 1702.873872][T23123] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1702.905118][T23123] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1702.931969][T23123] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1702.964439][T23123] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1703.335011][T23382] geneve2: entered promiscuous mode
[ 1703.372059][T23382] geneve2: entered allmulticast mode
[ 1703.541554][T23123] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1703.641137][T23123] 8021q: adding VLAN 0 to HW filter on device team0
[ 1703.662989][  T784] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1703.670166][  T784] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1703.747326][  T784] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1703.754455][  T784] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1703.826256][T23386] loop1: detected capacity change from 0 to 1024
[ 1703.928658][T23386] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1704.457288][T21656] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1704.502349][T23123] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1704.737238][T23123] veth0_vlan: entered promiscuous mode
[ 1704.782445][T23123] veth1_vlan: entered promiscuous mode
[ 1705.012428][T23123] veth0_macvtap: entered promiscuous mode
[ 1705.041104][T23123] veth1_macvtap: entered promiscuous mode
[ 1705.132543][T23123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1705.145047][T23408] loop4: detected capacity change from 0 to 4096
[ 1705.164187][T23123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1705.179236][T23408] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512).
[ 1705.198800][T23123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1705.242134][T23123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1705.273213][T23123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1705.289841][T23123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1705.304774][T23123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1705.315806][T23123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1705.344224][T23123] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1705.392925][T23408] ntfs3: loop4: Failed to initialize $Extend/$Reparse.
[ 1705.463548][T23408] ntfs3: loop4: ino=1a, ntfs_sync_fs failed, -22.
[ 1705.468856][T23123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1705.495253][T23123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1705.495610][T23408] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[ 1705.505640][T23123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1705.554184][T23123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1705.573110][T23123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1705.578853][T23420] loop1: detected capacity change from 0 to 164
[ 1705.584205][T23123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1705.655279][T23123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1705.672179][T23123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1705.699483][T23123] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1705.713306][T22282] ntfs3: loop4: ino=1a, ntfs_sync_fs failed, -22.
[ 1705.741941][T23123] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1705.762049][T23123] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1705.790173][T23123] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1705.812177][T23123] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1706.032718][T23422] fscrypt (sda1, inode 1958): Can't use IV_INO_LBLK_32 policy on filesystem 'sda1' because it doesn't have stable inode numbers
[ 1706.136542][T13769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1706.160617][T13769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1706.172443][   T29] audit: type=1400 audit(1717964848.542:1979): avc:  denied  { write } for  pid=23423 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1706.283960][   T29] audit: type=1400 audit(1717964848.542:1980): avc:  denied  { connect } for  pid=23423 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1706.370185][   T29] audit: type=1400 audit(1717964848.622:1981): avc:  denied  { setopt } for  pid=23423 comm="syz-executor.4" lport=32894 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1706.398400][T22552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1706.428477][T22552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1706.488118][   T29] audit: type=1400 audit(1717964848.652:1982): avc:  denied  { shutdown } for  pid=23423 comm="syz-executor.4" lport=32894 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1706.495750][T23433] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1706.555900][   T29] audit: type=1400 audit(1717964848.842:1983): avc:  denied  { read } for  pid=23423 comm="syz-executor.4" lport=32894 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1706.890688][T23446] loop3: detected capacity change from 0 to 128
[ 1707.274521][T23453] loop2: detected capacity change from 0 to 128
[ 1707.301894][T23453] qnx6: unable to read the first superblock
[ 1707.332756][   T29] audit: type=1400 audit(1717964849.712:1984): avc:  denied  { setattr } for  pid=23456 comm="syz-executor.0" name="NETLINK" dev="sockfs" ino=108752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1708.076174][T23470] loop1: detected capacity change from 0 to 40427
[ 1708.102684][T23470] F2FS-fs (loop1): invalid crc value
[ 1708.111784][T23470] F2FS-fs (loop1): Found nat_bits in checkpoint
[ 1708.151729][T23470] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[ 1708.677329][T23481] syz-executor.1: attempt to access beyond end of device
[ 1708.677329][T23481] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427
[ 1708.718004][T23481] syz-executor.1: attempt to access beyond end of device
[ 1708.718004][T23481] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427
[ 1708.844464][   T29] audit: type=1800 audit(1717964850.932:1985): pid=23481 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="file2" dev="loop1" ino=10 res=0 errno=0
[ 1709.307386][T21656] syz-executor.1: attempt to access beyond end of device
[ 1709.307386][T21656] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1709.368598][T21656] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[ 1709.718265][ T2855] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1710.197918][ T2855] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1710.506667][ T2855] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1710.732910][T23497] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1710.794123][ T2855] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1710.865357][T23478] loop3: detected capacity change from 0 to 32768
[ 1711.105391][T19712] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 1711.204113][T23501] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1711.249465][ T2855] bridge_slave_1: left allmulticast mode
[ 1711.270940][T10996] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1711.285455][ T2855] bridge_slave_1: left promiscuous mode
[ 1711.293603][T10996] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1711.296965][T19712] usb 2-1: Using ep0 maxpacket: 32
[ 1711.306969][T10996] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1711.320626][T10996] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1711.333465][T10996] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1711.334383][T19712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1711.358749][T10996] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1711.366081][ T2855] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1711.393746][T23501] kvm: pic: non byte read
[ 1711.406718][T23501] kvm: pic: non byte read
[ 1711.426417][T19712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1711.431058][ T2855] bridge_slave_0: left allmulticast mode
[ 1711.436743][T19712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1711.436788][T19712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1711.436822][T19712] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1711.436893][T19712] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00
[ 1711.436929][T19712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1711.440267][T19712] usb 2-1: config 0 descriptor??
[ 1711.505818][T23501] kvm: pic: non byte read
[ 1711.510370][ T2855] bridge_slave_0: left promiscuous mode
[ 1711.516452][ T2855] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1711.538237][T23501] kvm: pic: non byte read
[ 1711.550349][T23501] kvm: pic: non byte read
[ 1711.577377][T23501] kvm: pic: non byte read
[ 1711.583514][T23501] kvm: pic: non byte read
[ 1711.588929][T23501] kvm: pic: non byte read
[ 1711.593979][T23501] kvm: pic: non byte read
[ 1711.604911][T23501] kvm: pic: non byte read
[ 1712.184025][T23514] loop3: detected capacity change from 0 to 32768
[ 1712.213109][T23514] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (23514)
[ 1712.252701][T23514] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1712.263058][T23514] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[ 1712.272381][T23514] BTRFS info (device loop3): using free-space-tree
[ 1712.469400][T19712] ntrig 0003:1B96:000A.0014: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0
[ 1713.446051][T10996] Bluetooth: hci3: command tx timeout
[ 1713.980790][T21282] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1714.024123][T23543] fscrypt (sda1, inode 1960): Unsupported encryption modes (contents 7, filenames 4)
[ 1714.905768][ T5153] usb 2-1: USB disconnect, device number 16
[ 1715.515643][T10996] Bluetooth: hci3: command tx timeout
[ 1716.067983][ T2855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1716.080581][ T2855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1716.130307][ T2855] bond0 (unregistering): Released all slaves
[ 1717.305762][T23577] loop1: detected capacity change from 0 to 32768
[ 1717.329801][T23577] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (23577)
[ 1717.347481][T23577] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1717.357733][T23577] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[ 1717.366521][T23577] BTRFS info (device loop1): using free-space-tree
[ 1717.606482][T10996] Bluetooth: hci3: command tx timeout
[ 1717.615574][T23593] fscrypt (sda1, inode 1968): Can't use IV_INO_LBLK_32 policy on filesystem 'sda1' because it doesn't have stable inode numbers
[ 1717.623232][T23587] binder: BINDER_SET_CONTEXT_MGR already set
[ 1717.636192][T23587] binder: 23580:23587 ioctl 4018620d 20000040 returned -16
