last executing test programs: 16.397821481s ago: executing program 5 (id=6): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x18, &(0x7f0000000340)=ANY=[@ANYBLOB="4015050000000500b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x402) 15.38498101s ago: executing program 0 (id=1): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x20, 0x1, 0x1, "9e"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 15.123610944s ago: executing program 2 (id=3): syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d2010203010902"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) read$hiddev(r0, &(0x7f0000000080)=""/102, 0x18) 14.901752994s ago: executing program 3 (id=8): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x40015b0b, &(0x7f0000000000)={0x1, 0x200, 0x4, 0xe09, 0x4, 0x805}) 14.381994059s ago: executing program 5 (id=9): syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x7bf}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 13.108996527s ago: executing program 3 (id=10): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000400)={0x1, 0x8d6c30f34124690b, 0x55f}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000e80)={0x20, 0xd}, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x20, 0x82, 0x1, "ce"}, &(0x7f0000001000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\b5\x00\x00\x00\x00G'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$midi(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x763, 0x1031, 0x106, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x7, 0xa0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x9}}}}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x5, 0x4, 0x9, 0x0, 0x7f}, 0x0, 0x0}) r3 = syz_usb_connect(0x3, 0x42, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x3, 0x40, 0x0, 0x0) syz_usb_ep_write(r4, 0x81, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) 12.874948125s ago: executing program 1 (id=11): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000cc0)={0x84, &(0x7f0000000840)={0x20, 0x1, 0x16, "0b1cb1e5e8cb810625e8828beb2f6588199627766011"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12.605090352s ago: executing program 0 (id=12): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x8, 0x70, 0xab8, 0xfffc, 0x4, 0x8000, 0x0, 0x461d, 0x200, 0x0, 0x401, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12.442899418s ago: executing program 5 (id=13): socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x759, &(0x7f0000000780)={[{@noload}, {@acl}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@errors_remount}, {@init_itable, 0x0}, {}, {@journal_dev={'journal_dev', 0x3d, 0x10}}, {@i_version}, {@nobarrier}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xb6a}}, {@data_err_ignore}], [], 0x2c}, 0x2, 0x4f9, &(0x7f0000000200)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, 0x0) ftruncate(0xffffffffffffffff, 0xfffe) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001300010023bd7000fcd3df2500000000", @ANYRES32=r2, @ANYBLOB="24240000000a000008001300", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x80408c5}, 0x20048000) 11.698939926s ago: executing program 2 (id=15): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)={[{0x80, 0x4e00, "61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae5d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360bf44ef39627cc342d94"}]}) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) 10.895143665s ago: executing program 5 (id=16): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='utf8,utf8,namecase=1,iocharset=i8859-15,allow_utime=00000000000000000000000,namecase=1,iocharset=cp850,namecase=1,fmask=00000000000000000000004,fmask=00000000000000000000003,\x00'], 0x1, 0x153f, &(0x7f00000008c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./trace\x00', 0x2d) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0) 10.573500672s ago: executing program 5 (id=17): fcntl$lock(0xffffffffffffffff, 0x25, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) 10.504904085s ago: executing program 1 (id=18): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x80}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext3\x00', &(0x7f00000005c0)='./file0\x00', 0xa0148a, &(0x7f0000000000), 0x21, 0x4d8, &(0x7f0000000d40)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0xb) 10.477040042s ago: executing program 3 (id=19): syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_connect$midi(0x5, 0x0, 0x0, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f0000000000), 0x4cc6, 0x84803) 10.147821373s ago: executing program 4 (id=20): r0 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x402) write$hidraw(r0, &(0x7f00000002c0)="5bf9", 0x4000) 8.676549439s ago: executing program 0 (id=21): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402f0700220001000000010902200001010080320904000002ffffff0007058102000200070502020002"], 0x0) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)) r1 = syz_usb_connect$uac3(0x0, 0xb5, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x582, 0x2b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x20, 0x40, {0x8, 0xb, 0x2, 0x1, 0x1, 0x21, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa, 0xffe}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0xbf}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0x401, 0x1, "638a6d690eee86ebeb"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x99, 0xd, 0x5, 0x9, 0x9}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x1, 0x0, 0x6, 0x7f}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xf, 0x3, 0x2, 0x0, "b8a163"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x9, 0xd, 0xb, {0xa, 0x25, 0x25, 0x2, 0xe, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x2, 0xff, 0x0, {0xa, 0x25, 0x25, 0x6, 0x6, 0x5}}}}}}}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xc, &(0x7f0000000220)="830d00000000000015000003") syz_usb_ep_write(r1, 0x8, 0x2d, &(0x7f0000000040)="77c09a1c3d0e05ebe3dcbe5bbe0e657ee55458df20b60e4a18562f64d06ddfa4b277fbd91fa2e5a6a18823be30") 8.579462381s ago: executing program 4 (id=22): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x40015b0b, &(0x7f0000000000)={0x1, 0x200, 0x4, 0xe09, 0x4, 0x805}) 8.114444506s ago: executing program 2 (id=23): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e446, [{{0x9, 0x2, 0xffffffffffffffe1}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000f40)={[{0x8, 0x4e00, "155038aad51c1e2b"}]}) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000280)={0x14, 0x0, 0x0}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 7.966785251s ago: executing program 5 (id=24): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000a40)={0x20, 0x38, 0x3, '@i\n'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.38505083s ago: executing program 32 (id=24): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000a40)={0x20, 0x38, 0x3, '@i\n'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.364114257s ago: executing program 1 (id=26): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x18, &(0x7f0000000340)=ANY=[@ANYBLOB="4015050000000500b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x402) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.063690549s ago: executing program 3 (id=27): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000004e40)={0xfb, 0x13, 0x0, 0x0, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fff29c"}) 6.416389741s ago: executing program 4 (id=28): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1cc) write(0xffffffffffffffff, &(0x7f0000000200), 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', 0x0, 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r1 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000540)=0x9) bind$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbf8, 0x808b9027}, 0xc) 5.819222257s ago: executing program 0 (id=29): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x2, 0x11d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0xa, 0xee, 0x40, 0xbb4, 0xa3c, 0x714c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10b, 0x1, 0x5, 0x1, 0x90, 0xa, "", [{{0x9, 0x4, 0x47, 0x7, 0x0, 0xe, 0x1, 0x0, 0xa6, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x2, 0xfffb, 0x6}, [@mdlm_detail={0xe2, 0x24, 0x13, 0x9, "d327291deab6f54c1b7872e45d044966d7721732f3a793283d7bc0fa2228f448c865075c50fad01c424efb085d2ae8725ed20042d883b1caf5c9db51744a27f4c5bb147302693a4d10125272778eae76a9bd6baaf55120893450e6f43c0621838f0aa7302d40ee76db3330075508106c2827577d99dcc85d772c07168744001331963dbe352acffc07bb315f33427f94a43eb32604bb46280975395bc1f7c18a6e77173a8b9ff69b9ad7d1c8e2a7e96bcda12e20e1fe17abee35d469cf5dc6c68f3fbb302feb3964eaeba4a3567fb9264360f7140b0dfb26d9c8ee5ad9b7"}]}]}}]}}]}}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) read$char_usb(r2, 0x0, 0x0) 4.93243554s ago: executing program 4 (id=30): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfe, 0x0, 0x7fff7ffc}]}) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(0x0, r5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r7, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x3b}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x4f}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4040810) tee(r4, r6, 0xfffffffffffffc01, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 4.723482554s ago: executing program 3 (id=31): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000400)={0x1, 0x8d6c30f34124690b, 0x55f}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000e80)={0x20, 0xd}, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x20, 0x82, 0x1, "ce"}, &(0x7f0000001000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\b5\x00\x00\x00\x00G'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$midi(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x763, 0x1031, 0x106, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x7, 0xa0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x9}}}}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x5, 0x4, 0x9, 0x0, 0x7f}, 0x0, 0x0}) r3 = syz_usb_connect(0x3, 0x42, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x3, 0x40, 0x0, 0x0) syz_usb_ep_write(r4, 0x81, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) 4.147490033s ago: executing program 2 (id=32): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x64, 0x19, 0x1, 0x70bd28, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="1d1431f1f48dd52bda0804dc8f92bdaca4520fe902b7041f610f69047e177d1a19f944e53a0a76d111e9e72e2d80432d0055bbbc2ca09fa9cfa627e935855f85b48e728eaf2989c897"]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) 4.06022955s ago: executing program 1 (id=33): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20044800) 3.103031834s ago: executing program 1 (id=34): r0 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x402) write$hidraw(r0, &(0x7f00000002c0)="5bf9", 0x4000) 2.945740163s ago: executing program 1 (id=35): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x8, 0x70, 0xab8, 0xfffc, 0x4, 0x8000, 0x0, 0x461d, 0x200, 0x0, 0x401, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.889941206s ago: executing program 2 (id=36): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)={[{0x80, 0x4e00, "61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae5d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360bf44ef39627cc342d94"}]}) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) 1.96269358s ago: executing program 0 (id=37): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@user_xattr}, {@errors_remount}]}, 0xfd, 0x4a4, &(0x7f0000000380)="$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") r0 = creat(&(0x7f0000000340)='./file1\x00', 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") pipe2$9p(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@block_validity}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@discard}, {@prjquota}]}, 0x1, 0x4a0, &(0x7f0000000b80)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) write$FUSE_ENTRY(r0, &(0x7f0000004480)={0x90, 0xfffffffffffffffe, 0x0, {0x5, 0x0, 0x3, 0x2, 0x0, 0x7fffffff, {0x4, 0xba5, 0x0, 0xb, 0x28, 0x2, 0x8, 0x9, 0x80000001, 0xe000, 0x8000, 0x0, 0x0, 0x8, 0x3}}}, 0x90) 1.728247559s ago: executing program 4 (id=38): syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_connect$midi(0x5, 0x0, 0x0, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f0000000000), 0x4cc6, 0x84803) 1.562276219s ago: executing program 0 (id=39): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x8, &(0x7f0000000280)=ANY=[], 0x1, 0x1060c, &(0x7f00000003c0)="$eJzs3E2LW9UfB/BfZv7Tp39ti/TBheIFEWagCc30Ad1I1RYV21KsLlxpJklD2iR3mKTT2I0bXQiC4MY30ZW+Bje6d6sbd24U3BUrufeMOFqozsSJdT4fuPM99+TcX84J2Zzc4Qawax3Jfv6pEodif0TMR8TBiKJdSUfhfBlPRMTTqWsuHZXU/1vHnog4EBGHJsXLmpX00pO/3Pvu868vPfXRt59+8/5nP16bzYqBWVpI+WxE9FfL9u1+mXmnzBupv7HeLbJ/Zj1l+UL/ZjrPy7zdXikq3G5sjGsUebpTjs9Xbw0neb3XaE6y071e9K8Oyjccrnc26hQX3GisFeet9kqR3WFeZOdOOa9xyjvDUVmnleq9V5SP0Wgjy/72uF2uZ/Vmkc3BKPWXdfNWezzJ9ZTp7aKZ91rFPFa29FE/Ei51B7fG2Xp7bdjNB9nZWv25Wv1ctb6Wt9qj9plqo986dyZb7PQmw6qjdqN/vpPnnV671sz7S9lip9ms1uvZ4oX2SrcxyOr12unaqerZpdQ6mb1y5a2s18oWJ/lSd3Br1O0Ns+v5WlZesZQt104/v5Q9U8+uXb6aXX3j4sXLV99858LbV168/NrLadCfppUtLp9aXq7WT1WX60tbXfnJ+6Xduv7SuLK969nlfH8A/rat7P/n7P+BbbL/t/+PXb3/t/6w/2e7fH8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHat7xe+eLVoHCnP/5/6H0tdj0fEiYg4HhHHIuL+A8zHnk01j0ZEJbUfNH7hD3P4shJFhck1e9NxICLOp+Pe4X/6UwAAAID/rrtfffBhxPykWfx5YdYTYielH232Tate8ZPP/6ZV7WhRbDylasc2Sk7F8YhYOPLDlKqdiIi5g+9OqdpfMr8p9v0uKmXM7eRsAACAnbF5JzC13RsAAAD/Oh/PegLMRnG/Nv0vfroXvLeMdENw/8bZ6zOYHQAAADANlVlPAAAAANiOw3c/WX3ooGL///Dn/817/h8AAAA8wsrn/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAr+zczW3iQBQH8AesF/ZLi1Z8tMJptUcOFLEl5JgCkm5yo4ZIiDrILSVEEGFPpDjiEMljnKDfTzIztuCvZ27PYw0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KaHYr28297cNs3ZH5rJczcAAADAKbtivSwn4+r8R7r+K136ExHziJhFxDQiTvXug/hay5xERC/NT32/eFPDfUSZcPzNMB3fI+JfOp5+t/0vAAAAwOXabhariMFxWn787bogzik9tBnlyisf+XzJlTYpw64zpU1fIrOYRUQxfsyUNo+I/s//mdLeZVAbRq+GXjX0z1kNAABwHvVOIFv3BgAAwIdz1XUBdKNcr03v4qe14GE1pAXBb7UzAAAA4BPqdV0AAAAA0Lqy/7f/HwAAAFy2av8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2rQr1svtZrFqmrM/NJPnbgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhmf15SMISBIAz2/1TvFLz/rZQG3erKXRUEPmYIIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJXXcfI+49NYk3w7bfw6Hkn+XTWmrhpz142lF8btc9vzPwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgZ39eTgAEYjAMxrf2tNh/TV6UH/TsTRBmQPhICLIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA33f1V/8SQ2KtqzDQxZdyqas4qsWSVWHOQ2HLQ3v52nB88CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICLHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7M+7TcRAGIXR6wEETgigBHKLRw0kRAhK4CEhWXINFEBDJESkFo2wLexK3nG8mTfYc5L7BRPMDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHDWO18cJWlS5iwpD5+X/8dJTlK+xvH+dMrme/U3nG3z+ef3seZFnq7aJG2aJc4BAFhcN+8U53n/6N+uk2lv6t7WvavbvQz9636/DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbNi5n5co3jgO4M+u7n6/duvSIQrKgoSo9QfiKl6KAgv6B7wtuom0lqiHlCDsIl2CLt27dKmbp079B526RBTUfYOCCIIwdnfGHlNjveys9HrBM/NxGGaeZw7Cez6jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHUF8P59M6F0I43vu7bnj75d7MXvv6/WOj6Xh08vlifM3GJQohhJvztepgB9fSzc6G4eb+w+eHA/Ez/PO85dW1W5VarbqkUCgU20UGv7QAADi0Cslo5PqPhc2pxrHcZAhbT3fm/3NRHdrM/1tPBl7H94rz/1DHVtjd0vw/fX1j4m/5v7SysFhaXl27ML9QmavOVW8PjY2PDY6UR4fHSs33KSVvVQAAANhfMRlx/s9P7u7/H4nq0Gb+f/Xy2nR8rx75f5c0/1/u73/WXv8/g0kCAAD8I46e+vY1t8fxXLEY7lZWVpaGWtvtn4db2wymemD/JSPO/z2TWc8KAAAA6IT6em5H/382qkOb/f/336+ciK/ZE0LoS/r/F2fu1GY7t5yulfb/Jy5VbmT99/8ZLB8AAIAO6UtG3P8vNL//z59Oz8mHEAbOtOrk3wC2lf9/Phh/E98r/v5/pHNL7Er5cut5pPl/492L+f3yf/Pccgi95YwmCwAAwKH3fzIa+f9TYXNq6cfjq0Xf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2LFjlGaCKA7gk2zyfY1iQBBLC20sRAXBKmAhSDyEhSgIHiEgHkDBs1h4B5HUSekBUngDmcmOhG1UkF0Nvx9M/o+wyb6dafICAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKemR2Ej10V86c3qdvne+G14HnNSyfTZm7WDuGLdqrftP2e9zOfJ6dN4bg9bh831BAAAwOIp8nwfQnjtPp7EbPfT/L+Vr4kz/3B5Vud5vjr358yzf1xLD8XZx416s/t0QwiXV9cXu7U94e+2GfZTDl627+f3sHrdyhe+q5POJ/1DU6Rjaw9uV6fdtOutu9Ho+F8q///8UwAA37WTsyzy76OYe002BsDC6pQrzM3/Rb/ZngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADq8B4AAP//l+GcQw==") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file3\x00', 