[ 1718.989654][ T2855] hsr_slave_0: left promiscuous mode
[ 1719.006086][ T2855] hsr_slave_1: left promiscuous mode
[ 1719.037152][ T2855] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1719.044614][ T2855] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1719.057318][T21656] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1719.089495][ T2855] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1719.097658][ T2855] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1719.182670][T23612] loop2: detected capacity change from 0 to 128
[ 1719.236806][T23612] VFS: Found a Xenix FS (block size = 512) on device loop2
[ 1719.309733][ T2855] veth1_macvtap: left promiscuous mode
[ 1719.315466][ T2855] veth0_macvtap: left promiscuous mode
[ 1719.321340][ T2855] veth1_vlan: left promiscuous mode
[ 1719.336681][ T2855] veth0_vlan: left promiscuous mode
[ 1719.440629][T23612] sysv_free_block: trying to free block not in datazone
[ 1719.695865][T10996] Bluetooth: hci3: command tx timeout
[ 1719.830878][T21666] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1720.092986][T23624] loop2: detected capacity change from 0 to 512
[ 1720.212789][T23624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1720.226117][T23624] ext4 filesystem being mounted at /root/syzkaller-testdir4143288020/syzkaller.WI9tGF/127/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1720.410967][T23624] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz-executor.2: corrupted inode contents
[ 1720.478668][T23624] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #2: comm syz-executor.2: mark_inode_dirty error
[ 1720.591162][T23624] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz-executor.2: corrupted inode contents
[ 1720.645993][T23624] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz-executor.2: mark_inode_dirty error
[ 1720.959016][T21666] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1721.009409][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1721.077546][T23635] loop0: detected capacity change from 0 to 2048
[ 1721.096388][T23635] udf: Bad value for 'lastblock'
[ 1721.556698][T23622] loop3: detected capacity change from 0 to 32768
[ 1721.764750][T23653] loop2: detected capacity change from 0 to 128
[ 1721.778178][T23653] VFS: Found a Xenix FS (block size = 512) on device loop2
[ 1721.841961][T23653] sysv_free_block: trying to free block not in datazone
[ 1721.914863][T21666] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1722.165313][ T2855] team0 (unregistering): Port device team_slave_1 removed
[ 1722.284654][T23658] loop2: detected capacity change from 0 to 1024
[ 1722.320968][ T2855] team0 (unregistering): Port device team_slave_0 removed
[ 1722.335566][T23658] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[ 1722.362582][T23658] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1722.395589][T23658] EXT4-fs error (device loop2): ext4_get_journal_inode:5752: inode #32: comm syz-executor.2: iget: special inode unallocated
[ 1722.416108][T23658] EXT4-fs (loop2): no journal found
[ 1722.421374][T23658] EXT4-fs (loop2): can't get journal size
[ 1722.498210][T23658] EXT4-fs error (device loop2): ext4_protect_reserved_inode:160: inode #32: comm syz-executor.2: iget: special inode unallocated
[ 1722.530928][T23658] EXT4-fs (loop2): failed to initialize system zone (-117)
[ 1722.551171][T23658] EXT4-fs (loop2): mount failed
[ 1722.614768][T23665] loop1: detected capacity change from 0 to 1024
[ 1722.709028][   T12] hfsplus: b-tree write err: -5, ino 4
[ 1722.763760][   T29] audit: type=1800 audit(1717964865.142:1986): pid=23658 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1941 res=0 errno=0
[ 1723.657997][   T29] audit: type=1400 audit(1717964866.042:1987): avc:  denied  { execute } for  pid=23674 comm="syz-executor.1" name="file0" dev="ramfs" ino=109427 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[ 1724.631582][T23506] chnl_net:caif_netlink_parms(): no params data found
[ 1724.746263][   T29] audit: type=1400 audit(1717964867.112:1988): avc:  denied  { bind } for  pid=23682 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1724.791448][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1724.820799][T23685] loop3: detected capacity change from 0 to 2048
[ 1724.832356][T23685] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[ 1724.900390][T23685] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[ 1724.916630][T23685] UDF-fs: Scanning with blocksize 512 failed
[ 1725.002564][T23685] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1725.109086][T23506] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1725.135244][T23506] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1725.150794][T23506] bridge_slave_0: entered allmulticast mode
[ 1725.174383][T23506] bridge_slave_0: entered promiscuous mode
[ 1725.392629][T23697] loop0: detected capacity change from 0 to 40427
[ 1725.425908][T23697] F2FS-fs (loop0): invalid crc value
[ 1725.456918][T23506] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1725.473979][T23697] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 1725.508468][T23506] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1725.540939][T23506] bridge_slave_1: entered allmulticast mode
[ 1725.618112][T23506] bridge_slave_1: entered promiscuous mode
[ 1725.629395][T23697] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[ 1726.077388][T23712] syz-executor.0: attempt to access beyond end of device
[ 1726.077388][T23712] loop0: rw=0, sector=53248, nr_sectors = 8 limit=40427
[ 1726.106416][T23712] syz-executor.0: attempt to access beyond end of device
[ 1726.106416][T23712] loop0: rw=0, sector=53248, nr_sectors = 8 limit=40427
[ 1726.259858][   T29] audit: type=1800 audit(1717964868.362:1989): pid=23712 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="file2" dev="loop0" ino=10 res=0 errno=0
[ 1726.733523][T23123] syz-executor.0: attempt to access beyond end of device
[ 1726.733523][T23123] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1726.737816][T23506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1726.752630][T23123] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[ 1727.673508][T23506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1727.834053][T23723] loop2: detected capacity change from 0 to 2048
[ 1727.869900][T23723] udf: Bad value for 'lastblock'
[ 1727.906849][T23724] loop1: detected capacity change from 0 to 1024
[ 1727.922778][T23724] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[ 1727.924064][T23506] team0: Port device team_slave_0 added
[ 1727.932713][T23724] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1727.974143][T23506] team0: Port device team_slave_1 added
[ 1727.991342][T23724] EXT4-fs error (device loop1): ext4_get_journal_inode:5752: inode #32: comm syz-executor.1: iget: special inode unallocated
[ 1728.040236][T23724] EXT4-fs (loop1): no journal found
[ 1728.064144][T23724] EXT4-fs (loop1): can't get journal size
[ 1728.093897][T23506] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1728.103367][T23506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1728.115648][T23724] EXT4-fs error (device loop1): ext4_protect_reserved_inode:160: inode #32: comm syz-executor.1: iget: special inode unallocated
[ 1728.139848][T23506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1728.230782][T23506] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1728.258940][T23506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1728.286300][T23724] EXT4-fs (loop1): failed to initialize system zone (-117)
[ 1728.294449][T23724] EXT4-fs (loop1): mount failed
[ 1728.366218][T23506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1728.555742][T23737] loop3: detected capacity change from 0 to 164
[ 1728.564362][   T29] audit: type=1800 audit(1717964870.942:1990): pid=23724 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1955 res=0 errno=0
[ 1728.629578][T23506] hsr_slave_0: entered promiscuous mode
[ 1728.648952][T23506] hsr_slave_1: entered promiscuous mode
[ 1728.658758][T23506] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1728.695287][T23506] Cannot create hsr debugfs directory
[ 1729.280002][  T784] IPVS: starting estimator thread 0...
[ 1729.321543][T23762] loop0: detected capacity change from 0 to 128
[ 1729.332177][T23762] VFS: Found a Xenix FS (block size = 512) on device loop0
[ 1729.356079][T23762] sysv_free_block: trying to free block not in datazone
[ 1729.387623][T23759] IPVS: using max 18 ests per chain, 43200 per kthread
[ 1729.441139][T23123] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1729.882504][T23506] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1729.919472][T23506] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1729.955123][T23506] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1729.974758][T23506] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1730.237302][T23506] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1730.262796][T23781] loop2: detected capacity change from 0 to 256
[ 1730.264525][T23506] 8021q: adding VLAN 0 to HW filter on device team0
[ 1730.288372][T23781] FAT-fs (loop2): Unrecognized mount option "0x0000000000000000ÿÿÿÿÿÿÿÿ" or missing value
[ 1730.331846][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1730.339167][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1730.393764][T19227] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1730.401035][T19227] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1730.547290][T23781] loop2: detected capacity change from 0 to 1024
[ 1730.614977][T23781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1730.731747][   T29] audit: type=1400 audit(1717964873.112:1991): avc:  denied  { bind } for  pid=23804 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1730.741684][T23781] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #2: comm syz-executor.2: corrupted in-inode xattr: bad e_name length
[ 1730.821793][   T29] audit: type=1400 audit(1717964873.132:1992): avc:  denied  { write } for  pid=23804 comm="syz-executor.3" path="socket:[110504]" dev="sockfs" ino=110504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1730.845609][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1731.042142][ T1250] ieee802154 phy0 wpan0: encryption failed: -22
[ 1731.048710][ T1250] ieee802154 phy1 wpan1: encryption failed: -22
[ 1731.259132][T23506] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1731.385015][T23817] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1731.443829][T23817] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes.
[ 1731.462447][T23819] loop1: detected capacity change from 0 to 1024
[ 1731.687820][ T5665] hfsplus: b-tree write err: -5, ino 4
[ 1731.716798][T21666] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1732.054338][   T29] audit: type=1400 audit(1717964874.432:1993): avc:  denied  { getopt } for  pid=23833 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1732.074494][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1732.291769][T23840] loop2: detected capacity change from 0 to 256
[ 1732.299035][T23506] veth0_vlan: entered promiscuous mode
[ 1732.350683][T23506] veth1_vlan: entered promiscuous mode
[ 1732.442197][T23506] veth0_macvtap: entered promiscuous mode
[ 1732.513763][T23506] veth1_macvtap: entered promiscuous mode
[ 1732.589095][T23506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1732.609118][T23840] loop2: detected capacity change from 0 to 512
[ 1732.616441][T23840] EXT4-fs: Ignoring removed i_version option
[ 1732.622764][T23840] ext4: Unknown parameter 'obj_type'
[ 1732.635965][T23506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1732.647687][T23506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1732.658538][T23506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1732.672880][T23506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1732.695394][T23506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1732.718470][T23506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1732.731144][T23506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1732.740973][T23851] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1732.741008][T23851] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes.
[ 1732.763713][T23506] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1732.781703][T23849] team0: Port device virt_wifi0 added
[ 1732.832629][T23506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1732.847098][T23506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1732.858248][T23506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1732.888273][T23506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1732.917619][T23506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1732.935244][T23506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1732.949341][T23855] loop0: detected capacity change from 0 to 1024
[ 1732.964153][T23506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1732.985494][T23506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1733.008215][T23506] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1733.060463][T23506] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1733.097028][T23506] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1733.115301][T23506] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1733.129713][T23506] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1733.157089][T22552] hfsplus: b-tree write err: -5, ino 4
[ 1733.444352][T22552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1733.481929][T22552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1733.604519][T23873] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1733.628091][T13769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1733.641486][T13769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1734.063606][T23881] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[ 1734.419040][T23885] loop1: detected capacity change from 0 to 256
[ 1734.713097][T23885] loop1: detected capacity change from 0 to 512
[ 1734.722347][T23885] EXT4-fs: Ignoring removed i_version option
[ 1734.735524][T23885] ext4: Unknown parameter 'obj_type'
[ 1735.041435][T23902] loop1: detected capacity change from 0 to 256
[ 1735.050298][T23902] exfat: Deprecated parameter 'namecase'
[ 1735.066049][T23902] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[ 1735.455311][T22552] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1735.880605][T23908] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[ 1736.016894][T23906] loop2: detected capacity change from 0 to 256
[ 1736.103961][T23906] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010530, chksum : 0x90502ed2, utbl_chksum : 0xe619d30d)
[ 1736.239964][   T29] audit: type=1800 audit(1717964878.592:1994): pid=23906 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="loop2" ino=1048975 res=0 errno=0
[ 1736.262459][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1736.372689][   T29] audit: type=1804 audit(1717964878.742:1995): pid=23906 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4143288020/syzkaller.WI9tGF/147/file1/file1" dev="loop2" ino=1048975 res=1 errno=0
[ 1736.414446][T22552] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1736.605649][T22552] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1736.712962][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1736.746983][   T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1736.757302][   T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1736.759770][T22552] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1736.805694][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1736.813644][   T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1736.821747][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1736.912053][T23917] loop2: detected capacity change from 0 to 4096
[ 1737.003095][T23917] NILFS (loop2): invalid segment: Checksum error in segment payload
[ 1737.055816][T23917] NILFS (loop2): trying rollback from an earlier position
[ 1737.129073][T23917] NILFS (loop2): recovery complete
[ 1737.163134][T23926] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1737.178399][   T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1737.200043][   T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1737.210515][   T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1737.220779][   T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1737.230973][   T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1737.239907][   T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1737.252243][   T29] audit: type=1400 audit(1717964879.602:1996): avc:  denied  { execute } for  pid=23916 comm="syz-executor.2" path="/root/syzkaller-testdir4143288020/syzkaller.WI9tGF/148/file1/bus" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 1737.349439][   T29] audit: type=1400 audit(1717964879.732:1997): avc:  denied  { ioctl } for  pid=23916 comm="syz-executor.2" path="/root/syzkaller-testdir4143288020/syzkaller.WI9tGF/148/file1/bus" dev="loop2" ino=12 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 1737.551526][T23914] chnl_net:caif_netlink_parms(): no params data found
[ 1737.573117][T22552] bridge_slave_1: left allmulticast mode
[ 1737.580270][T22552] bridge_slave_1: left promiscuous mode
[ 1737.589775][T22552] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1737.618407][T22552] bridge_slave_0: left allmulticast mode
[ 1737.624094][T22552] bridge_slave_0: left promiscuous mode
[ 1737.630072][T22552] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1738.441136][T22552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1738.454762][T22552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1738.467474][T22552] bond0 (unregistering): Released all slaves
[ 1738.856761][T23949] IPv6: Can't replace route, no match found
[ 1738.875565][T10996] Bluetooth: hci1: command tx timeout
[ 1738.890256][   T29] audit: type=1400 audit(1717964881.272:1998): avc:  denied  { getopt } for  pid=23945 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1738.911371][   T29] audit: type=1400 audit(1717964881.272:1999): avc:  denied  { write } for  pid=23945 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1738.913749][T23949] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1738.960635][T23914] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1738.985480][T23914] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1738.992728][T23914] bridge_slave_0: entered allmulticast mode
[ 1739.002102][T23914] bridge_slave_0: entered promiscuous mode
[ 1739.065435][T23914] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1739.072570][T23914] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1739.083327][T23914] bridge_slave_1: entered allmulticast mode
[ 1739.091348][T23914] bridge_slave_1: entered promiscuous mode
[ 1739.340922][T23914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1739.356128][T10996] Bluetooth: hci3: command tx timeout
[ 1739.364639][T22552] hsr_slave_0: left promiscuous mode
[ 1739.381601][T22552] hsr_slave_1: left promiscuous mode
[ 1739.392189][T22552] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1739.402579][T22552] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1739.418232][T22552] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1739.425891][T22552] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1739.478897][T22552] veth1_macvtap: left promiscuous mode
[ 1739.484539][T22552] veth0_macvtap: left promiscuous mode
[ 1739.490945][T22552] veth1_vlan: left promiscuous mode
[ 1739.497016][T22552] veth0_vlan: left promiscuous mode
[ 1740.947173][T22552] team0 (unregistering): Port device team_slave_1 removed
[ 1740.959261][T10996] Bluetooth: hci1: command tx timeout
[ 1741.044326][T22552] team0 (unregistering): Port device team_slave_0 removed
[ 1741.445669][T10996] Bluetooth: hci3: command tx timeout
[ 1741.490895][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1741.807526][T23967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=23967 comm=syz-executor.2
[ 1742.098467][T23914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1742.129743][T23967] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1742.142414][T23967] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1742.152194][T23967] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1742.162025][T23967] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1742.172919][T23967] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[ 1742.257365][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1742.363832][T23914] team0: Port device team_slave_0 added
[ 1742.371164][T23921] chnl_net:caif_netlink_parms(): no params data found
[ 1742.432190][T23914] team0: Port device team_slave_1 added
[ 1742.504326][T23914] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1742.511728][T23914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1742.539486][T23914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1742.597603][T23976] loop2: detected capacity change from 0 to 256