0x2204802, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000012c00)={0xa, 0x4e25, 0x7c, @empty, 0xfffffffd}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000012ac0)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028006fdffffff0000002acad5b31d78a36d021c0fcf5e4d1ade74211c21477f0ffdfe9df8d9298c69509dfd39025cb362fb887dfa5fe61055532b3ba1df40b2adc8f2ec6a94b820c24142f300e093ba7c1e0dd75faedf354fe2e55d658ccea0f03bf2cfc8b158001c9cef716606fa20bc5450513ee2972eb9d8b9a7bec67397c6a368dae204e76eda948107fdb3af2db5c45b9597626a91468bdb6a9aae9ec1053fccaeb58bf5146b4550"], 0x40}}, 0x0) listen(r1, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1.067404222s ago: executing program 3 (id=40): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000dc0)={0x1c, &(0x7f0000000c40)={0x40, 0xf, 0x6, "661cc91c742e"}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 21.579914ms ago: executing program 4 (id=41): syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000400"]) r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000040)=ANY=[@ANYRES8]) 0s ago: executing program 2 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.114' (ED25519) to the list of known hosts. [ 82.783645][ T5598] cgroup: Unknown subsys name 'net' [ 82.876605][ T5598] cgroup: Unknown subsys name 'cpuset' [ 82.881182][ T5598] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.505687][ T5598] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.085113][ T983] cfg80211: failed to load regulatory.db [ 87.225779][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.238062][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.238869][ T5618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.239460][ T5618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.240666][ T5615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.243670][ T5615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.244421][ T5615] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.257034][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.269003][ T5615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.275515][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.282421][ T5622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.296904][ T5622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.304506][ T5622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.311416][ T5615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.320159][ T5622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.371449][ T5615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.380146][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.381151][ T5615] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.386201][ T5615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.386719][ T5615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.387822][ T5615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.388575][ T5615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.412612][ T5615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.413220][ T5615] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.413757][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.414193][ T5615] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.415368][ T5615] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.416134][ T5615] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.435534][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.449562][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.283754][ T5612] Bluetooth: hci0: command tx timeout [ 89.362864][ T4926] Bluetooth: hci1: command tx timeout [ 89.363031][ T4926] Bluetooth: hci2: command tx timeout [ 89.442805][ T5612] Bluetooth: hci5: command tx timeout [ 89.443127][ T5612] Bluetooth: hci4: command tx timeout [ 89.522994][ T4926] Bluetooth: hci3: command tx timeout [ 90.190315][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.190490][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.190893][ T5610] bridge_slave_0: entered allmulticast mode [ 90.194933][ T5610] bridge_slave_0: entered promiscuous mode [ 90.198465][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.198582][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.199029][ T5621] bridge_slave_0: entered allmulticast mode [ 90.202021][ T5621] bridge_slave_0: entered promiscuous mode [ 90.205562][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.205679][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.205831][ T5621] bridge_slave_1: entered allmulticast mode [ 90.207972][ T5621] bridge_slave_1: entered promiscuous mode [ 90.306969][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.307318][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.307476][ T5610] bridge_slave_1: entered allmulticast mode [ 90.309474][ T5610] bridge_slave_1: entered promiscuous mode [ 90.364430][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.364597][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.364728][ T5617] bridge_slave_0: entered allmulticast mode [ 90.366390][ T5617] bridge_slave_0: entered promiscuous mode [ 90.369404][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.369520][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.369944][ T5617] bridge_slave_1: entered allmulticast mode [ 90.372025][ T5617] bridge_slave_1: entered promiscuous mode [ 90.416126][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.416328][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.416445][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.416595][ T5611] bridge_slave_0: entered allmulticast mode [ 90.419865][ T5611] bridge_slave_0: entered promiscuous mode [ 90.500530][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.500757][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.500953][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.501343][ T5611] bridge_slave_1: entered allmulticast mode [ 90.504267][ T5611] bridge_slave_1: entered promiscuous mode [ 90.549771][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.553142][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.583723][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.583892][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.584018][ T5620] bridge_slave_0: entered allmulticast mode [ 90.585611][ T5620] bridge_slave_0: entered promiscuous mode [ 90.622404][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.624965][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.655018][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.655133][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.655282][ T5620] bridge_slave_1: entered allmulticast mode [ 90.657210][ T5620] bridge_slave_1: entered promiscuous mode [ 90.658822][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.658927][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.659115][ T5614] bridge_slave_0: entered allmulticast mode [ 90.660763][ T5614] bridge_slave_0: entered promiscuous mode [ 90.701146][ T5621] team0: Port device team_slave_0 added [ 90.707754][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.712484][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.744419][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.744530][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.744670][ T5614] bridge_slave_1: entered allmulticast mode [ 90.746471][ T5614] bridge_slave_1: entered promiscuous mode [ 90.783545][ T5621] team0: Port device team_slave_1 added [ 90.825348][ T5617] team0: Port device team_slave_0 added [ 90.828200][ T5610] team0: Port device team_slave_0 added [ 90.846305][ T5611] team0: Port device team_slave_0 added [ 90.849238][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.874067][ T5617] team0: Port device team_slave_1 added [ 90.876087][ T5610] team0: Port device team_slave_1 added [ 90.895450][ T5611] team0: Port device team_slave_1 added [ 90.898171][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.900930][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.922279][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.939634][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.939657][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.939697][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.033494][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.033520][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.033565][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.034783][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.034804][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.034848][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.036186][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.036207][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.036251][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.038711][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.038730][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.038770][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.058509][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.058534][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.058577][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.112718][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.112743][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.112787][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.135186][ T5620] team0: Port device team_slave_0 added [ 91.143182][ T5620] team0: Port device team_slave_1 added [ 91.144245][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.144265][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.144309][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.149474][ T5614] team0: Port device team_slave_0 added [ 91.217923][ T5614] team0: Port device team_slave_1 added [ 91.371941][ T4926] Bluetooth: hci0: command tx timeout [ 91.377474][ T5610] hsr_slave_0: entered promiscuous mode [ 91.378526][ T5610] hsr_slave_1: entered promiscuous mode [ 91.380441][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.380461][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.380501][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.409651][ T5621] hsr_slave_0: entered promiscuous mode [ 91.410918][ T5621] hsr_slave_1: entered promiscuous mode [ 91.412604][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 91.412696][ T5621] Cannot create hsr debugfs directory [ 91.422170][ T5611] hsr_slave_0: entered promiscuous mode [ 91.423764][ T5611] hsr_slave_1: entered promiscuous mode [ 91.424661][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 91.424687][ T5611] Cannot create hsr debugfs directory [ 91.430077][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.430098][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.430142][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.451688][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.451712][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.451755][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.454278][ T4926] Bluetooth: hci2: command tx timeout [ 91.454302][ T5612] Bluetooth: hci1: command tx timeout [ 91.532344][ T4926] Bluetooth: hci5: command tx timeout [ 91.532552][ T5612] Bluetooth: hci4: command tx timeout [ 91.552180][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.552204][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.552248][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.604228][ T5612] Bluetooth: hci3: command tx timeout [ 91.661251][ T5617] hsr_slave_0: entered promiscuous mode [ 91.662555][ T5617] hsr_slave_1: entered promiscuous mode [ 91.663415][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 91.663443][ T5617] Cannot create hsr debugfs directory [ 91.891769][ T5620] hsr_slave_0: entered promiscuous mode [ 91.893256][ T5620] hsr_slave_1: entered promiscuous mode [ 91.894183][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 91.894209][ T5620] Cannot create hsr debugfs directory [ 91.920235][ T5614] hsr_slave_0: entered promiscuous mode [ 91.921152][ T5614] hsr_slave_1: entered promiscuous mode [ 91.921767][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 91.921794][ T5614] Cannot create hsr debugfs directory [ 92.519577][ T5610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.527658][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.529087][ T5610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.547933][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.548903][ T5610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.557254][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.561296][ T5610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.571833][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.665282][ T5611] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 92.669256][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.675896][ T5611] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 92.686756][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.691304][ T5611] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 92.701553][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.706482][ T5611] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 92.713500][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.834654][ T5621] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.838796][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.864243][ T5621] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.868532][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.893759][ T5621] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.898487][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.899256][ T5621] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.903798][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.941296][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.032454][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.041087][ T5617] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.048305][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.049337][ T5617] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.055847][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.056869][ T5617] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.061639][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.065463][ T5617] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.069339][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.140787][ T978] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.140903][ T978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.186469][ T978] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.186585][ T978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.230589][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.263245][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.299879][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.315436][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.316522][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.319770][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.320731][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.330504][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.335553][ T978] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.335692][ T978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.358894][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.373719][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.399918][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.407894][ T978] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.408021][ T978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.452048][ T5612] Bluetooth: hci0: command tx timeout [ 93.522084][ T5612] Bluetooth: hci1: command tx timeout [ 93.522261][ T5612] Bluetooth: hci2: command tx timeout [ 93.553990][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.602195][ T4926] Bluetooth: hci5: command tx timeout [ 93.602295][ T5612] Bluetooth: hci4: command tx timeout [ 93.608262][ T5620] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.616234][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.630132][ T978] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.630275][ T978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.670813][ T5620] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.677715][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.686087][ T5612] Bluetooth: hci3: command tx timeout [ 93.705807][ T1445] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.705934][ T1445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.708577][ T5620] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.714447][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.789861][ T5620] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.797079][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.893395][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.009974][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.080036][ T1445] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.080164][ T1445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.175641][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.183520][ T1445] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.183645][ T1445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.286475][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.338839][ T978] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.338966][ T978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.426699][ T978] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.426826][ T978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.510711][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.687699][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.723548][ T978] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.723676][ T978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.790423][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.790559][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.018011][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.239718][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.379665][ T5610] veth0_vlan: entered promiscuous mode [ 95.413041][ T5610] veth1_vlan: entered promiscuous mode [ 95.523307][ T5612] Bluetooth: hci0: command tx timeout [ 95.602028][ T4926] Bluetooth: hci1: command tx timeout [ 95.602131][ T5612] Bluetooth: hci2: command tx timeout [ 95.618363][ T5610] veth0_macvtap: entered promiscuous mode [ 95.652721][ T5610] veth1_macvtap: entered promiscuous mode [ 95.683123][ T4926] Bluetooth: hci5: command tx timeout [ 95.683183][ T5612] Bluetooth: hci4: command tx timeout [ 95.750648][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.763275][ T5612] Bluetooth: hci3: command tx timeout [ 95.807191][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.870186][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.072294][ T978] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.195003][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.196381][ T94] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.196448][ T94] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.381169][ T1445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.381201][ T1445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.598849][ T1445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.598881][ T1445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.611827][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.635586][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.719599][ T5611] veth0_vlan: entered promiscuous mode [ 96.787460][ T5611] veth1_vlan: entered promiscuous mode [ 96.790569][ T5610] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.023497][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.025947][ T5614] veth0_vlan: entered promiscuous mode [ 97.046699][ T5617] veth0_vlan: entered promiscuous mode [ 97.087356][ T5617] veth1_vlan: entered promiscuous mode [ 97.098711][ T5614] veth1_vlan: entered promiscuous mode [ 97.108581][ T5611] veth0_macvtap: entered promiscuous mode [ 97.148872][ T5611] veth1_macvtap: entered promiscuous mode [ 97.159346][ T5621] veth0_vlan: entered promiscuous mode [ 97.182502][ T5625] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.216026][ T5621] veth1_vlan: entered promiscuous mode [ 97.229291][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.257055][ T5620] veth0_vlan: entered promiscuous mode [ 97.273729][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.285083][ T5614] veth0_macvtap: entered promiscuous mode [ 97.304024][ T5617] veth0_macvtap: entered promiscuous mode [ 97.309622][ T5620] veth1_vlan: entered promiscuous mode [ 97.330516][ T5614] veth1_macvtap: entered promiscuous mode [ 97.342254][ T5625] usb 2-1: Using ep0 maxpacket: 32 [ 97.344635][ T5625] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 97.348894][ T5625] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.385031][ T5625] usb 2-1: config 0 descriptor?? [ 97.399733][ T5617] veth1_macvtap: entered promiscuous mode [ 97.469035][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.476604][ T5621] veth0_macvtap: entered promiscuous mode [ 97.512224][ T978] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.513392][ T978] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.513455][ T978] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.513524][ T978] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.526794][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.535927][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.609474][ T5621] veth1_macvtap: entered promiscuous mode [ 97.617110][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.631492][ T5625] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 97.635547][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.636669][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.636750][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.636813][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.648105][ T978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.648136][ T978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.660667][ T5620] veth0_macvtap: entered promiscuous mode [ 97.713245][ T5625] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 97.715308][ T5625] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 97.715366][ T5625] usb 2-1: media controller created [ 97.741714][ T5620] veth1_macvtap: entered promiscuous mode [ 97.764722][ T5625] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 97.812747][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.812822][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.812884][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.820683][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.828179][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.828208][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.882236][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.903920][ T1445] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.019476][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.022337][ T978] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.022408][ T978] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.022501][ T978] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.022564][ T978] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.048868][ T5625] az6027: usb out operation failed. (-71) [ 98.048891][ T5625] stb0899_attach: Driver disabled by Kconfig [ 98.048905][ T5625] az6027: no front-end attached [ 98.048905][ T5625] [ 98.092878][ T5625] az6027: usb out operation failed. (-71) [ 98.096328][ T5625] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 98.124980][ T5625] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 98.150906][ T5625] dvb-usb: schedule remote query interval to 400 msecs. [ 98.150935][ T5625] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 98.181354][ T5625] usb 2-1: USB disconnect, device number 2 [ 98.242598][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.252291][ T1445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.252322][ T1445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.252601][ T1445] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.395271][ T5625] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 98.403244][ T1445] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.407648][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.408014][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.472975][ T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 98.481357][ T1445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.481388][ T1445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.570751][ T978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.570782][ T978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.619659][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.619688][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.624195][ T25] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 98.631743][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.631792][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.631898][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.684723][ T25] usb 6-1: config 0 descriptor?? [ 98.731207][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.731238][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.861019][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.861082][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.942198][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.942229][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.006454][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.006525][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.213178][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.251725][ T25] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 99.280385][ T25] hid-steam 0003:28DE:1142.0001: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 99.348018][ T25] hid-steam 0003:28DE:1142.0001: Steam wireless receiver connected [ 99.348263][ T25] hid-steam 0003:28DE:1142.0001: steam_probe:steam_get_conn_status failed with error -22 [ 99.402249][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 99.403006][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 99.407022][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.407061][ T9] usb 2-1: Product: syz [ 99.407103][ T9] usb 2-1: Manufacturer: syz [ 99.407130][ T9] usb 2-1: SerialNumber: syz [ 99.441502][ T25] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 99.465796][ T9] usb 2-1: config 0 descriptor?? [ 99.559810][ T25] hid-steam 0003:28DE:1142.0002: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 99.624240][ T25] usb 6-1: USB disconnect, device number 2 [ 99.688291][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 99.715997][ T5599] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.744158][ T25] hid-steam 0003:28DE:1142.0001: Steam wireless receiver disconnected [ 99.772125][ T187] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 99.863950][ T5599] usb 1-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00 [ 99.865886][ T5599] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.865938][ T5599] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.865986][ T5599] usb 1-1: config 0 interface 0 has no altsetting 0 [ 99.866034][ T5599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.871685][ T5599] usb 1-1: config 0 descriptor?? [ 99.881583][ T5625] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.952746][ T187] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 99.954762][ T5860] fido_id[5860]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 99.956645][ T187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.956721][ T187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.956776][ T187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.018111][ T983] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.032342][ T187] usb 5-1: config 0 descriptor?? [ 100.102440][ T5625] usb 4-1: Using ep0 maxpacket: 8 [ 100.106751][ T5625] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 100.111843][ T5625] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 100.112022][ T5625] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.112063][ T5625] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.112144][ T5625] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.112188][ T5625] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.112286][ T5625] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.186038][ T983] usb 3-1: Using ep0 maxpacket: 32 [ 100.190772][ T983] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 100.191822][ T983] usb 3-1: config 0 has no interfaces? [ 100.208473][ T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.208550][ T983] usb 3-1: Product: syz [ 100.208575][ T983] usb 3-1: Manufacturer: syz [ 100.208601][ T983] usb 3-1: SerialNumber: syz [ 100.260116][ T983] usb 3-1: config 0 descriptor?? [ 100.356033][ T5599] input: HID 06a3:0cd0 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:06A3:0CD0.0003/input/input6 [ 100.477168][ T187] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 100.481265][ T187] hid-steam 0003:28DE:1142.0004: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 100.500685][ T5599] saitek 0003:06A3:0CD0.