[ 1742.618854][T23914] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1742.626130][T23914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1742.631179][T23976] exfat: Deprecated parameter 'namecase'
[ 1742.653975][T23914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1742.721513][T23976] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[ 1742.864734][T23914] hsr_slave_0: entered promiscuous mode
[ 1742.874598][T23914] hsr_slave_1: entered promiscuous mode
[ 1742.881115][T23914] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1742.889352][T23914] Cannot create hsr debugfs directory
[ 1742.949063][T23921] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1742.956440][T23921] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1742.963628][T23921] bridge_slave_0: entered allmulticast mode
[ 1742.977507][T23921] bridge_slave_0: entered promiscuous mode
[ 1742.987026][T23921] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1742.994215][T23921] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1743.001786][T23921] bridge_slave_1: entered allmulticast mode
[ 1743.009082][T23921] bridge_slave_1: entered promiscuous mode
[ 1743.036778][T10996] Bluetooth: hci1: command tx timeout
[ 1743.099456][T23921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1743.113217][T23921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1743.264598][T22552] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1743.471087][T22552] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1743.501049][T23921] team0: Port device team_slave_0 added
[ 1743.515397][T10996] Bluetooth: hci3: command tx timeout
[ 1743.570922][T23921] team0: Port device team_slave_1 added
[ 1743.648621][T22552] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1743.703390][T23921] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1743.723387][T23921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1743.750995][T23921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1743.773397][   T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1743.783448][   T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1743.793718][   T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1743.813251][   T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1743.824501][   T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1743.834188][   T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1743.862512][T22552] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1743.886636][T23921] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1743.893600][T23921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1743.920448][T23921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1744.089068][T23921] hsr_slave_0: entered promiscuous mode
[ 1744.097832][T23921] hsr_slave_1: entered promiscuous mode
[ 1744.104035][T23921] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1744.112634][T23921] Cannot create hsr debugfs directory
[ 1744.293009][T22552] bridge_slave_1: left allmulticast mode
[ 1744.298815][T22552] bridge_slave_1: left promiscuous mode
[ 1744.304535][T22552] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1744.320506][T22552] bridge_slave_0: left allmulticast mode
[ 1744.327269][T22552] bridge_slave_0: left promiscuous mode
[ 1744.332971][T22552] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1745.115586][T10996] Bluetooth: hci1: command tx timeout
[ 1745.477020][T22552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1745.489519][T22552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1745.501504][T22552] bond0 (unregistering): Released all slaves
[ 1745.626298][T10996] Bluetooth: hci3: command tx timeout
[ 1745.840618][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1745.915549][T10996] Bluetooth: hci4: command tx timeout
[ 1746.032293][T23981] chnl_net:caif_netlink_parms(): no params data found
[ 1746.057973][T22552] hsr_slave_0: left promiscuous mode
[ 1746.067442][T22552] hsr_slave_1: left promiscuous mode
[ 1746.082675][T22552] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1746.091896][T22552] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1746.100362][T22552] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1746.107957][T22552] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1746.142244][T22552] veth1_macvtap: left promiscuous mode
[ 1746.147893][T22552] veth0_macvtap: left promiscuous mode
[ 1746.153504][T22552] veth1_vlan: left promiscuous mode
[ 1746.159138][T22552] veth0_vlan: left promiscuous mode
[ 1746.589803][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1747.107429][T22552] team0 (unregistering): Port device team_slave_1 removed
[ 1747.206606][T22552] team0 (unregistering): Port device team_slave_0 removed
[ 1748.002842][T10996] Bluetooth: hci4: command tx timeout
[ 1748.183109][T23914] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1748.250318][T23914] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1748.341269][T23914] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1748.354245][T23914] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1748.500018][T23981] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1748.535470][T23981] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1748.544317][T23981] bridge_slave_0: entered allmulticast mode
[ 1748.552704][T23981] bridge_slave_0: entered promiscuous mode
[ 1748.580950][T23981] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1748.594820][T23981] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1748.602115][T23981] bridge_slave_1: entered allmulticast mode
[ 1748.610614][T23981] bridge_slave_1: entered promiscuous mode
[ 1748.678623][T23981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1748.702975][T23981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1748.798148][T23981] team0: Port device team_slave_0 added
[ 1748.822559][T23981] team0: Port device team_slave_1 added
[ 1748.952976][T23981] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1748.963292][T23981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1748.989464][T23981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1749.006493][T23981] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1749.013452][T23981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1749.041465][T23981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1749.159525][T23981] hsr_slave_0: entered promiscuous mode
[ 1749.169799][T23981] hsr_slave_1: entered promiscuous mode
[ 1749.176274][T23981] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1749.183845][T23981] Cannot create hsr debugfs directory
[ 1749.234005][T22552] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1749.262264][T23921] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1749.273140][T23921] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1749.291814][T23914] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1749.339116][T23921] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1749.351456][T23921] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1749.414105][T22552] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1749.480618][T23914] 8021q: adding VLAN 0 to HW filter on device team0
[ 1749.577918][T22552] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1749.634876][T20132] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1749.642048][T20132] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1749.721152][T22552] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1749.744692][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1749.751864][ T5157] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1749.881288][T23914] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1750.064056][T23921] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1750.073961][T22552] bridge_slave_1: left allmulticast mode
[ 1750.082254][T10996] Bluetooth: hci4: command tx timeout
[ 1750.088286][T22552] bridge_slave_1: left promiscuous mode
[ 1750.094105][T22552] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1750.123425][T22552] bridge_slave_0: left allmulticast mode
[ 1750.130655][T22552] bridge_slave_0: left promiscuous mode
[ 1750.136735][T22552] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1750.885924][T22552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1750.899955][T22552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1750.911833][T22552] bond0 (unregistering): Released all slaves
[ 1751.011546][T23921] 8021q: adding VLAN 0 to HW filter on device team0
[ 1751.034653][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1751.041955][ T5153] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1751.106166][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1751.126626][T22552] tipc: Disabling bearer <eth:ipvlan0>
[ 1751.132439][T22552] tipc: Disabling bearer <ib:caif0>
[ 1751.138165][T22552] tipc: Left network mode
[ 1751.141249][T23914] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1751.186637][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1751.193860][ T5157] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1751.832175][T22552] hsr_slave_0: left promiscuous mode
[ 1751.845001][T22552] hsr_slave_1: left promiscuous mode
[ 1751.851903][T22552] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1751.860734][T22552] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1751.868892][T22552] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1751.876869][T22552] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1751.902559][T22552] veth1_macvtap: left promiscuous mode
[ 1751.908366][T22552] veth0_macvtap: left promiscuous mode
[ 1751.913959][T22552] veth1_vlan: left promiscuous mode
[ 1751.920278][T22552] veth0_vlan: left promiscuous mode
[ 1752.155653][T10996] Bluetooth: hci4: command tx timeout
[ 1752.870545][T22552] team0 (unregistering): Port device team_slave_1 removed
[ 1752.963684][T22552] team0 (unregistering): Port device team_slave_0 removed
[ 1753.937522][T23981] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1753.952343][T23981] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1754.016044][T23921] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1754.028995][T23981] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1754.041500][T23981] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1754.083595][T23914] veth0_vlan: entered promiscuous mode
[ 1754.183074][T23914] veth1_vlan: entered promiscuous mode
[ 1754.400872][T23921] veth0_vlan: entered promiscuous mode
[ 1754.419260][T23914] veth0_macvtap: entered promiscuous mode
[ 1754.459645][T22552] IPVS: stop unused estimator thread 0...
[ 1754.473126][T23921] veth1_vlan: entered promiscuous mode
[ 1754.486903][T23914] veth1_macvtap: entered promiscuous mode
[ 1754.539419][T23981] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1754.569126][T23914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1754.582992][T23914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1754.598860][T23914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1754.609736][T23914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1754.621051][T23914] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1754.648445][T23981] 8021q: adding VLAN 0 to HW filter on device team0
[ 1754.672971][T19712] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1754.680234][T19712] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1754.697024][T23914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1754.709593][T23914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1754.719479][T23914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1754.729963][T23914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1754.741928][T23914] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1754.759977][T23921] veth0_macvtap: entered promiscuous mode
[ 1754.770970][T23914] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1754.783420][T23914] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1754.793018][T23914] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1754.807503][T23914] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1754.826624][T23921] veth1_macvtap: entered promiscuous mode
[ 1754.850128][T19712] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1754.857390][T19712] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1754.964044][T23921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1754.994650][T23921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1755.004952][T23921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1755.016258][T23921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1755.026175][T23921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1755.037577][T23921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1755.049821][T23921] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1755.071507][T23921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1755.083785][T23921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1755.098991][T23921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1755.109555][T23921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1755.120364][T23921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1755.130849][T23921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1755.143363][T23921] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1755.204307][T13769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1755.222642][T13769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1755.241043][T23921] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1755.250525][T23921] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1755.261345][T23921] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1755.282762][T23921] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1755.359835][T19958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1755.384927][T19958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1755.563992][T23981] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1755.674896][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1755.688486][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1755.753431][T13769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1755.762118][T13769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1755.790255][T23981] veth0_vlan: entered promiscuous mode
[ 1755.818774][T23981] veth1_vlan: entered promiscuous mode
[ 1755.883992][T23981] veth0_macvtap: entered promiscuous mode
[ 1755.898173][T23981] veth1_macvtap: entered promiscuous mode
[ 1755.939569][T23981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1755.950302][T23981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1755.961903][T23981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1755.972509][T23981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1755.982470][T23981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1756.002577][T23981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1756.020545][T23981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1756.031429][T23981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1756.047006][T23981] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1756.209400][ T5660] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1756.272574][T23981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1756.284174][T23981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1756.300462][T23981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1756.320191][T23981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1756.349193][T23981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1756.385388][T23981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1756.406307][T23981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1756.423490][T23981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1756.438948][T23981] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1756.456542][T24014] IPv6: Can't replace route, no match found
[ 1756.470134][T23981] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1756.493639][T23981] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1756.506199][T24014] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1756.515634][T23981] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1756.524409][T23981] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1756.612690][ T5660] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1756.741749][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1756.765431][   T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1756.787831][ T5660] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1756.802249][   T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1756.812541][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1756.824573][   T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1756.833464][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1756.988177][T24021] loop1: detected capacity change from 0 to 1024
[ 1756.994266][ T5660] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1757.076020][T24021] hfsplus: xattr searching failed
[ 1757.093119][   T29] audit: type=1800 audit(1717964899.472:2000): pid=24021 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="loop1" ino=20 res=0 errno=0
[ 1757.176315][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1757.195549][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1757.253670][T24022] hfsplus: xattr searching failed
[ 1757.343261][T13769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1757.354558][T13769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1757.473477][ T5660] bridge_slave_1: left allmulticast mode
[ 1757.490305][ T5660] bridge_slave_1: left promiscuous mode
[ 1757.502930][ T5660] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1757.518794][ T5660] bridge_slave_0: left allmulticast mode
[ 1757.524619][ T5660] bridge_slave_0: left promiscuous mode
[ 1757.542537][ T5660] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1757.637181][T24025] loop2: detected capacity change from 0 to 2048
[ 1757.649386][T24025] udf: Unknown parameter 'ÿ'
[ 1758.973631][   T53] Bluetooth: hci1: command tx timeout
[ 1759.135260][T22756] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 1759.351548][T22756] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1759.366977][T22756] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1759.381420][ T5660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1759.390195][T22756] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1759.402013][T22756] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1759.414724][ T5660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1759.426750][ T5660] bond0 (unregistering): Released all slaves
[ 1759.438065][T22756] usb 2-1: config 0 descriptor??
[ 1759.807518][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1759.891876][T22756] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving
[ 1759.932959][T24045] loop2: detected capacity change from 0 to 16
[ 1759.967301][T24045] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x43de2b41, 0xc6d5fae7 expected
[ 1759.977865][T22756] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 1760.071991][T24041] syz-executor.2: attempt to access beyond end of device
[ 1760.071991][T24041] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0
[ 1760.110516][T24041] syz-executor.2: attempt to access beyond end of device
[ 1760.110516][T24041] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0
[ 1760.133230][T24016] chnl_net:caif_netlink_parms(): no params data found
[ 1760.139087][T24041] Mount JFS Failure: -5
[ 1760.144190][T24041] jfs_mount failed w/return code = -5
[ 1760.302806][ T5660] hsr_slave_0: left promiscuous mode
[ 1760.321082][ T5660] hsr_slave_1: left promiscuous mode
[ 1760.328171][T10996] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1760.339754][ T5660] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1760.345249][T10996] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1760.352106][ T5660] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1760.363062][ T5660] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1760.366689][T10996] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1760.374098][ T5660] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1760.383350][T10996] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1760.393078][T10996] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1760.402336][T10996] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1760.467685][ T5660] veth1_macvtap: left promiscuous mode
[ 1760.473312][ T5660] veth0_macvtap: left promiscuous mode
[ 1760.479804][ T5660] veth1_vlan: left promiscuous mode
[ 1760.485114][ T5660] veth0_vlan: left promiscuous mode
[ 1760.643772][ T5159] usb 2-1: USB disconnect, device number 17
[ 1761.040965][T10996] Bluetooth: hci1: command tx timeout
[ 1761.071242][T24055] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1761.274081][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1761.288723][T24058] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1761.780920][ T5660] team0 (unregistering): Port device team_slave_1 removed
[ 1761.879570][ T5660] team0 (unregistering): Port device team_slave_0 removed
[ 1762.344890][T24068] loop1: detected capacity change from 0 to 2048
[ 1762.357410][T24068] udf: Unknown parameter 'ÿ'
[ 1762.492013][T10996] Bluetooth: hci0: command tx timeout
[ 1763.117599][T10996] Bluetooth: hci1: command tx timeout
[ 1763.490230][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1763.555686][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1763.589348][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1764.382067][T24057] IPv6: Can't replace route, no match found
[ 1764.555985][T10996] Bluetooth: hci0: command tx timeout
[ 1764.876336][T24077] loop1: detected capacity change from 0 to 131072
[ 1764.910365][T24077] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 1764.923597][T24077] REISERFS (device loop1): found reiserfs format "3.6" with standard journal
[ 1764.934200][T24077] REISERFS (device loop1): using ordered data mode
[ 1764.940841][T24077] reiserfs: using flush barriers
[ 1764.948125][T24077] REISERFS warning (device loop1): sh-458 journal_init_dev: cannot init journal device unknown-block(7,1): -16
[ 1764.960837][T24077] REISERFS warning (device loop1): sh-462 journal_init: unable to initialize journal device
[ 1764.972774][T24077] REISERFS warning (device loop1): sh-2022 reiserfs_fill_super: unable to initialize journal space
[ 1765.208481][T10996] Bluetooth: hci1: command tx timeout
[ 1765.273249][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1765.444238][T24016] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1765.486513][T24016] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1765.493857][T24016] bridge_slave_0: entered allmulticast mode
[ 1765.532674][T24016] bridge_slave_0: entered promiscuous mode
[ 1765.599191][T24016] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1765.622404][T24016] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1765.662666][T24016] bridge_slave_1: entered allmulticast mode
[ 1765.678284][T24016] bridge_slave_1: entered promiscuous mode
[ 1765.812854][T24016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1765.829781][T24088] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1765.865456][T24088] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes.