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.0-1/input0 [ 100.517684][ T5762] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 100.533078][ T187] hid-steam 0003:28DE:1142.0004: Steam wireless receiver connected [ 100.533114][ T187] hid-steam 0003:28DE:1142.0004: steam_probe:steam_get_conn_status failed with error -22 [ 100.535071][ T5625] usb 4-1: GET_CAPABILITIES returned 0 [ 100.535154][ T5625] usbtmc 4-1:16.0: can't read capabilities [ 100.584461][ T187] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 100.630705][ T187] hid-steam 0003:28DE:1142.0005: hidraw1: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 100.663528][ T5762] usb 6-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 100.667686][ T5762] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.667737][ T5762] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 100.667813][ T5762] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.667861][ T5762] usb 6-1: config 0 interface 0 has no altsetting 0 [ 100.667909][ T5762] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.767557][ T5762] usb 6-1: config 0 descriptor?? [ 100.769408][ T5773] usb 4-1: USB disconnect, device number 2 [ 100.770371][ T5863] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 101.036135][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 101.075608][ T9] usb 2-1: USB disconnect, device number 3 [ 101.089935][ T5636] udevd[5636]: setting owner of /dev/bus/usb/002/003 to uid=0, gid=0 failed: No such file or directory [ 101.269774][ T983] usb 1-1: USB disconnect, device number 2 [ 101.405656][ T5863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.406225][ T5863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.410855][ T5762] usbhid 6-1:0.0: can't add hid device: -71 [ 101.410983][ T5762] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 101.462972][ T5762] usb 6-1: USB disconnect, device number 3 [ 101.712941][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.875254][ T25] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 101.878841][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 101.878885][ T25] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 101.878941][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.903782][ T5599] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 101.931578][ T25] usb 4-1: probing VID:PID(0424:012C) [ 101.952868][ T25] usb 4-1: vub300 testing BULK IN EndPoint(0) 81 [ 101.952910][ T25] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02 [ 101.952944][ T25] usb 4-1: vub300 testing BULK IN EndPoint(2) 83 [ 101.952976][ T25] usb 4-1: vub300 testing BULK OUT EndPoint(3) 04 [ 101.953018][ T25] usb 4-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 102.081299][ T5599] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.090417][ T5599] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.090487][ T5599] usb 2-1: Product: syz [ 102.090513][ T5599] usb 2-1: Manufacturer: syz [ 102.090539][ T5599] usb 2-1: SerialNumber: syz [ 102.167672][ T5870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.168237][ T5870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.172221][ T5773] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 102.209093][ T5876] loop5: detected capacity change from 0 to 512 [ 102.218116][ T5876] ======================================================= [ 102.218116][ T5876] WARNING: The mand mount option has been deprecated and [ 102.218116][ T5876] and is ignored by this kernel. Remove the mand [ 102.218116][ T5876] option from the mount to silence this warning. [ 102.218116][ T5876] ======================================================= [ 102.242062][ T5876] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 102.254445][ T5876] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 102.254664][ T5876] System zones: 1-12 [ 102.271014][ T5876] EXT4-fs (loop5): orphan cleanup on readonly fs [ 102.296393][ T5876] EXT4-fs error (device loop5): ext4_validate_block_bitmap:444: comm syz.5.13: bg 0: block 361: padding at end of block bitmap is not set [ 102.296540][ T5876] loop5: lost filesystem error report for type 5 error -117 [ 102.306700][ T5876] EXT4-fs (loop5): Remounting filesystem read-only [ 102.312020][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 102.312049][ C1] EXT4-fs (loop5): initial error at time 1789855140: ext4_validate_block_bitmap:444 [ 102.312087][ C1] EXT4-fs (loop5): last error at time 1789855140: ext4_validate_block_bitmap:444 [ 102.316292][ T5876] EXT4-fs (loop5): 1 truncate cleaned up [ 102.358765][ T5773] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.370523][ T5876] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 102.382877][ T5773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.382917][ T5773] usb 1-1: Product: syz [ 102.382942][ T5773] usb 1-1: Manufacturer: syz [ 102.382968][ T5773] usb 1-1: SerialNumber: syz [ 102.418169][ T983] usb 5-1: USB disconnect, device number 2 [ 102.436834][ T25] usb 4-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 102.533093][ T983] hid-steam 0003:28DE:1142.0004: Steam wireless receiver disconnected [ 102.640310][ T25] usb 4-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 102.686372][ T30] usb 3-1: USB disconnect, device number 2 [ 102.902643][ T983] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 103.040245][ T5870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.047085][ T5870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.049861][ T5870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.053997][ T983] usb 5-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 103.063761][ T983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.063804][ T983] usb 5-1: Product: syz [ 103.063894][ T983] usb 5-1: Manufacturer: syz [ 103.063920][ T983] usb 5-1: SerialNumber: syz [ 103.114865][ T5870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.119151][ T5885] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13'. [ 103.133507][ T983] usb 5-1: config 0 descriptor?? [ 103.162172][ T30] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.271560][ T5599] cdc_ncm 2-1:1.0: failed to get mac address [ 103.272550][ T5599] cdc_ncm 2-1:1.0: bind() failure [ 103.305197][ T5599] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 103.306991][ T5599] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 103.315568][ T5599] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 103.318506][ T30] usb 3-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 103.322213][ T30] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.322276][ T30] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.322376][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.360086][ T5599] usb 2-1: USB disconnect, device number 4 [ 103.571053][ T5611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 103.574614][ T5773] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 103.574687][ T5773] cdc_ncm 1-1:1.0: setting tx_max = 16384 [ 103.639565][ T983] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-32 [ 103.639650][ T983] peak_usb 5-1:0.0: unable to read PCAN-USB FD firmware info (err -32) [ 103.701817][ T5887] loop5: detected capacity change from 0 to 256 [ 103.714369][ T5887] exfat: Deprecated parameter 'utf8' [ 103.714399][ T5887] exfat: Deprecated parameter 'utf8' [ 103.714435][ T5887] exfat: Deprecated parameter 'namecase' [ 103.714526][ T5887] exfat: Deprecated parameter 'namecase' [ 103.714601][ T5887] exfat: Deprecated parameter 'namecase' [ 103.760361][ T5887] exFAT-fs (loop5): failed to load upcase table (idx : 0x00017f3e, chksum : 0xa30f3a9b, utbl_chksum : 0xe619d30d) [ 103.798469][ T983] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -32 [ 103.830365][ T983] usb 5-1: USB disconnect, device number 3 [ 103.918739][ T5773] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 103.958972][ T25] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 104.005840][ T5773] usb 1-1: USB disconnect, device number 3 [ 104.008967][ T5773] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 104.045271][ T5599] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 104.326198][ T25] usb 4-1: USB disconnect, device number 3 [ 104.330492][ T5599] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 104.332856][ T5599] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 104.671612][ T5893] loop1: detected capacity change from 0 to 512 [ 105.687038][ T30] usb 3-1: USB disconnect, device number 3 [ 106.423282][ T25] USB vub300 remote SDIO host controller[0] now disconnected [ 106.585381][ T5599] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 106.586855][ T5754] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 106.732133][ T5754] usb 5-1: Using ep0 maxpacket: 8 [ 106.737082][ T5599] usb 1-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 106.774525][ T5754] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 106.779874][ T5754] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 106.779969][ T5754] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.780014][ T5754] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 106.780080][ T5754] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.780123][ T5754] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.838983][ T5754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.873601][ T5599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.882200][ T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 106.931609][ T59] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.944187][ T30] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 107.032550][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 107.033509][ T25] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 107.034926][ T25] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 107.034964][ T25] usb 4-1: config 0 has no interface number 0 [ 107.049453][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.049491][ T25] usb 4-1: Product: syz [ 107.049514][ T25] usb 4-1: Manufacturer: syz [ 107.049576][ T25] usb 4-1: SerialNumber: syz [ 107.101288][ T25] usb 4-1: config 0 descriptor?? [ 107.116018][ T30] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 107.116079][ T30] usb 3-1: too many configurations: 70, using maximum allowed: 8 [ 107.148042][ T30] usb 3-1: config index 0 descriptor too short (expected 65505, got 72) [ 107.148635][ T5754] usb 5-1: GET_CAPABILITIES returned 0 [ 107.148753][ T5754] usbtmc 5-1:16.0: can't read capabilities [ 107.176018][ T30] usb 3-1: config index 1 descriptor too short (expected 65505, got 72) [ 107.178265][ T30] usb 3-1: config index 2 descriptor too short (expected 65505, got 72) [ 107.179788][ T30] usb 3-1: config index 3 descriptor too short (expected 65505, got 72) [ 107.191630][ T30] usb 3-1: config index 4 descriptor too short (expected 65505, got 72) [ 107.198402][ T59] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.230890][ T30] usb 3-1: config index 5 descriptor too short (expected 65505, got 72) [ 107.240830][ T30] usb 3-1: config index 6 descriptor too short (expected 65505, got 72) [ 107.253328][ T30] usb 3-1: config index 7 descriptor too short (expected 65505, got 72) [ 107.260196][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.260237][ T30] usb 3-1: Product: syz [ 107.260261][ T30] usb 3-1: Manufacturer: syz [ 107.260321][ T30] usb 3-1: SerialNumber: syz [ 107.326833][ T25] usb 4-1: can't set config #0, error -71 [ 107.366385][ T5903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.366974][ T5903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.387818][ T25] usb 4-1: USB disconnect, device number 4 [ 107.498795][ T5777] usb 5-1: USB disconnect, device number 4 [ 107.507962][ T59] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.566426][ T5754] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 107.572042][ T5762] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 107.649744][ T4926] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 107.652350][ T4926] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 107.660246][ T4926] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 107.680078][ T4926] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 107.690065][ T4926] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 107.768702][ T5762] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 107.769637][ T59] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.774150][ T5762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.774201][ T5762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.774256][ T5762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.792158][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 107.834192][ C1] usb 1-1: NFC: Urb failure (status -71) [ 107.837593][ T5762] usb 2-1: config 0 descriptor?? [ 107.841688][ T5599] usb 1-1: NFC: Unable to get FW version [ 107.849547][ T5599] pn533_usb 1-1:1.0: probe with driver pn533_usb failed with error -71 [ 107.949474][ T25] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 107.958322][ T25] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 107.958391][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.977597][ T25] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 107.977638][ T25] usb 4-1: Manufacturer: syz [ 107.980774][ T5599] usb 1-1: USB disconnect, device number 4 [ 108.020284][ T25] usb 4-1: config 0 descriptor?? [ 108.055163][ T5908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.056182][ T5908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.273910][ T25] rc_core: IR keymap rc-hauppauge not found [ 108.273934][ T25] Registered IR keymap rc-empty [ 108.289297][ T25] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 108.306843][ T25] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 108.341014][ T5925] loop4: detected capacity change from 0 to 128 [ 108.376538][ T5762] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0 [ 108.377504][ T5762] hid-steam 0003:28DE:1142.0006: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 108.381127][ T25] usb 4-1: USB disconnect, device number 5 [ 108.434111][ T5762] hid-steam 0003:28DE:1142.0006: Steam wireless receiver connected [ 108.434149][ T5762] hid-steam 0003:28DE:1142.0006: steam_probe:steam_get_conn_status failed with error -22 [ 108.496758][ T5925] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 108.521421][ T5925] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.588953][ T5762] hid-steam 0003:28DE:1142.0007: unknown main item tag 0x0 [ 108.611839][ T5762] hid-steam 0003:28DE:1142.0007: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 108.963584][ T5754] usb 3-1: Service connection timeout for: 256 [ 108.964523][ T5754] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 109.174957][ T5762] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 109.195086][ T5754] ath9k_htc: Failed to initialize the device [ 109.467017][ T5908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.480857][ T5908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.561973][ T5762] usb 1-1: Using ep0 maxpacket: 32 [ 109.563145][ T5762] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 109.565563][ T5762] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 109.565604][ T5762] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 109.565640][ T5762] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 109.565701][ T5762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 109.565741][ T5762] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 109.565783][ T5762] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 109.565844][ T5762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.649886][ T59] bridge_slave_1: left allmulticast mode [ 109.649948][ T59] bridge_slave_1: left promiscuous mode [ 109.650690][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.677359][ T187] usb 2-1: reset high-speed USB device number 5 using dummy_hcd [ 109.678041][ C0] raw-gadget.4 gadget.1: ignoring, device is not running [ 109.721218][ T5762] usb 1-1: config 0 descriptor?? [ 109.758492][ T59] bridge_slave_0: left allmulticast mode [ 109.758530][ T59] bridge_slave_0: left promiscuous mode [ 109.759291][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.767876][ T5612] Bluetooth: hci1: command tx timeout [ 109.868427][ T5621] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.871223][ T5754] usb 3-1: ath9k_htc: USB layer deinitialized [ 109.933916][ T5777] usb 3-1: USB disconnect, device number 4 [ 109.966015][ T5762] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 109.970810][ T5762] usb 1-1: USB disconnect, device number 5 [ 110.002559][ T5762] usblp0: removed [ 110.022430][ T5625] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 110.195790][ T5625] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 110.197454][ T5625] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 110.197505][ T5625] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 110.197565][ T5625] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.283545][ T5625] usb 4-1: probing VID:PID(0424:012C) [ 110.303164][ T5625] usb 4-1: vub300 testing BULK IN EndPoint(0) 81 [ 110.303206][ T5625] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02 [ 110.303241][ T5625] usb 4-1: vub300 testing BULK IN EndPoint(2) 83 [ 110.303275][ T5625] usb 4-1: vub300 testing BULK OUT EndPoint(3) 04 [ 110.303309][ T5625] usb 4-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 111.120300][ T5938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.125565][ T5938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.373611][ T5625] usb 4-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 111.384382][ T5848] usb 2-1: USB disconnect, device number 5 [ 111.431181][ T5848] hid-steam 0003:28DE:1142.0006: Steam wireless receiver disconnected [ 111.842011][ T5612] Bluetooth: hci1: command tx timeout [ 112.383194][ T5762] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 112.383387][ T5625] usb 4-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 112.383431][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 112.415430][ T5938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.416038][ T5938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.456766][ T5938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.457424][ T5938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.529295][ T5956] loop0: detected capacity change from 0 to 512 [ 112.597264][ T5956] EXT4-fs error (device loop0): ext4_validate_block_bitmap:435: comm syz.0.37: bg 0: block 7: invalid block bitmap [ 112.597316][ T5956] loop0: lost filesystem error report for type 5 error -117 [ 112.601908][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 112.601940][ C1] EXT4-fs (loop0): initial error at time 1789855150: ext4_validate_block_bitmap:435 [ 112.601979][ C1] EXT4-fs (loop0): last error at time 1789855150: ext4_validate_block_bitmap:435 [ 112.638817][ T5906] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 112.680841][ T5956] EXT4-fs (loop0): Remounting filesystem read-only [ 112.681101][ T5956] EXT4-fs (loop0): 1 orphan inode deleted [ 112.737546][ T5956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.785446][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.805356][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.820863][ T59] bond0 (unregistering): Released all slaves [ 112.829620][ T5906] usb 3-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 112.841475][ T5906] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.841543][ T5906] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.841605][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.909057][ T5614] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.952352][ T5848] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 113.122808][ T5848] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.124264][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 113.141543][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.141584][ T5848] usb 2-1: Product: syz [ 113.141610][ T5848] usb 2-1: Manufacturer: syz [ 113.141636][ T5848] usb 2-1: SerialNumber: syz [ 113.272073][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 113.276257][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 113.277720][ T9] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 113.277760][ T9] usb 5-1: config 0 has no interface number 0 [ 113.291223][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.291297][ T9] usb 5-1: Product: syz [ 113.291323][ T9] usb 5-1: Manufacturer: syz [ 113.291349][ T9] usb 5-1: SerialNumber: syz [ 113.315239][ T9] usb 5-1: config 0 descriptor?? [ 113.344213][ T5625] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 113.350023][ T9] hub 5-1:0.132: bad descriptor, ignoring hub [ 113.350058][ T9] hub 5-1:0.132: probe with driver hub failed with error -5 [ 113.400230][ T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input8 [ 113.430885][ T5625] usb 4-1: USB disconnect, device number 6 [ 113.450398][ T187] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 113.477265][ T187] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 113.480070][ T187] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 113.804304][ T9] usb 5-1: USB disconnect, device number 5 [ 113.922127][ T5612] Bluetooth: hci1: command tx timeout [ 113.971778][ T5906] usb 3-1: USB disconnect, device number 5 [ 114.116140][ T94] rtsx_usb_ms rtsx_usb_ms.2.auto: Runtime PM usage count underflow! [ 114.185539][ T5625] USB vub300 remote SDIO host controller[0] now disconnected [ 114.284378][ T5848] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 114.284420][ T5848] cdc_ncm 2-1:1.0: setting tx_max = 16384 [ 114.482195][ C0] [ 114.485569][ C0] ============================= [ 114.490453][ C0] WARNING: suspicious RCU usage [ 114.495372][ C0] syzkaller #0 Not tainted [ 114.499819][ C0] ----------------------------- [ 114.504704][ C0] kernel/sched/core.c:9219 Illegal context switch in RCU-sched read-side critical section! [ 114.514732][ C0] [ 114.514732][ C0] other info that might help us debug this: [ 114.514732][ C0] [ 114.525012][ C0] [ 114.525012][ C0] rcu_scheduler_active = 2, debug_locks = 1 [ 114.533136][ C0] locks held by syz-executor/5621: 9, last CPU#0: [ 114.539588][ C0] #0: ffffffff8ef3c9b0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_process+0x4806/0x8370 [ 114.549063][ C0] #1: ffff888036917678 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 114.558241][ C0] #2: ffff8880135569b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 [ 114.567602][ C0] #3: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 114.577240][ C0] #4: ffff888074a37df8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x10f/0x320 [ 114.587857][ C0] #5: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 114.597491][ C0] #6: ffff88803480ac78 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_page_range+0xfd0/0x57c0 [ 114.608027][ C0] #7: ffffffff8edec3e0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xbc/0x4b0 [ 114.617559][ C0] #8: ffffc90000007c98 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0x11d/0x5f0 [ 114.628263][ C0] [ 114.628263][ C0] stack backtrace: [ 114.634202][ C0] CPU: 0 UID: 0 PID: 5621 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 114.643689][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 114.653768][ C0] Call Trace: [ 114.657057][ C0] [ 114.659910][ C0] dump_stack_lvl+0x100/0x190 [ 114.664633][ C0] lockdep_rcu_suspicious.cold+0x4f/0xb2 [ 114.670325][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 114.677049][ C0] __might_resched+0x2d9/0x330 [ 114.681869][ C0] ? __pfx___might_resched+0x10/0x10 [ 114.687209][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.692880][ C0] ? kfree_const+0x5f/0x70 [ 114.697344][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 114.704066][ C0] cancel_delayed_work_sync+0xb8/0xf0 [ 114.709475][ C0] mmc_free_host+0x19/0x40 [ 114.713945][ C0] vub300_inactivity_timer_expired+0x42f/0x550 [ 114.720144][ C0] call_timer_fn+0x198/0x5f0 [ 114.724789][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 114.729953][ C0] ? lock_acquire+0x1d1/0x380 [ 114.734666][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 114.741387][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.747061][ C0] ? mark_held_locks+0x40/0x70 [ 114.751862][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 114.758583][ C0] __run_timers+0x757/0xb00 [ 114.763135][ C0] ? __pfx___run_timers+0x10/0x10 [ 114.768186][ C0] ? clockevents_program_event+0x23e/0x820 [ 114.774042][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.779713][ C0] ? lock_acquire+0x1d1/0x380 [ 114.784424][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.790105][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 114.795186][ C0] run_timer_base+0x114/0x190 [ 114.799884][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 114.805110][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.810790][ C0] run_timer_softirq+0x1a/0x50 [ 114.815582][ C0] handle_softirqs+0x1e6/0x9d0 [ 114.820382][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 114.825693][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.831364][ C0] ? _raw_spin_unlock+0x28/0x50 [ 114.836254][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.841924][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 114.847612][ C0] __irq_exit_rcu+0x16a/0x210 [ 114.852314][ C0] irq_exit_rcu+0x9/0x30 [ 114.856583][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 114.862259][ C0] [ 114.865194][ C0] [ 114.868146][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 114.874162][ C0] RIP: 0010:pfn_valid+0x3d8/0x4b0 [ 114.879209][ C0] Code: ff 48 c7 c2 e0 47 06 8c be c9 03 00 00 48 c7 c7 a0 47 06 8c c6 05 5b 77 a2 0e 01 e8 e2 23 5c ff e9 b4 fe ff ff e8 98 61 81 ff 93 12 65 ff 31 ff 89 c3 89 c6 e8 98 5b 81 ff 84 db 0f 85 e0 fd [ 114.898885][ C0] RSP: 0018:ffffc900037ff3c8 EFLAGS: 00000293 [ 114.904983][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000003 [ 114.912970][ C0] RDX: ffff88807fa9be80 RSI: ffffffff828aacf8 RDI: ffff88807fa9be80 [ 114.920965][ C0] RBP: ffff88813fe27180 R08: 0000000000000005 R09: 0000000000000000 [ 114.928959][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000008 [ 114.936953][ C0] R13: 0000000000000001 R14: dffffc0000000000 R15: 0000000000000000 [ 114.944954][ C0] ? pfn_valid+0x3d8/0x4b0 [ 114.949408][ C0] ? pfn_valid+0x3d8/0x4b0 [ 114.953861][ C0] page_table_check_set+0x25/0x580 [ 114.959006][ C0] __page_table_check_ptes_set+0x2c0/0x530 [ 114.964845][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 114.971213][ C0] ? copy_page_range+0x1a80/0x57c0 [ 114.976365][ C0] copy_page_range+0x21c4/0x57c0 [ 114.981378][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.987049][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 114.992369][ C0] ? mas_wr_store_entry+0xa4/0x1d50 [ 114.997611][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.003292][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.008960][ C0] ? lock_acquire+0x1d1/0x380 [ 115.013661][ C0] ? dup_mmap+0xd0a/0x2370 [ 115.018103][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.023770][ C0] ? find_held_lock+0x2b/0x80 [ 115.028490][ C0] ? dup_mmap+0xe66/0x2370 [ 115.032932][ C0] ? dup_mmap+0xe66/0x2370 [ 115.037371][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.043028][ C0] ? down_write+0x146/0x1f0 [ 115.047558][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.053226][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.058898][ C0] ? up_write+0x2dc/0x5b0 [ 115.063266][ C0] dup_mmap+0x1230/0x2370 [ 115.067632][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 115.072322][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 115.078165][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.083827][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.089479][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 115.095326][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.100986][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.106638][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 115.111604][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.117256][ C0] ? lock_acquire+0x1d1/0x380 [ 115.121951][ C0] ? copy_process+0x4806/0x8370 [ 115.126834][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.132516][ C0] copy_process+0x4811/0x8370 [ 115.137248][ C0] ? __pfx_copy_process+0x10/0x10 [ 115.142290][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.147948][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.153603][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.159260][ C0] ? irqentry_exit+0x24d/0xa10 [ 115.164036][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 115.169250][ C0] kernel_clone+0x176/0x9d0 [ 115.173773][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 115.178820][ C0] ? __might_fault+0xc5/0x140 [ 115.183522][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.189262][ C0] ? find_held_lock+0x2b/0x80 [ 115.194002][ C0] ? __might_fault+0xc5/0x140 [ 115.198729][ C0] __do_sys_clone+0xd9/0x120 [ 115.203336][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 115.208574][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.214232][ C0] do_syscall_64+0x123/0x790 [ 115.218841][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.224755][ C0] RIP: 0033:0x7fd97a9c6bd2 [ 115.229176][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 115.248799][ C0] RSP: 002b:00007ffda004a280 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 115.257237][ C0] RAX: ffffffffffffffda RBX: 00007ffda004a280 RCX: 00007fd97a9c6bd2 [ 115.265215][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 115.273192][ C0] RBP: 00007ffda004a40c R08: 0000000000000000 R09: 0000000000000001 [ 115.281167][ C0] R10: 0000555590f2d7d0 R11: 0000000000000246 R12: 0000000000000001 [ 115.289144][ C0] R13: 00000000000927c0 R14: 000000000001be25 R15: 00007ffda004a460 [ 115.297496][ C0] [ 115.300628][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 [ 115.300651][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5621, name: syz-executor [ 115.300680][ C0] preempt_count: 103, expected: 0 [ 115.300697][ C0] RCU nest depth: 2, expected: 0 [ 115.300715][ C0] locks held by syz-executor/5621: 9, last CPU#0: [ 115.300743][ C0] #0: ffffffff8ef3c9b0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_process+0x4806/0x8370 [ 115.300842][ C0] #1: ffff888036917678 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 115.300936][ C0] #2: ffff8880135569b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 [ 115.301039][ C0] #3: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 115.301152][ C0] #4: ffff888074a37df8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x10f/0x320 [ 115.301278][ C0] #5: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 115.301391][ C0] #6: ffff88803480ac78 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_page_range+0xfd0/0x57c0 [ 115.301515][ C0] #7: ffffffff8edec3e0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xbc/0x4b0 [ 115.301608][ C0] #8: ffffc90000007c98 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0x11d/0x5f0 [ 115.301728][ C0] Preemption disabled at: [ 115.301737][ C0] [<0000000000000000>] 0x0 [ 115.301774][ C0] CPU: 0 UID: 0 PID: 5621 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 115.301818][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 115.301844][ C0] Call Trace: [ 115.301857][ C0] [ 115.301871][ C0] dump_stack_lvl+0x100/0x190 [ 115.301929][ C0] __might_resched.cold+0x1dc/0x222 [ 115.301983][ C0] ? __pfx___might_resched+0x10/0x10 [ 115.302048][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.302096][ C0] ? kfree_const+0x5f/0x70 [ 115.302150][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 115.302206][ C0] cancel_delayed_work_sync+0xb8/0xf0 [ 115.302251][ C0] mmc_free_host+0x19/0x40 [ 115.302305][ C0] vub300_inactivity_timer_expired+0x42f/0x550 [ 115.302361][ C0] call_timer_fn+0x198/0x5f0 [ 115.302426][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 115.302493][ C0] ? lock_acquire+0x1d1/0x380 [ 115.302538][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 115.302590][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.302637][ C0] ? mark_held_locks+0x40/0x70 [ 115.302678][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 115.302729][ C0] __run_timers+0x757/0xb00 [ 115.302780][ C0] ? __pfx___run_timers+0x10/0x10 [ 115.302815][ C0] ? clockevents_program_event+0x23e/0x820 [ 115.302874][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.302923][ C0] ? lock_acquire+0x1d1/0x380 [ 115.302967][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.303017][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 115.303087][ C0] run_timer_base+0x114/0x190 [ 115.303124][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 115.303161][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.303217][ C0] run_timer_softirq+0x1a/0x50 [ 115.303255][ C0] handle_softirqs+0x1e6/0x9d0 [ 115.303302][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 115.303340][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.303388][ C0] ? _raw_spin_unlock+0x28/0x50 [ 115.303446][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.303499][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 115.303565][ C0] __irq_exit_rcu+0x16a/0x210 [ 115.303603][ C0] irq_exit_rcu+0x9/0x30 [ 115.303639][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 115.303707][ C0] [ 115.303720][ C0] [ 115.303735][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 115.303780][ C0] RIP: 0010:pfn_valid+0x3d8/0x4b0 [ 115.303819][ C0] Code: ff 48 c7 c2 e0 47 06 8c be c9 03 00 00 48 c7 c7 a0 47 06 8c c6 05 5b 77 a2 0e 01 e8 e2 23 5c ff e9 b4 fe ff ff e8 98 61 81 ff 93 12 65 ff 31 ff 89 c3 89 c6 e8 98 5b 81 ff 84 db 0f 85 e0 fd [ 115.303857][ C0] RSP: 0018:ffffc900037ff3c8 EFLAGS: 00000293 [ 115.303888][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000003 [ 115.303912][ C0] RDX: ffff88807fa9be80 RSI: ffffffff828aacf8 RDI: ffff88807fa9be80 [ 115.303939][ C0] RBP: ffff88813fe27180 R08: 0000000000000005 R09: 0000000000000000 [ 115.303964][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000008 [ 115.303988][ C0] R13: 0000000000000001 R14: dffffc0000000000 R15: 0000000000000000 [ 115.304027][ C0] ? pfn_valid+0x3d8/0x4b0 [ 115.304069][ C0] ? pfn_valid+0x3d8/0x4b0 [ 115.304108][ C0] page_table_check_set+0x25/0x580 [ 115.304157][ C0] __page_table_check_ptes_set+0x2c0/0x530 [ 115.304206][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 115.304255][ C0] ? copy_page_range+0x1a80/0x57c0 [ 115.304307][ C0] copy_page_range+0x21c4/0x57c0 [ 115.304402][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.304452][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 115.304503][ C0] ? mas_wr_store_entry+0xa4/0x1d50 [ 115.304559][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.304614][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.304661][ C0] ? lock_acquire+0x1d1/0x380 [ 115.304698][ C0] ? dup_mmap+0xd0a/0x2370 [ 115.304736][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.304791][ C0] ? find_held_lock+0x2b/0x80 [ 115.304844][ C0] ? dup_mmap+0xe66/0x2370 [ 115.304881][ C0] ? dup_mmap+0xe66/0x2370 [ 115.304917][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.304965][ C0] ? down_write+0x146/0x1f0 [ 115.305010][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.305059][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.305106][ C0] ? up_write+0x2dc/0x5b0 [ 115.305155][ C0] dup_mmap+0x1230/0x2370 [ 115.305212][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 115.305250][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 115.305311][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.305361][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.305408][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 115.305471][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.305528][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.305576][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 115.305631][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.305678][ C0] ? lock_acquire+0x1d1/0x380 [ 115.305715][ C0] ? copy_process+0x4806/0x8370 [ 115.305760][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.305820][ C0] copy_process+0x4811/0x8370 [ 115.305885][ C0] ? __pfx_copy_process+0x10/0x10 [ 115.305923][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.305975][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.306025][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.306075][ C0] ? irqentry_exit+0x24d/0xa10 [ 115.306114][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 115.306160][ C0] kernel_clone+0x176/0x9d0 [ 115.306205][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 115.306257][ C0] ? __might_fault+0xc5/0x140 [ 115.306306][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.306354][ C0] ? find_held_lock+0x2b/0x80 [ 115.306407][ C0] ? __might_fault+0xc5/0x140 [ 115.306461][ C0] __do_sys_clone+0xd9/0x120 [ 115.306510][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 115.306581][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.306638][ C0] do_syscall_64+0x123/0x790 [ 115.306682][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.306723][ C0] RIP: 0033:0x7fd97a9c6bd2 [ 115.306753][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 115.306790][ C0] RSP: 002b:00007ffda004a280 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 115.306827][ C0] RAX: ffffffffffffffda RBX: 00007ffda004a280 RCX: 00007fd97a9c6bd2 [ 115.306854][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 115.306878][ C0] RBP: 00007ffda004a40c R08: 0000000000000000 R09: 0000000000000001 [ 115.306903][ C0] R10: 0000555590f2d7d0 R11: 0000000000000246 R12: 0000000000000001 [ 115.306928][ C0] R13: 00000000000927c0 R14: 000000000001be25 R15: 00007ffda004a460 [ 115.306977][ C0] [ 115.307214][ C0] [ 116.002573][ T5612] Bluetooth: hci1: command tx timeout [ 116.096960][ C0] ============================= [ 116.101817][ C0] WARNING: suspicious RCU usage [ 116.106735][ C0] syzkaller #0 Tainted: G W [ 116.112757][ C0] ----------------------------- [ 116.117607][ C0] kernel/rcu/srcutree.c:1464 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section! [ 116.129638][ C0] [ 116.129638][ C0] other info that might help us debug this: [ 116.129638][ C0] [ 116.139913][ C0] [ 116.139913][ C0] rcu_scheduler_active = 2, debug_locks = 1 [ 116.148030][ C0] locks held by syz-executor/5621: 9, last CPU#0: [ 116.154505][ C0] #0: ffffffff8ef3c9b0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_process+0x4806/0x8370 [ 116.163941][ C0] #1: ffff888036917678 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 116.173120][ C0] #2: ffff8880135569b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 [ 116.182482][ C0] #3: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 116.192114][ C0] #4: ffff888074a37df8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x10f/0x320 [ 116.202719][ C0] #5: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 116.212353][ C0] #6: ffff88803480ac78 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_page_range+0xfd0/0x57c0 [ 116.222886][ C0] #7: ffffffff8edec3e0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xbc/0x4b0 [ 116.232494][ C0] #8: ffffc90000007c98 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0x11d/0x5f0 [ 116.243167][ C0] [ 116.243167][ C0] stack backtrace: [ 116.249078][ C0] CPU: 0 UID: 0 PID: 5621 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 116.260134][ C0] Tainted: [W]=WARN [ 116.263945][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 116.274017][ C0] Call Trace: [ 116.277307][ C0] [ 116.280164][ C0] dump_stack_lvl+0x100/0x190 [ 116.284887][ C0] lockdep_rcu_suspicious.cold+0x4f/0xb2 [ 116.290583][ C0] __synchronize_srcu+0x29d/0x300 [ 116.295645][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 116.301242][ C0] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 116.306815][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.312529][ C0] ? synchronize_srcu+0xa8/0x380 [ 116.317547][ C0] wakeup_source_unregister.part.0+0x12c/0x540 [ 116.323753][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 116.329952][ C0] wakeup_source_unregister+0x1f/0x30 [ 116.335370][ C0] mmc_host_classdev_release+0x42/0x120 [ 116.340963][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 116.347168][ C0] device_release+0xd2/0x270 [ 116.352228][ C0] kobject_put+0x1f7/0x640 [ 116.356688][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 116.363404][ C0] put_device+0x1f/0x30 [ 116.367602][ C0] vub300_inactivity_timer_expired+0x42f/0x550 [ 116.373803][ C0] call_timer_fn+0x198/0x5f0 [ 116.378449][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 116.383617][ C0] ? lock_acquire+0x1d1/0x380 [ 116.388329][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 116.395048][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.400724][ C0] ? mark_held_locks+0x40/0x70 [ 116.405527][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 116.412246][ C0] __run_timers+0x757/0xb00 [ 116.416789][ C0] ? __pfx___run_timers+0x10/0x10 [ 116.421841][ C0] ? clockevents_program_event+0x23e/0x820 [ 116.427701][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.433372][ C0] ? lock_acquire+0x1d1/0x380 [ 116.438082][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.444014][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 116.449097][ C0] run_timer_base+0x114/0x190 [ 116.453801][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 116.459024][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.464695][ C0] run_timer_softirq+0x1a/0x50 [ 116.469477][ C0] handle_softirqs+0x1e6/0x9d0 [ 116.474286][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 116.479597][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.485264][ C0] ? _raw_spin_unlock+0x28/0x50 [ 116.490152][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.495821][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 116.501517][ C0] __irq_exit_rcu+0x16a/0x210 [ 116.506224][ C0] irq_exit_rcu+0x9/0x30 [ 116.510496][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 116.516189][ C0] [ 116.519129][ C0] [ 116.522073][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 116.528086][ C0] RIP: 0010:pfn_valid+0x3d8/0x4b0 [ 116.533138][ C0] Code: ff 48 c7 c2 e0 47 06 8c be c9 03 00 00 48 c7 c7 a0 47 06 8c c6 05 5b 77 a2 0e 01 e8 e2 23 5c ff e9 b4 fe ff ff e8 98 61 81 ff 93 12 65 ff 31 ff 89 c3 89 c6 e8 98 5b 81 ff 84 db 0f 85 e0 fd [ 116.552866][ C0] RSP: 0018:ffffc900037ff3c8 EFLAGS: 00000293 [ 116.558961][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000003 [ 116.566951][ C0] RDX: ffff88807fa9be80 RSI: ffffffff828aacf8 RDI: ffff88807fa9be80 [ 116.574945][ C0] RBP: ffff88813fe27180 R08: 0000000000000005 R09: 0000000000000000 [ 116.582938][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000008 [ 116.590930][ C0] R13: 0000000000000001 R14: dffffc0000000000 R15: 0000000000000000 [ 116.598943][ C0] ? pfn_valid+0x3d8/0x4b0 [ 116.603395][ C0] ? pfn_valid+0x3d8/0x4b0 [ 116.607929][ C0] page_table_check_set+0x25/0x580 [ 116.613078][ C0] __page_table_check_ptes_set+0x2c0/0x530 [ 116.619023][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 116.625392][ C0] ? copy_page_range+0x1a80/0x57c0 [ 116.630555][ C0] copy_page_range+0x21c4/0x57c0 [ 116.635583][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.641263][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 116.646584][ C0] ? mas_wr_store_entry+0xa4/0x1d50 [ 116.651832][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.657514][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.663187][ C0] ? lock_acquire+0x1d1/0x380 [ 116.667898][ C0] ? dup_mmap+0xd0a/0x2370 [ 116.672390][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.678082][ C0] ? find_held_lock+0x2b/0x80 [ 116.682805][ C0] ? dup_mmap+0xe66/0x2370 [ 116.687251][ C0] ? dup_mmap+0xe66/0x2370 [ 116.691695][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.697373][ C0] ? down_write+0x146/0x1f0 [ 116.701917][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.707593][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.713264][ C0] ? up_write+0x2dc/0x5b0 [ 116.717631][ C0] dup_mmap+0x1230/0x2370 [ 116.722009][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 116.726715][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 116.732577][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.738261][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.743936][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 116.749801][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.755480][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.761155][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 116.766140][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.771814][ C0] ? lock_acquire+0x1d1/0x380 [ 116.776522][ C0] ? copy_process+0x4806/0x8370 [ 116.781407][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.787093][ C0] copy_process+0x4811/0x8370 [ 116.791829][ C0] ? __pfx_copy_process+0x10/0x10 [ 116.796883][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.802558][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.808228][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.813899][ C0] ? irqentry_exit+0x24d/0xa10 [ 116.818692][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 116.823923][ C0] kernel_clone+0x176/0x9d0 [ 116.828454][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 116.833527][ C0] ? __might_fault+0xc5/0x140 [ 116.838243][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.843906][ C0] ? find_held_lock+0x2b/0x80 [ 116.848626][ C0] ? __might_fault+0xc5/0x140 [ 116.853349][ C0] __do_sys_clone+0xd9/0x120 [ 116.857968][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 116.863227][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.868904][ C0] do_syscall_64+0x123/0x790 [ 116.873530][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.879453][ C0] RIP: 0033:0x7fd97a9c6bd2 [ 116.883897][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 116.903532][ C0] RSP: 002b:00007ffda004a280 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 116.911982][ C0] RAX: ffffffffffffffda RBX: 00007ffda004a280 RCX: 00007fd97a9c6bd2 [ 116.919976][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 116.927971][ C0] RBP: 00007ffda004a40c R08: 0000000000000000 R09: 0000000000000001 [ 116.935960][ C0] R10: 0000555590f2d7d0 R11: 0000000000000246 R12: 0000000000000001 [ 116.943964][ C0] R13: 00000000000927c0 R14: 000000000001be25 R15: 00007ffda004a460 [ 116.951975][ C0] [ 116.955084][ ** replaying previous printk message ** [ 116.955084][ C0] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1472 [ 116.955110][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5621, name: syz-executor [ 116.955142][ C0] preempt_count: 103, expected: 0 [ 116.955159][ C0] RCU nest depth: 2, expected: 0 [ 116.955177][ C0] locks held by syz-executor/5621: 9, last CPU#0: [ 116.955206][ C0] #0: ffffffff8ef3c9b0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_process+0x4806/0x8370 [ 116.955308][ C0] #1: ffff888036917678 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 116.955402][ C0] #2: ffff8880135569b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 [ 116.955506][ C0] #3: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 116.955617][ C0] #4: ffff888074a37df8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x10f/0x320 [ 116.955736][ C0] #5: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 116.955844][ C0] #6: ffff88803480ac78 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_page_range+0xfd0/0x57c0 [ 116.955960][ C0] #7: ffffffff8edec3e0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xbc/0x4b0 [ 116.956072][ C0] #8: ffffc90000007c98 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0x11d/0x5f0 [ 116.956195][ C0] Preemption disabled at: [ 116.956205][ C0] [<0000000000000000>] 0x0 [ 116.956247][ C0] CPU: 0 UID: 0 PID: 5621 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 116.956303][ C0] Tainted: [W]=WARN [ 116.956317][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 116.956340][ C0] Call Trace: [ 116.956352][ C0] [ 116.956366][ C0] dump_stack_lvl+0x100/0x190 [ 116.956425][ C0] __might_resched.cold+0x1dc/0x222 [ 116.956482][ C0] ? __pfx___might_resched+0x10/0x10 [ 116.956556][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.956605][ C0] ? lockdep_rcu_suspicious.cold+0x54/0xb2 [ 116.956675][ C0] __synchronize_srcu+0x13c/0x300 [ 116.956720][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 116.956779][ C0] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 116.956819][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.956874][ C0] ? synchronize_srcu+0xa8/0x380 [ 116.956920][ C0] wakeup_source_unregister.part.0+0x12c/0x540 [ 116.956984][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 116.957045][ C0] wakeup_source_unregister+0x1f/0x30 [ 116.957105][ C0] mmc_host_classdev_release+0x42/0x120 [ 116.957161][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 116.957218][ C0] device_release+0xd2/0x270 [ 116.957263][ C0] kobject_put+0x1f7/0x640 [ 116.957318][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 116.957373][ C0] put_device+0x1f/0x30 [ 116.957414][ C0] vub300_inactivity_timer_expired+0x42f/0x550 [ 116.957472][ C0] call_timer_fn+0x198/0x5f0 [ 116.957545][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 116.957607][ C0] ? lock_acquire+0x1d1/0x380 [ 116.957654][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 116.957709][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.957756][ C0] ? mark_held_locks+0x40/0x70 [ 116.957800][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 116.957855][ C0] __run_timers+0x757/0xb00 [ 116.957905][ C0] ? __pfx___run_timers+0x10/0x10 [ 116.957942][ C0] ? clockevents_program_event+0x23e/0x820 [ 116.958002][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.958050][ C0] ? lock_acquire+0x1d1/0x380 [ 116.958093][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.958143][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 116.958210][ C0] run_timer_base+0x114/0x190 [ 116.958249][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 116.958287][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.958343][ C0] run_timer_softirq+0x1a/0x50 [ 116.958382][ C0] handle_softirqs+0x1e6/0x9d0 [ 116.958430][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 116.958468][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.958522][ C0] ? _raw_spin_unlock+0x28/0x50 [ 116.958580][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.958628][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 116.958693][ C0] __irq_exit_rcu+0x16a/0x210 [ 116.958731][ C0] irq_exit_rcu+0x9/0x30 [ 116.958767][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 116.958839][ C0] [ 116.958851][ C0] [ 116.958866][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 116.958911][ C0] RIP: 0010:pfn_valid+0x3d8/0x4b0 [ 116.958950][ C0] Code: ff 48 c7 c2 e0 47 06 8c be c9 03 00 00 48 c7 c7 a0 47 06 8c c6 05 5b 77 a2 0e 01 e8 e2 23 5c ff e9 b4 fe ff ff e8 98 61 81 ff 93 12 65 ff 31 ff 89 c3 89 c6 e8 98 5b 81 ff 84 db 0f 85 e0 fd [ 116.958987][ C0] RSP: 0018:ffffc900037ff3c8 EFLAGS: 00000293 [ 116.959019][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000003 [ 116.959043][ C0] RDX: ffff88807fa9be80 RSI: ffffffff828aacf8 RDI: ffff88807fa9be80 [ 116.959069][ C0] RBP: ffff88813fe27180 R08: 0000000000000005 R09: 0000000000000000 [ 116.959094][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000008 [ 116.959118][ C0] R13: 0000000000000001 R14: dffffc0000000000 R15: 0000000000000000 [ 116.959156][ C0] ? pfn_valid+0x3d8/0x4b0 [ 116.959198][ C0] ? pfn_valid+0x3d8/0x4b0 [ 116.959236][ C0] page_table_check_set+0x25/0x580 [ 116.959284][ C0] __page_table_check_ptes_set+0x2c0/0x530 [ 116.959332][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 116.959379][ C0] ? copy_page_range+0x1a80/0x57c0 [ 116.959431][ C0] copy_page_range+0x21c4/0x57c0 [ 116.959531][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.959582][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 116.959627][ C0] ? mas_wr_store_entry+0xa4/0x1d50 [ 116.959683][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.959738][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.959787][ C0] ? lock_acquire+0x1d1/0x380 [ 116.959824][ C0] ? dup_mmap+0xd0a/0x2370 [ 116.959863][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.959920][ C0] ? find_held_lock+0x2b/0x80 [ 116.959974][ C0] ? dup_mmap+0xe66/0x2370 [ 116.960012][ C0] ? dup_mmap+0xe66/0x2370 [ 116.960048][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.960098][ C0] ? down_write+0x146/0x1f0 [ 116.960144][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.960194][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.960243][ C0] ? up_write+0x2dc/0x5b0 [ 116.960291][ C0] dup_mmap+0x1230/0x2370 [ 116.960349][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 116.960386][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 116.960448][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.960505][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.960553][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 116.960617][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.960671][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.960720][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 116.960776][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.960825][ C0] ? lock_acquire+0x1d1/0x380 [ 116.960862][ C0] ? copy_process+0x4806/0x8370 [ 116.960908][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.960968][ C0] copy_process+0x4811/0x8370 [ 116.961034][ C0] ? __pfx_copy_process+0x10/0x10 [ 116.961072][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.961123][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.961175][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.961226][ C0] ? irqentry_exit+0x24d/0xa10 [ 116.961264][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 116.961310][ C0] kernel_clone+0x176/0x9d0 [ 116.961355][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 116.961408][ C0] ? __might_fault+0xc5/0x140 [ 116.961457][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.961512][ C0] ? find_held_lock+0x2b/0x80 [ 116.961565][ C0] ? __might_fault+0xc5/0x140 [ 116.961619][ C0] __do_sys_clone+0xd9/0x120 [ 116.961662][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 116.961734][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.961790][ C0] do_syscall_64+0x123/0x790 [ 116.961835][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.961880][ C0] RIP: 0033:0x7fd97a9c6bd2 [ 116.961909][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 116.961945][ C0] RSP: 002b:00007ffda004a280 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 116.961981][ C0] RAX: ffffffffffffffda RBX: 00007ffda004a280 RCX: 00007fd97a9c6bd2 [ 116.962007][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 116.962031][ C0] RBP: 00007ffda004a40c R08: 0000000000000000 R09: 0000000000000001 [ 116.962055][ C0] R10: 0000555590f2d7d0 R11: 0000000000000246 R12: 0000000000000001 [ 116.962080][ C0] R13: 00000000000927c0 R14: 000000000001be25 R15: 00007ffda004a460 [ 116.962127][ C0] [ 116.962194][ C0] ODEBUG: object ffffc90000007a60 is NOT on stack ffffc900037f8000, but annotated. [ 116.963406][ C0] ------------[ cut here ]------------ [ 116.963419][ C0] 1 [ 116.963428][ C0] WARNING: lib/debugobjects.c:672 at lookup_object_or_alloc.part.0.cold+0x19/0x40, CPU#0: syz-executor/5621 [ 117.839110][ C0] Modules linked in: [ 117.843025][ C0] CPU: 0 UID: 0 PID: 5621 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 117.854088][ C0] Tainted: [W]=WARN [ 117.857899][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 117.867969][ C0] RIP: 0010:lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 117.875048][ C0] Code: c4 60 5b 5d 41 5c 41 5d 41 5e 41 5f e9 04 c2 d9 ff 83 c5 01 89 2d 10 a3 7c 1a 4c 89 e6 48 c7 c7 c0 45 62 8c e8 51 ca eb ff 90 <0f> 0b 90 e9 92 c0 fd 03 83 c5 01 89 2d ef a2 7c 1a 49 39 c4 73 da [ 117.894686][ C0] RSP: 0018:ffffc900000078f0 EFLAGS: 00010082 [ 117.900813][ C0] RAX: 0000000000000050 RBX: ffff8880548adea8 RCX: 0000000000000000 [ 117.908794][ C0] RDX: 0000000000000050 RSI: ffffffff81ea0339 RDI: fffff52000000f0f [ 117.916775][ C0] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 117.924752][ C0] R10: 0000000000000104 R11: 0000000000000001 R12: ffffc90000007a60 [ 117.932729][ C0] R13: ffff88807fa9be80 R14: 0000000000000001 R15: 0000000000000000 [ 117.940703][ C0] FS: 0000555590f2d500(0000) GS:ffff888123b53000(0000) knlGS:0000000000000000 [ 117.949725][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.956314][ C0] CR2: 00007fd97b7556c8 CR3: 0000000058b60000 CR4: 0000000000350ef0 [ 117.964291][ C0] Call Trace: [ 117.967567][ C0] [ 117.970415][ C0] __debug_object_init+0x2a9/0x3d0 [ 117.975565][ C0] ? __pfx___debug_object_init+0x10/0x10 [ 117.981228][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 117.986883][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 117.992272][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 117.997927][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.003590][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 118.008978][ C0] ? __init_swait_queue_head+0xca/0x150 [ 118.014544][ C0] __synchronize_srcu+0x1c3/0x300 [ 118.019583][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 118.025159][ C0] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 118.030718][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.036374][ C0] ? synchronize_srcu+0xa8/0x380 [ 118.041332][ C0] wakeup_source_unregister.part.0+0x12c/0x540 [ 118.047547][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 118.053752][ C0] wakeup_source_unregister+0x1f/0x30 [ 118.059155][ C0] mmc_host_classdev_release+0x42/0x120 [ 118.064728][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 118.070911][ C0] device_release+0xd2/0x270 [ 118.075516][ C0] kobject_put+0x1f7/0x640 [ 118.079958][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 118.086659][ C0] put_device+0x1f/0x30 [ 118.090833][ C0] vub300_inactivity_timer_expired+0x42f/0x550 [ 118.097013][ C0] call_timer_fn+0x198/0x5f0 [ 118.101647][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 118.106797][ C0] ? lock_acquire+0x1d1/0x380 [ 118.111498][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 118.118197][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.123852][ C0] ? mark_held_locks+0x40/0x70 [ 118.128631][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 118.135331][ C0] __run_timers+0x757/0xb00 [ 118.139860][ C0] ? __pfx___run_timers+0x10/0x10 [ 118.144892][ C0] ? clockevents_program_event+0x23e/0x820 [ 118.150729][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.156381][ C0] ? lock_acquire+0x1d1/0x380 [ 118.161074][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.166725][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 118.171788][ C0] run_timer_base+0x114/0x190 [ 