[ 1765.876311][T24016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1765.922872][T24046] chnl_net:caif_netlink_parms(): no params data found
[ 1766.210823][T24081] loop2: detected capacity change from 0 to 40427
[ 1766.249363][T24016] team0: Port device team_slave_0 added
[ 1766.272054][T24081] F2FS-fs (loop2): invalid crc value
[ 1766.328691][T24016] team0: Port device team_slave_1 added
[ 1766.346955][T24081] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 1766.400185][   T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1766.418048][   T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1766.431314][   T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1766.441428][   T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1766.449683][   T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1766.457317][   T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1766.575925][T24016] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1766.582911][T24016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1766.608845][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1766.625684][T24016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1766.636770][T10996] Bluetooth: hci0: command tx timeout
[ 1766.643643][T24081] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 1766.663050][T24016] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1766.697089][   T29] audit: type=1400 audit(1717964909.082:2001): avc:  denied  { create } for  pid=24104 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1766.699572][T24016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1766.743611][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1766.787347][   T29] audit: type=1400 audit(1717964909.152:2002): avc:  denied  { getopt } for  pid=24104 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1766.807297][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1766.843633][T24016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1767.113191][T24046] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1767.128410][T24046] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1767.160952][T24046] bridge_slave_0: entered allmulticast mode
[ 1767.215547][T24046] bridge_slave_0: entered promiscuous mode
[ 1767.471449][ T5660] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1767.482870][ T5660] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1767.543817][T24046] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1767.584054][T24046] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1767.615728][T24046] bridge_slave_1: entered allmulticast mode
[ 1767.650064][T24046] bridge_slave_1: entered promiscuous mode
[ 1767.808934][ T5660] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1767.819603][ T5660] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1767.949466][T24046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1768.001378][T24046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1768.071579][ T5660] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1768.083403][ T5660] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1768.160241][T24016] hsr_slave_0: entered promiscuous mode
[ 1768.167867][T24016] hsr_slave_1: entered promiscuous mode
[ 1768.174645][T24016] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1768.195255][T24016] Cannot create hsr debugfs directory
[ 1768.218485][T24116] loop1: detected capacity change from 0 to 1024
[ 1768.382893][   T12] hfsplus: b-tree write err: -5, ino 4
[ 1768.387839][ T5660] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1768.411287][ T5660] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1768.556246][T10996] Bluetooth: hci2: command tx timeout
[ 1768.587570][T24119] loop1: detected capacity change from 0 to 2048
[ 1768.603730][T24119] udf: Unknown parameter 'ÿ'
[ 1768.634475][T24046] team0: Port device team_slave_0 added
[ 1768.663280][T23981] syz-executor.2: attempt to access beyond end of device
[ 1768.663280][T23981] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1768.685669][T23981] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[ 1768.716208][T10996] Bluetooth: hci0: command tx timeout
[ 1768.855676][T24046] team0: Port device team_slave_1 added
[ 1769.536541][T24046] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1769.543523][T24046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1769.569719][T24046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1769.583338][T24046] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1769.590486][T24046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1769.617122][T24046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1770.202271][T24046] hsr_slave_0: entered promiscuous mode
[ 1770.382218][ T5159] libceph: connect (1)[c::]:6789 error -101
[ 1770.475420][ T5159] libceph: mon0 (1)[c::]:6789 connect error
[ 1770.485675][T24046] hsr_slave_1: entered promiscuous mode
[ 1770.554904][T24046] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1770.637912][T24046] Cannot create hsr debugfs directory
[ 1770.645745][T10996] Bluetooth: hci2: command tx timeout
[ 1770.829274][  T784] libceph: connect (1)[c::]:6789 error -101
[ 1770.835677][T24133] ceph: No mds server is up or the cluster is laggy
[ 1770.845506][  T784] libceph: mon0 (1)[c::]:6789 connect error
[ 1770.905857][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1771.141592][T24095] chnl_net:caif_netlink_parms(): no params data found
[ 1771.195809][T24140] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1771.261238][ T5660] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1771.309994][T24137] IPv6: Can't replace route, no match found
[ 1771.513245][ T5660] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1771.664465][ T5660] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1771.902073][ T5660] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1772.085688][T24095] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1772.105533][T24095] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1772.114296][T24095] bridge_slave_0: entered allmulticast mode
[ 1772.131215][T24095] bridge_slave_0: entered promiscuous mode
[ 1772.142728][T24095] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1772.151678][T24095] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1772.159440][T24095] bridge_slave_1: entered allmulticast mode
[ 1772.167831][T24095] bridge_slave_1: entered promiscuous mode
[ 1772.215997][   T29] audit: type=1400 audit(1717964914.592:2003): avc:  denied  { map } for  pid=24167 comm="syz-executor.2" path="socket:[115002]" dev="sockfs" ino=115002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[ 1772.239649][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1772.306176][T24095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1772.329113][T24095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1772.491403][T24171] loop2: detected capacity change from 0 to 2048
[ 1772.509484][T24095] team0: Port device team_slave_0 added
[ 1772.518270][T24171] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1772.562515][T24095] team0: Port device team_slave_1 added
[ 1772.569767][   T29] audit: type=1800 audit(1717964914.952:2004): pid=24171 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1367 res=0 errno=0
[ 1772.591747][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1772.725339][T10996] Bluetooth: hci2: command tx timeout
[ 1772.749948][T24016] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1772.824897][T24095] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1772.832480][T24095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1772.858419][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1772.900998][T24095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1772.923391][T24016] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1772.939419][ T5660] bridge_slave_1: left allmulticast mode
[ 1772.953818][ T5660] bridge_slave_1: left promiscuous mode
[ 1772.980935][ T5660] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1773.017717][ T5660] bridge_slave_0: left allmulticast mode
[ 1773.040235][ T5660] bridge_slave_0: left promiscuous mode
[ 1773.059724][T24176] loop1: detected capacity change from 0 to 2048
[ 1773.059766][ T5660] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1773.079327][T24176] udf: Unknown parameter 'ÿ'
[ 1773.099916][ T5660] bridge_slave_1: left allmulticast mode
[ 1773.113518][ T5660] bridge_slave_1: left promiscuous mode
[ 1773.132454][ T5660] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1773.180252][ T5660] bridge_slave_0: left allmulticast mode
[ 1773.186680][ T5660] bridge_slave_0: left promiscuous mode
[ 1773.198616][ T5660] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1774.855318][T10996] Bluetooth: hci2: command tx timeout
[ 1774.951444][T24183] loop1: detected capacity change from 0 to 131072
[ 1774.972318][T24183] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 1774.985585][T24183] REISERFS (device loop1): found reiserfs format "3.6" with standard journal
[ 1774.994859][T24183] REISERFS (device loop1): using ordered data mode
[ 1775.001433][T24183] reiserfs: using flush barriers
[ 1775.007683][T24183] REISERFS warning (device loop1): sh-458 journal_init_dev: cannot init journal device unknown-block(7,1): -16
[ 1775.019463][T24183] REISERFS warning (device loop1): sh-462 journal_init: unable to initialize journal device
[ 1775.030491][T24183] REISERFS warning (device loop1): sh-2022 reiserfs_fill_super: unable to initialize journal space
[ 1776.463729][ T5660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1776.473929][ T5660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1776.491059][ T5660] bond0 (unregistering): Released all slaves
[ 1776.823789][ T5660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1776.838580][ T5660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1776.849514][ T5660] bond0 (unregistering): Released all slaves
[ 1776.898892][T24095] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1776.917328][T24095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1776.943232][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1776.970307][T24095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1777.040126][T24016] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1792.489449][ T1250] ieee802154 phy0 wpan0: encryption failed: -22
[ 1792.496097][ T1250] ieee802154 phy1 wpan1: encryption failed: -22