118.176478][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 118.181692][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.187349][ C0] run_timer_softirq+0x1a/0x50 [ 118.192125][ C0] handle_softirqs+0x1e6/0x9d0 [ 118.196908][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 118.202203][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.207866][ C0] ? _raw_spin_unlock+0x28/0x50 [ 118.212750][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.218410][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 118.224084][ C0] __irq_exit_rcu+0x16a/0x210 [ 118.228773][ C0] irq_exit_rcu+0x9/0x30 [ 118.233020][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 118.238688][ C0] [ 118.241611][ C0] [ 118.244537][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 118.250534][ C0] RIP: 0010:pfn_valid+0x3d8/0x4b0 [ 118.255568][ C0] Code: ff 48 c7 c2 e0 47 06 8c be c9 03 00 00 48 c7 c7 a0 47 06 8c c6 05 5b 77 a2 0e 01 e8 e2 23 5c ff e9 b4 fe ff ff e8 98 61 81 ff 93 12 65 ff 31 ff 89 c3 89 c6 e8 98 5b 81 ff 84 db 0f 85 e0 fd [ 118.275189][ C0] RSP: 0018:ffffc900037ff3c8 EFLAGS: 00000293 [ 118.281270][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000003 [ 118.289256][ C0] RDX: ffff88807fa9be80 RSI: ffffffff828aacf8 RDI: ffff88807fa9be80 [ 118.297234][ C0] RBP: ffff88813fe27180 R08: 0000000000000005 R09: 0000000000000000 [ 118.305209][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000008 [ 118.313188][ C0] R13: 0000000000000001 R14: dffffc0000000000 R15: 0000000000000000 [ 118.321177][ C0] ? pfn_valid+0x3d8/0x4b0 [ 118.325612][ C0] ? pfn_valid+0x3d8/0x4b0 [ 118.330040][ C0] page_table_check_set+0x25/0x580 [ 118.335172][ C0] __page_table_check_ptes_set+0x2c0/0x530 [ 118.341000][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 118.347346][ C0] ? copy_page_range+0x1a80/0x57c0 [ 118.352483][ C0] copy_page_range+0x21c4/0x57c0 [ 118.357489][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.363143][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 118.368444][ C0] ? mas_wr_store_entry+0xa4/0x1d50 [ 118.373681][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.379337][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.384986][ C0] ? lock_acquire+0x1d1/0x380 [ 118.389676][ C0] ? dup_mmap+0xd0a/0x2370 [ 118.394101][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.399757][ C0] ? find_held_lock+0x2b/0x80 [ 118.404457][ C0] ? dup_mmap+0xe66/0x2370 [ 118.408891][ C0] ? dup_mmap+0xe66/0x2370 [ 118.413319][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.418975][ C0] ? down_write+0x146/0x1f0 [ 118.423503][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.429156][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.434804][ C0] ? up_write+0x2dc/0x5b0 [ 118.439154][ C0] dup_mmap+0x1230/0x2370 [ 118.443517][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 118.448203][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 118.454043][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.459700][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.465350][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 118.471193][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.476850][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.482502][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 118.487468][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.493124][ C0] ? lock_acquire+0x1d1/0x380 [ 118.497812][ C0] ? copy_process+0x4806/0x8370 [ 118.502680][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.508344][ C0] copy_process+0x4811/0x8370 [ 118.513063][ C0] ? __pfx_copy_process+0x10/0x10 [ 118.518107][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.523762][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.529414][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.535105][ C0] ? irqentry_exit+0x24d/0xa10 [ 118.539883][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 118.545097][ C0] kernel_clone+0x176/0x9d0 [ 118.549620][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 118.554666][ C0] ? __might_fault+0xc5/0x140 [ 118.559365][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.565017][ C0] ? find_held_lock+0x2b/0x80 [ 118.569719][ C0] ? __might_fault+0xc5/0x140 [ 118.574418][ C0] __do_sys_clone+0xd9/0x120 [ 118.579029][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 118.584266][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.589926][ C0] do_syscall_64+0x123/0x790 [ 118.594537][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.600443][ C0] RIP: 0033:0x7fd97a9c6bd2 [ 118.604868][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 118.624494][ C0] RSP: 002b:00007ffda004a280 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 118.632926][ C0] RAX: ffffffffffffffda RBX: 00007ffda004a280 RCX: 00007fd97a9c6bd2 [ 118.640904][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 118.648878][ C0] RBP: 00007ffda004a40c R08: 0000000000000000 R09: 0000000000000001 [ 118.656853][ C0] R10: 0000555590f2d7d0 R11: 0000000000000246 R12: 0000000000000001 [ 118.664827][ C0] R13: 00000000000927c0 R14: 000000000001be25 R15: 00007ffda004a460 [ 118.672823][ C0] [ 118.675842][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 118.683127][ C0] CPU: 0 UID: 0 PID: 5621 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 118.694166][ C0] Tainted: [W]=WARN [ 118.697963][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 118.708020][ C0] Call Trace: [ 118.711298][ C0] [ 118.714143][ C0] dump_stack_lvl+0x100/0x190 [ 118.718863][ C0] vpanic+0x553/0x970 [ 118.722860][ C0] ? __pfx_vpanic+0x10/0x10 [ 118.727393][ C0] panic+0xd1/0xe0 [ 118.731131][ C0] ? __pfx_panic+0x10/0x10 [ 118.735579][ C0] check_panic_on_warn.cold+0x19/0x34 [ 118.740965][ C0] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 118.747405][ C0] __warn.cold+0x191/0x318 [ 118.751839][ C0] __report_bug+0x30f/0x440 [ 118.756360][ C0] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 118.762806][ C0] ? __pfx___report_bug+0x10/0x10 [ 118.767844][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.773498][ C0] ? console_srcu_read_unlock+0x46/0x60 [ 118.779063][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.784720][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.790371][ C0] ? __wake_up_klogd+0xe5/0x140 [ 118.795235][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.800975][ C0] ? vprintk_emit+0x1c9/0x6b0 [ 118.805680][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 118.810731][ C0] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 118.817175][ C0] report_bug+0xb3/0x220 [ 118.821438][ C0] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 118.827887][ C0] handle_bug+0x16a/0x2a0 [ 118.832241][ C0] exc_invalid_op+0x17/0x50 [ 118.836766][ C0] asm_exc_invalid_op+0x1a/0x20 [ 118.841625][ C0] RIP: 0010:lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 118.848676][ C0] Code: c4 60 5b 5d 41 5c 41 5d 41 5e 41 5f e9 04 c2 d9 ff 83 c5 01 89 2d 10 a3 7c 1a 4c 89 e6 48 c7 c7 c0 45 62 8c e8 51 ca eb ff 90 <0f> 0b 90 e9 92 c0 fd 03 83 c5 01 89 2d ef a2 7c 1a 49 39 c4 73 da [ 118.868298][ C0] RSP: 0018:ffffc900000078f0 EFLAGS: 00010082 [ 118.874383][ C0] RAX: 0000000000000050 RBX: ffff8880548adea8 RCX: 0000000000000000 [ 118.882360][ C0] RDX: 0000000000000050 RSI: ffffffff81ea0339 RDI: fffff52000000f0f [ 118.890337][ C0] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 118.898309][ C0] R10: 0000000000000104 R11: 0000000000000001 R12: ffffc90000007a60 [ 118.906286][ C0] R13: ffff88807fa9be80 R14: 0000000000000001 R15: 0000000000000000 [ 118.914282][ C0] ? vprintk_emit+0x1c9/0x6b0 [ 118.919007][ C0] __debug_object_init+0x2a9/0x3d0 [ 118.924167][ C0] ? __pfx___debug_object_init+0x10/0x10 [ 118.929831][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.935491][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 118.940881][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.946534][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.952185][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 118.957573][ C0] ? __init_swait_queue_head+0xca/0x150 [ 118.963140][ C0] __synchronize_srcu+0x1c3/0x300 [ 118.968182][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 118.973754][ C0] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 118.979313][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.985005][ C0] ? synchronize_srcu+0xa8/0x380 [ 118.989962][ C0] wakeup_source_unregister.part.0+0x12c/0x540 [ 118.996150][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 119.002337][ C0] wakeup_source_unregister+0x1f/0x30 [ 119.007738][ C0] mmc_host_classdev_release+0x42/0x120 [ 119.013312][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 119.019497][ C0] device_release+0xd2/0x270 [ 119.024105][ C0] kobject_put+0x1f7/0x640 [ 119.028552][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 119.035254][ C0] put_device+0x1f/0x30 [ 119.039429][ C0] vub300_inactivity_timer_expired+0x42f/0x550 [ 119.045613][ C0] call_timer_fn+0x198/0x5f0 [ 119.050242][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 119.055383][ C0] ? lock_acquire+0x1d1/0x380 [ 119.060081][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 119.066779][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.072432][ C0] ? mark_held_locks+0x40/0x70 [ 119.077215][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 119.083911][ C0] __run_timers+0x757/0xb00 [ 119.088439][ C0] ? __pfx___run_timers+0x10/0x10 [ 119.093473][ C0] ? clockevents_program_event+0x23e/0x820 [ 119.099315][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.104965][ C0] ? lock_acquire+0x1d1/0x380 [ 119.109662][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.115317][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 119.120380][ C0] run_timer_base+0x114/0x190 [ 119.125071][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 119.130282][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.135940][ C0] run_timer_softirq+0x1a/0x50 [ 119.140732][ C0] handle_softirqs+0x1e6/0x9d0 [ 119.145516][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 119.150812][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.156465][ C0] ? _raw_spin_unlock+0x28/0x50 [ 119.161364][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.167015][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 119.172687][ C0] __irq_exit_rcu+0x16a/0x210 [ 119.177379][ C0] irq_exit_rcu+0x9/0x30 [ 119.181630][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 119.187325][ C0] [ 119.190256][ C0] [ 119.193184][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 119.199179][ C0] RIP: 0010:pfn_valid+0x3d8/0x4b0 [ 119.204213][ C0] Code: ff 48 c7 c2 e0 47 06 8c be c9 03 00 00 48 c7 c7 a0 47 06 8c c6 05 5b 77 a2 0e 01 e8 e2 23 5c ff e9 b4 fe ff ff e8 98 61 81 ff 93 12 65 ff 31 ff 89 c3 89 c6 e8 98 5b 81 ff 84 db 0f 85 e0 fd [ 119.223830][ C0] RSP: 0018:ffffc900037ff3c8 EFLAGS: 00000293 [ 119.229908][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000003 [ 119.237886][ C0] RDX: ffff88807fa9be80 RSI: ffffffff828aacf8 RDI: ffff88807fa9be80 [ 119.245863][ C0] RBP: ffff88813fe27180 R08: 0000000000000005 R09: 0000000000000000 [ 119.253835][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000008 [ 119.261807][ C0] R13: 0000000000000001 R14: dffffc0000000000 R15: 0000000000000000 [ 119.269794][ C0] ? pfn_valid+0x3d8/0x4b0 [ 119.274232][ C0] ? pfn_valid+0x3d8/0x4b0 [ 119.278661][ C0] page_table_check_set+0x25/0x580 [ 119.283793][ C0] __page_table_check_ptes_set+0x2c0/0x530 [ 119.289620][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 119.295966][ C0] ? copy_page_range+0x1a80/0x57c0 [ 119.301119][ C0] copy_page_range+0x21c4/0x57c0 [ 119.306116][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.311770][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 119.317071][ C0] ? mas_wr_store_entry+0xa4/0x1d50 [ 119.322297][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.327955][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.333615][ C0] ? lock_acquire+0x1d1/0x380 [ 119.338332][ C0] ? dup_mmap+0xd0a/0x2370 [ 119.342761][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.348421][ C0] ? find_held_lock+0x2b/0x80 [ 119.353124][ C0] ? dup_mmap+0xe66/0x2370 [ 119.357551][ C0] ? dup_mmap+0xe66/0x2370 [ 119.361976][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.367637][ C0] ? down_write+0x146/0x1f0 [ 119.372160][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.377830][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.383567][ C0] ? up_write+0x2dc/0x5b0 [ 119.387920][ C0] dup_mmap+0x1230/0x2370 [ 119.392281][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 119.396968][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 119.402805][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.408491][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.414141][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 119.419981][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.425640][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.431305][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 119.436278][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.441931][ C0] ? lock_acquire+0x1d1/0x380 [ 119.446625][ C0] ? copy_process+0x4806/0x8370 [ 119.451503][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.457167][ C0] copy_process+0x4811/0x8370 [ 119.461887][ C0] ? __pfx_copy_process+0x10/0x10 [ 119.466921][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.472599][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.478252][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.483905][ C0] ? irqentry_exit+0x24d/0xa10 [ 119.488681][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 119.493897][ C0] kernel_clone+0x176/0x9d0 [ 119.498444][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 119.503495][ C0] ? __might_fault+0xc5/0x140 [ 119.508215][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.513864][ C0] ? find_held_lock+0x2b/0x80 [ 119.518566][ C0] ? __might_fault+0xc5/0x140 [ 119.523269][ C0] __do_sys_clone+0xd9/0x120 [ 119.527878][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 119.533118][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.538784][ C0] do_syscall_64+0x123/0x790 [ 119.543422][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.549332][ C0] RIP: 0033:0x7fd97a9c6bd2 [ 119.553752][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 119.573367][ C0] RSP: 002b:00007ffda004a280 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 119.581793][ C0] RAX: ffffffffffffffda RBX: 00007ffda004a280 RCX: 00007fd97a9c6bd2 [ 119.589769][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 119.597865][ C0] RBP: 00007ffda004a40c R08: 0000000000000000 R09: 0000000000000001 [ 119.605927][ C0] R10: 0000555590f2d7d0 R11: 0000000000000246 R12: 0000000000000001 [ 119.613903][ C0] R13: 00000000000927c0 R14: 000000000001be25 R15: 00007ffda004a460 [ 119.621901][ C0] [ 119.625150][ C0] Kernel Offset: disabled [ 119.629466][ C0] Rebooting in 86400 seconds..