[ 1805.760941][   T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1805.774863][   T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1805.785375][   T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1805.796608][   T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1805.808655][   T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1805.821750][   T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1806.300767][   T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1806.325312][   T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1806.336077][   T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1806.346514][   T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1806.354384][   T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1806.366652][   T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1807.915364][   T53] Bluetooth: hci5: command tx timeout
[ 1808.395658][   T53] Bluetooth: hci6: command tx timeout
[ 1810.005273][   T53] Bluetooth: hci5: command tx timeout
[ 1810.486174][   T53] Bluetooth: hci6: command tx timeout
[ 1812.085424][   T53] Bluetooth: hci5: command tx timeout
[ 1812.565473][   T53] Bluetooth: hci6: command tx timeout
[ 1814.155577][   T53] Bluetooth: hci5: command tx timeout
[ 1814.635800][   T53] Bluetooth: hci6: command tx timeout
[ 1821.735436][T10996] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1821.753086][T10996] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1821.765762][T10996] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1821.774380][T10996] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1821.783956][T10996] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 1821.794602][T10996] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1823.846418][T10996] Bluetooth: hci7: command tx timeout
[ 1825.336665][   T53] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1825.353644][   T53] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1825.365685][   T53] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1825.381312][   T53] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1825.395833][   T53] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[ 1825.408137][   T53] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1825.915381][T10996] Bluetooth: hci7: command tx timeout
[ 1827.515505][T10996] Bluetooth: hci8: command tx timeout
[ 1827.997648][T10996] Bluetooth: hci7: command tx timeout
[ 1829.595419][T10996] Bluetooth: hci8: command tx timeout
[ 1830.075658][T10996] Bluetooth: hci7: command tx timeout
[ 1831.438068][   T53] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1831.456776][   T53] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1831.466335][   T53] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1831.478607][   T53] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1831.490610][   T53] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[ 1831.498173][   T53] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1831.675624][T10996] Bluetooth: hci8: command tx timeout
[ 1833.595724][T10996] Bluetooth: hci9: command tx timeout
[ 1833.755365][T10996] Bluetooth: hci8: command tx timeout
[ 1835.675543][T10996] Bluetooth: hci9: command tx timeout
[ 1837.765364][T10996] Bluetooth: hci9: command tx timeout
[ 1839.836089][T10996] Bluetooth: hci9: command tx timeout
[ 1853.929313][ T1250] ieee802154 phy0 wpan0: encryption failed: -22
[ 1853.943500][ T1250] ieee802154 phy1 wpan1: encryption failed: -22
[ 1861.125403][T10996] Bluetooth: hci3: command 0x0406 tx timeout
[ 1866.245426][T10996] Bluetooth: hci4: command 0x0406 tx timeout
[ 1871.003037][T10996] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 1871.016719][T10996] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 1871.027964][T10996] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 1871.053738][T10996] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 1871.065433][T10996] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[ 1871.072971][T10996] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 1871.377916][T10996] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 1871.391347][T10996] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 1871.403810][T10996] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 1871.415892][T10996] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 1871.429220][T10996] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[ 1871.437212][T10996] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 1873.115462][   T53] Bluetooth: hci10: command tx timeout
[ 1873.515549][   T53] Bluetooth: hci11: command tx timeout
[ 1875.205240][   T53] Bluetooth: hci10: command tx timeout
[ 1875.595358][   T53] Bluetooth: hci11: command tx timeout
[ 1877.292326][   T53] Bluetooth: hci10: command tx timeout
[ 1877.675310][   T53] Bluetooth: hci11: command tx timeout
[ 1879.355497][   T53] Bluetooth: hci10: command tx timeout
[ 1879.755351][   T53] Bluetooth: hci11: command tx timeout
[ 1881.595579][   T53] Bluetooth: hci1: command 0x0406 tx timeout
[ 1886.716215][   T53] Bluetooth: hci0: command 0x0406 tx timeout
[ 1887.124349][   T53] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[ 1887.152830][   T53] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[ 1887.180165][   T53] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[ 1887.195344][   T53] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[ 1887.204750][   T53] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[ 1887.212553][   T53] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[ 1889.275373][T10996] Bluetooth: hci12: command tx timeout
[ 1890.398744][T18787] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[ 1890.418229][T18787] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[ 1890.429183][T18787] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[ 1890.439815][T18787] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[ 1890.448200][T18787] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[ 1890.460497][T18787] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[ 1891.355414][T10996] Bluetooth: hci12: command tx timeout
[ 1891.835332][T10996] Bluetooth: hci2: command 0x0406 tx timeout
[ 1892.555412][   T53] Bluetooth: hci13: command tx timeout
[ 1893.435327][   T53] Bluetooth: hci12: command tx timeout
[ 1894.641215][   T53] Bluetooth: hci13: command tx timeout
[ 1895.515220][   T53] Bluetooth: hci12: command tx timeout
[ 1896.494384][T10996] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[ 1896.517280][T10996] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[ 1896.527946][T10996] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[ 1896.540072][T10996] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[ 1896.551421][T10996] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[ 1896.565506][T10996] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[ 1896.725616][   T53] Bluetooth: hci13: command tx timeout
[ 1898.635657][   T53] Bluetooth: hci14: command tx timeout
[ 1898.795328][   T53] Bluetooth: hci13: command tx timeout
[ 1900.715436][   T53] Bluetooth: hci14: command tx timeout
[ 1902.795352][   T53] Bluetooth: hci14: command tx timeout
[ 1904.875352][   T53] Bluetooth: hci14: command tx timeout
[ 1915.368133][ T1250] ieee802154 phy0 wpan0: encryption failed: -22
[ 1915.374589][ T1250] ieee802154 phy1 wpan1: encryption failed: -22
[ 1932.825131][T23211] Bluetooth: hci6: command 0x0406 tx timeout
[ 1932.831335][T23211] Bluetooth: hci5: command 0x0406 tx timeout
[ 1936.337670][   T53] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[ 1936.357063][   T53] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[ 1936.367890][   T53] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[ 1936.397530][   T53] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[ 1936.419395][   T53] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[ 1936.429785][   T53] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[ 1936.536138][   T53] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[ 1936.569372][   T53] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[ 1936.583233][   T53] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[ 1936.592083][   T53] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[ 1936.611188][   T53] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3
[ 1936.620498][   T53] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[ 1938.555603][   T53] Bluetooth: hci15: command tx timeout
[ 1938.715484][   T53] Bluetooth: hci16: command tx timeout
[ 1939.035687][   T30] INFO: task kworker/u8:13:5660 blocked for more than 143 seconds.
[ 1939.045301][   T30]       Not tainted 6.10.0-rc2-syzkaller-00383-gb8481381d4e2 #0
[ 1939.053127][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1939.071241][   T30] task:kworker/u8:13   state:D stack:23744 pid:5660  tgid:5660  ppid:2      flags:0x00004000
2024/06/09 20:31:21 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[ 1939.081808][   T30] Workqueue: netns cleanup_net
[ 1939.110411][   T30] Call Trace:
[ 1939.113785][   T30]  <TASK>
[ 1939.116933][   T30]  __schedule+0xf15/0x5d00
[ 1939.121479][   T30]  ? __pfx___lock_acquire+0x10/0x10
[ 1939.134426][   T30]  ? __pfx___lock_acquire+0x10/0x10
[ 1939.139890][   T30]  ? __pfx_lock_release+0x10/0x10
[ 1939.145000][   T30]  ? __pfx___schedule+0x10/0x10
[ 1939.159977][   T30]  ? schedule+0x298/0x350
[ 1939.164585][   T30]  ? __pfx_lock_release+0x10/0x10
[ 1939.174942][   T30]  ? __mutex_lock+0x5b3/0x9c0
[ 1939.183810][   T30]  ? __mutex_trylock_common+0x78/0x250
[ 1939.189668][   T30]  schedule+0xe7/0x350
[ 1939.193792][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1939.211811][   T30]  __mutex_lock+0x5b8/0x9c0
[ 1939.224011][   T30]  ? synchronize_rcu_expedited+0x42a/0x450
[ 1939.231299][   T30]  ? ieee80211_unregister_hw+0x4d/0x3a0
[ 1939.237394][   T30]  ? __pfx___mutex_lock+0x10/0x10
[ 1939.242460][   T30]  ? ieee80211_unregister_hw+0x4d/0x3a0
[ 1939.249556][   T30]  ieee80211_unregister_hw+0x4d/0x3a0
[ 1939.254977][   T30]  hwsim_exit_net+0x3ad/0x7d0
[ 1939.269936][   T30]  ? __pfx_hwsim_exit_net+0x10/0x10
[ 1939.280815][   T30]  ? ip_vs_sync_net_cleanup+0x72/0xb0
[ 1939.286526][   T30]  ? __ip_vs_dev_cleanup_batch+0xb1/0x290
[ 1939.292284][   T30]  ? __pfx_hwsim_exit_net+0x10/0x10
[ 1939.306151][   T30]  ops_exit_list+0xb0/0x180
[ 1939.310736][   T30]  cleanup_net+0x5b7/0xbf0
[ 1939.327397][   T30]  ? __pfx_cleanup_net+0x10/0x10
[ 1939.332395][   T30]  process_one_work+0x9fb/0x1b60
[ 1939.343492][   T30]  ? __pfx_cleanup_net+0x10/0x10
[ 1939.348699][   T30]  ? __pfx_process_one_work+0x10/0x10
[ 1939.354116][   T30]  ? assign_work+0x1a0/0x250
[ 1939.377287][   T30]  worker_thread+0x6c8/0xf70
[ 1939.381979][   T30]  ? __pfx_worker_thread+0x10/0x10
[ 1939.395956][   T30]  kthread+0x2c1/0x3a0
[ 1939.400169][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1939.412606][   T30]  ? __pfx_kthread+0x10/0x10
[ 1939.422266][   T30]  ret_from_fork+0x45/0x80
[ 1939.435402][   T30]  ? __pfx_kthread+0x10/0x10
[ 1939.440050][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1939.444891][   T30]  </TASK>
[ 1939.455714][   T30] INFO: task kworker/1:6:20132 blocked for more than 143 seconds.
[ 1939.463581][   T30]       Not tainted 6.10.0-rc2-syzkaller-00383-gb8481381d4e2 #0
[ 1939.475280][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1939.484032][   T30] task:kworker/1:6     state:D stack:26160 pid:20132 tgid:20132 ppid:2      flags:0x00004000
[ 1939.503671][   T30] Workqueue: events linkwatch_event
[ 1939.509127][   T30] Call Trace:
[ 1939.512454][   T30]  <TASK>
[ 1939.526214][   T30]  __schedule+0xf15/0x5d00
[ 1939.530729][   T30]  ? __pfx_mark_lock+0x10/0x10
[ 1939.544554][   T30]  ? __pfx___schedule+0x10/0x10
[ 1939.549511][   T30]  ? schedule+0x298/0x350
[ 1939.553896][   T30]  ? __pfx_lock_release+0x10/0x10
[ 1939.565094][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1939.570330][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1939.583285][   T30]  schedule+0xe7/0x350
[ 1939.587535][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1939.593048][   T30]  __mutex_lock+0x5b8/0x9c0
[ 1939.598218][   T30]  ? linkwatch_event+0x51/0xc0
[ 1939.603012][   T30]  ? __pfx___mutex_lock+0x10/0x10
[ 1939.621327][   T30]  ? __pfx_lock_acquire+0x10/0x10
[ 1939.630584][   T30]  ? __pfx_lock_release+0x10/0x10
[ 1939.636970][   T30]  ? linkwatch_event+0x51/0xc0
[ 1939.641767][   T30]  ? rtnl_lock+0x9/0x20
[ 1939.655964][   T30]  linkwatch_event+0x51/0xc0
[ 1939.660609][   T30]  ? __pfx_linkwatch_event+0x10/0x10
[ 1939.672991][   T30]  ? rcu_is_watching+0x12/0xc0
[ 1939.678716][   T30]  process_one_work+0x9fb/0x1b60
[ 1939.683784][   T30]  ? __pfx_linkwatch_event+0x10/0x10
[ 1939.703466][   T30]  ? __pfx_process_one_work+0x10/0x10
[ 1939.708976][   T30]  ? assign_work+0x1a0/0x250
[ 1939.713812][   T30]  worker_thread+0x6c8/0xf70
[ 1939.720363][   T30]  ? __kthread_parkme+0x148/0x220
[ 1939.726640][   T30]  ? __pfx_worker_thread+0x10/0x10
[ 1939.731897][   T30]  kthread+0x2c1/0x3a0
[ 1939.746098][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1939.751349][   T30]  ? __pfx_kthread+0x10/0x10
[ 1939.769016][   T30]  ret_from_fork+0x45/0x80
[ 1939.773492][   T30]  ? __pfx_kthread+0x10/0x10
[ 1939.778496][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1939.783297][   T30]  </TASK>
[ 1939.794551][   T30] INFO: task kworker/u8:6:22552 blocked for more than 144 seconds.
[ 1939.802803][   T30]       Not tainted 6.10.0-rc2-syzkaller-00383-gb8481381d4e2 #0
[ 1939.811002][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1939.832613][   T30] task:kworker/u8:6    state:D stack:24928 pid:22552 tgid:22552 ppid:2      flags:0x00004000
[ 1939.852194][   T30] Workqueue: ipv6_addrconf addrconf_dad_work
[ 1939.859445][   T30] Call Trace:
[ 1939.862781][   T30]  <TASK>
[ 1939.875187][   T30]  __schedule+0xf15/0x5d00
[ 1939.879694][   T30]  ? __pfx___lock_acquire+0x10/0x10
[ 1939.884940][   T30]  ? __pfx___lock_acquire+0x10/0x10
[ 1939.897748][   T30]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1939.903802][   T30]  ? __pfx___schedule+0x10/0x10
[ 1939.913673][   T30]  ? schedule+0x298/0x350
[ 1939.918266][   T30]  ? __pfx_lock_release+0x10/0x10
[ 1939.923328][   T30]  ? __mutex_lock+0x5b3/0x9c0
[ 1939.940534][   T30]  ? __mutex_trylock_common+0x78/0x250
[ 1939.946336][   T30]  schedule+0xe7/0x350
[ 1939.950456][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1939.964320][   T30]  __mutex_lock+0x5b8/0x9c0
[ 1939.970293][   T30]  ? addrconf_dad_work+0xcf/0x1500
[ 1939.985187][   T30]  ? __pfx___mutex_lock+0x10/0x10
[ 1939.990266][   T30]  ? addrconf_dad_work+0xcf/0x1500
[ 1940.002991][   T30]  ? rtnl_lock+0x9/0x20
[ 1940.007330][   T30]  addrconf_dad_work+0xcf/0x1500
[ 1940.012341][   T30]  ? __pfx_lock_acquire+0x10/0x10
[ 1940.025200][   T30]  ? __pfx_addrconf_dad_work+0x10/0x10
[ 1940.033698][   T30]  process_one_work+0x9fb/0x1b60
[ 1940.046843][   T30]  ? __pfx_cfg80211_wiphy_work+0x10/0x10
[ 1940.052617][   T30]  ? __pfx_process_one_work+0x10/0x10
[ 1940.065203][   T30]  ? assign_work+0x1a0/0x250
[ 1940.069846][   T30]  worker_thread+0x6c8/0xf70
[ 1940.074474][   T30]  ? __kthread_parkme+0x148/0x220
[ 1940.091047][   T30]  ? __pfx_worker_thread+0x10/0x10
[ 1940.099939][   T30]  kthread+0x2c1/0x3a0
[ 1940.104061][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1940.114438][   T30]  ? __pfx_kthread+0x10/0x10
[ 1940.119328][   T30]  ret_from_fork+0x45/0x80
[ 1940.123791][   T30]  ? __pfx_kthread+0x10/0x10
[ 1940.139533][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1940.144404][   T30]  </TASK>
[ 1940.151112][   T30] INFO: task syz-executor.4:24016 blocked for more than 144 seconds.
[ 1940.161126][   T30]       Not tainted 6.10.0-rc2-syzkaller-00383-gb8481381d4e2 #0
[ 1940.177354][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1940.187516][   T30] task:syz-executor.4  state:D stack:24176 pid:24016 tgid:24016 ppid:1      flags:0x00000006
[ 1940.205128][   T30] Call Trace:
[ 1940.208439][   T30]  <TASK>
[ 1940.211427][   T30]  __schedule+0xf15/0x5d00
[ 1940.223712][   T30]  ? __pfx___lock_acquire+0x10/0x10
[ 1940.229035][   T30]  ? __pfx___lock_acquire+0x10/0x10
[ 1940.234271][   T30]  ? find_held_lock+0x2d/0x110
[